Recall Groceries← Back to scanner
Privacy

Your grocery photo is not our product.

The service is designed to work without accounts, advertising profiles, or stored receipt images.

Photos

Your browser resizes and re-encodes the photo, which removes embedded camera metadata. The compressed image is sent to our server and then to OpenAI for one analysis request with response storage disabled. We do not write it to our database, object storage, or application logs.

Temporary session data

The product list and results are stored in this browser tab’s session storage so an accidental refresh does not erase your work. Choose “Start over” or close the tab to clear that session.

Abuse prevention and metrics

We store a daily keyed hash derived from network information to enforce scan and recall-check limits; the raw address is not stored. During successful recall-data updates, we delete this daily quota state once it is more than seven days old. Aggregate counts record successes, failures, response time, and match categories without receipt text or product details.

Service providers

Cloudflare hosts the service and recall index. OpenAI processes the photo for product extraction. Their own service terms and retention controls may also apply; disabling response storage is not the same as a contractual zero-data-retention agreement.