Privacy Policy

1. Who we are

Grumpy Gourmet is an iOS app published by Nemetona Holdings, LLC, a Florida limited liability company. References to "we," "us," or "our" in this policy refer to Nemetona Holdings, LLC and the brands it operates, including Grumpy Gourmet, Sourdough Queen, Kombucha King, and Grumpy Gardener.

For any privacy-related questions, email hello@grumpygourmet.app.

2. What data the app handles

The app handles the following types of data. Most of it never leaves your device.

Data stored only on your device

The following data is created by you and stored locally in the app's storage on your iPhone or iPad. We do not have access to this data:

• Recipes you add, import, or create
• Photos you attach to recipes
• Items in your pantry
• Your meal plan
• Your grocery list
• Your cooking history, including recipes marked as cooked, dates cooked, and recipes marked as keepers
• Your Cook Profile selection
• App settings and preferences, including theme, household size, ZIP code if provided, and reminder preferences

When you delete the app, this data is deleted with it unless you have iCloud sync enabled (see below).

Data synced through your own iCloud account (premium only)

If you subscribe to Grumpy Gourmet Premium and turn on iCloud sync in Settings, your recipes, pantry, meal plan, and grocery list are synced through your own iCloud account using Apple's CloudKit service.

• The data is stored in your iCloud account's private database, which only you can access.
• We do not have a copy of this data on any server we control. We cannot read it, back it up, or restore it.
• Apple's handling of your iCloud data is governed by Apple's privacy policy, not ours.
• If you turn off iCloud sync, the data stays on your current device.
• If you lose your device and have not enabled iCloud sync, your data cannot be recovered.

Anonymous usage analytics (inside the app)

The app uses PostHog, a third-party analytics service, to track anonymous events that help us understand how the app is used. We track the following 8 events:

• recipe_imported — a recipe was added
• recipe_planned — a recipe was added to the meal plan
• recipe_cooked — a recipe was marked as cooked
• cook_now_opened — the Cook Now feature was opened
• what_can_i_make_opened — the What Can I Make? feature was opened
• weeknight_mode_used — Weeknight Mode was selected
• paywall_shown — the upgrade screen was displayed
• subscription_started — a premium subscription was activated

We do not send any of the following to PostHog:

• Your name, email address, or any other personal identifier
• Device identifiers that persist across sessions, such as advertising IDs or device serial numbers
• The contents of your recipes, pantry, or meal plan
• Your location
• Your IP address in any form retained and tied to your identity

PostHog is used only inside the Grumpy Gourmet iOS app. The grumpygourmet.app website does not use PostHog or any comparable analytics service.

PostHog's privacy practices are governed by their own policy, which you can review at posthog.com/privacy.

Subscription information (handled by Apple)

If you subscribe to Grumpy Gourmet Premium, the transaction is processed entirely by Apple through your Apple ID and the App Store's StoreKit system. We receive a receipt from Apple confirming your subscription status. We do not receive your credit card number, your billing address, or your Apple ID email.

Your subscription is managed in your Apple ID account settings. You can cancel at any time through Apple's Subscriptions settings. Apple's handling of your payment information is governed by Apple's privacy policy.

Text recognition on receipts and recipe photos

When you use the receipt import feature or the recipe scanning feature, the app uses Apple's Vision framework to extract text from the photo. This processing happens entirely on your device. The photo is not sent to any server, including ours.

AI coaching features

Ava's coaching voice and the app's suggestions are generated from content that is bundled with the app or stored locally on your device. The app does not send your data, recipes, cooking history, or any other information to any third-party AI service such as OpenAI, Anthropic, or Google.

Future premium features may include optional AI-generated personal cooking assessments. If and when those features ship, this policy will be updated to describe exactly what data is processed and where. No such feature is active in the current version of the app.

Apple Reminders integration (optional)

If you enable the Reminders bridge feature, the app will read items from a Reminders list you select so it can import them into your grocery list or pantry. This uses Apple's EventKit framework and requires your explicit permission. The data is read from your device's Reminders app directly into the app's local storage. Nothing is sent to us or any third party.

Share Extension and Widgets

The Share Extension (used when you share a URL or text to Grumpy Gourmet from another app) and the home screen widgets access a small, shared storage area on your device called an App Group. This is an Apple-provided mechanism. The data in the App Group is only accessible by the main app and its extensions, and it never leaves your device.

3. Website data collection

The grumpygourmet.app website collects one type of data: if you sign up for launch notifications, we collect your email address. We use it to send you one email when the app ships. No newsletters, no drip campaigns.

To have your email removed from the launch notification list, email hello@grumpygourmet.app and we will delete it.

4. What we don't do

To be explicit about things we do not do:

• We do not show advertisements in the app.
• We do not sell or rent your data to anyone.
• We do not share your data with advertisers, data brokers, or marketing companies.
• We do not track you across other apps or websites.
• We do not build a profile of who you are.
• We do not have a database of users, because you do not have an account with us.

5. Children's privacy

Grumpy Gourmet is not directed at children under the age of 13 and does not knowingly collect data from them. The app is intended for adult home cooks.

6. Your rights

Because the app does not collect personal data tied to your identity, most traditional data rights don't have a corresponding action for us to take — we don't have your data to access, delete, or correct.

You have full control over your data directly on your device:

• To view your data: open the app.
• To delete your data: delete items individually in the app, or delete the app from your device.
• To export your data: use the export features in the app's Settings to share your recipes or pantry.
• To stop iCloud sync: turn off iCloud sync in the app's Settings. Your data will remain on the current device but will no longer sync.
• To opt out of anonymous analytics: email hello@grumpygourmet.app. Because we don't have a user identifier, the mechanism is imperfect, but the events themselves contain no information that identifies you.

California residents (CCPA)

Under the California Consumer Privacy Act, California residents have rights to know what personal information is collected, to request deletion, and to opt out of the sale of personal information.

Because we do not collect personal information tied to your identity and we do not sell personal information, these rights are substantially satisfied by the app's design. If you are a California resident and have a specific CCPA request, email hello@grumpygourmet.app.

European Union and United Kingdom residents (GDPR / UK GDPR)

Under the General Data Protection Regulation and its UK equivalent, residents of the EU and UK have rights to access, rectify, erase, restrict, and port their personal data, and to object to processing.

Because the app does not collect personal data tied to your identity, these rights are substantially satisfied by the app's design. The anonymous analytics we collect through PostHog do not qualify as personal data under GDPR because they cannot be linked to an identified or identifiable individual.

If you are an EU or UK resident and have a specific GDPR request, email hello@grumpygourmet.app. You also have the right to lodge a complaint with your local data protection authority.

7. Data retention

• Data on your device: kept until you delete it or delete the app.
• Data in your iCloud: governed by Apple's retention policies. Managed in your Apple ID settings.
• Anonymous analytics in PostHog: retained by PostHog according to their retention policies.
• Email addresses on the launch notification list: kept until you ask us to delete your address or until the list is no longer needed after launch.

8. Data security

We take reasonable steps to protect the limited data we handle:

• The app uses Apple's standard iOS data protection, which encrypts app data on your device when the device is locked.
• iCloud sync uses Apple's CloudKit infrastructure, which encrypts data in transit and at rest.
• Analytics events sent to PostHog are transmitted over HTTPS.

No system is perfectly secure, and we cannot guarantee absolute security. However, because we do not maintain a database of users or a copy of your recipe data, the scope of any potential security incident involving us directly is very limited.

9. International data transfers

PostHog may store analytics events on servers outside your country of residence. Because these events contain no personal identifiers, the transfer does not implicate personal data under most privacy regimes.

Apple's iCloud service may store your synced data in data centers in multiple countries. Apple's handling of international transfers is governed by Apple's policies.

10. Changes to this policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Material changes will be communicated through an update to the app or a notice on grumpygourmet.app. Your continued use of the app after a policy update constitutes acceptance of the updated policy.

11. Scope

This policy covers Grumpy Gourmet, Sourdough Queen, Kombucha King, and Grumpy Gardener — all apps and websites operated by Nemetona Holdings, LLC.

12. Contact

Questions, concerns, or requests related to this policy:

• Email: hello@grumpygourmet.app
• Publisher: Nemetona Holdings, LLC
• Business address: [REGISTERED AGENT ADDRESS TO BE INSERTED WHEN SERVICE IS PURCHASED]
• Website: grumpygourmet.app

This policy is governed by the laws of the State of Florida, United States, without regard to its conflict of laws principles.