Privacy Policy

Last updated: September 13, 2026

Feji ("we", "us", or "our") provides a grocery-list application and related website (together, the "Service"). This policy explains what information we process when you use the Service, why, and what control you have over it.

Feji is available in the United States and Canada only, and is operated from California, United States. Feji is the party responsible for the personal information described in this policy, and you can reach us through our contact page.

1. Information We Collect

• Account information: your name, email address, and profile image URL, as provided by Sign in with Apple or Google Sign-In, along with the account identifier those services issue.
• Grocery content you create: list names, items, quantities, notes, prices you enter, store assignments, aisle order, any budget you set on a list, checked status, and your completed shopping-trip history, including trip totals.
• Trip payment records. When a trip on a shared list is completed, we record which member paid for it and the total they entered, so the split can be calculated. This is the amount you typed in, not information from any bank or card.
• Product barcodes you scan. The barcode number is sent to our service for product lookup.
• Recipe searches. Text you type when searching recipes, and ingredient names you search by, are sent to our service and passed to our recipe data provider.
• Recipe links you share into Feji. When you share a web page to Feji, the address is sent to our service so the page can be fetched and its ingredients read. For social posts, see section 6.
• Notification tokens. If you enable notifications, your device's push token is stored on your account so we can deliver them, along with which categories of notification you have switched on.
• Technical information: app version, platform, the date you were last active, and diagnostic details when a crash or error occurs.
• Website messages. If you use our contact form, the name, email address, and message you submit are sent to our email provider.

Feji does not ask for or collect bank credentials, financial-account information, payment-card numbers, or receipt photos. Prices, budgets, and trip totals are figures you type in yourself to track grocery spending. They are not drawn from any bank, card, or payment account, and Feji cannot move money.

We collect this information directly from you, and from Apple or Google when you choose to sign in with them.

2. What Stays on Your Device

Several parts of Feji are deliberately local. The following are stored on your iPhone and are never sent to our servers:

• Food for use-it-up reminders. What your trips brought home, when, how long each item is estimated to keep, and whether you marked it used or asked to be reminded again. The reminders are scheduled by your device, for your device.
• Your meal plan. The meals you have planned for the week.
• Your recipe favorites, including the ingredients and photo of any recipe you imported from a link.
• Payment details for splitting. A phone number you save for someone you split with, and your own Cash App tag, stay in this app on this device. We do not upload them, and we do not show them to anyone else on the list.
• Your cached list, so the app keeps working in a dead spot in the store.

Because these are local, they are not part of the data export described in section 17, and we cannot recover them if you lose the device. Signing out removes them from the device, except the payment details for splitting, which stay until you remove them or delete the app.

3. How We Use Information

• Authenticate your account and protect access to your data.
• Store and synchronize grocery lists across your signed-in devices.
• Organize items by aisle, maintain shopping history, and generate repeat-purchase suggestions.
• Calculate spending insights and price history from the trips and prices you recorded.
• Look up product details for a barcode you scan, recipes you search for, and ingredients on a recipe link you share in.
• Share lists with people you invite, show you lists others have invited you to, and keep them in sync in real time while a shared list is open.
• Work out who owes what on a shared list from the trips its members completed.
• Send notifications you have asked to receive.
• Enforce the limits of your plan.
• Diagnose crashes and errors, prevent abuse, and keep the Service secure and working.

We rely on your consent for optional features, including camera, location, and notifications, each of which you can decline or turn off at any time in your device settings without losing access to the rest of the Service. Everything else we do with your information is necessary to provide the Service you have asked us for, or to keep it secure. We do not use your information for advertising, and we do not make automated decisions about you that produce legal or similarly significant effects.

4. Sharing Lists With Other People

Shared lists are off by default and require a Pro plan. If you choose to use them, information about you becomes visible to the other people on that list:

• If you join someone's list, that list's owner can see your name and your email address, along with your role on the list.
• If you own a list and create an invite link, anyone holding that link can see your name and the list's name before they join. Your email address is never shown to them.
• Everyone on a shared list can see the list's contents: its items, stores, prices, budget, aisle order, and trip history.
• Because shared lists sync in real time, other members see your changes as you make them, not only when they next open the app.

Invite links are single-use and expire after 14 days. You can remove a member at any time, or leave a list you joined. Either way, the removed person's details are cleared from the list. If you delete your account, your name and email are removed from every list you had joined.

5. Splitting the Cost of a Shop

Splitting is an optional feature of shared lists. It is a tally and nothing more: Feji does not process payments, move money, or connect to any bank, card, or payment account.

• The calculation uses the trips completed on that shared list: who paid, and the total they entered. Every member of the list can see that breakdown, including which member paid for which trip.
• The split payload carries display names only. It does not carry email addresses or payment details.
• When you ask someone for money, Feji opens Venmo, Cash App, or the Messages app with the amount and recipient filled in. You send it, not us. We do not receive confirmation of, or any record of, whether a payment happened.
• Feji does not record that a debt was settled unless you tell it so in the app.

A phone number you save for a person you split with, and your own Cash App tag, are held on your device only, as described in section 2. Someone else's payment details are their information, not the list's, so they are never uploaded or shared with the rest of the household.

6. Recipes and Shared Links

You can search recipes in the app, or share a link into Feji from another app to get its ingredients.

• Recipe pages. The address you share is sent to our service, which fetches the page and reads its published ingredient list. We do not send your name, email, or account identifier to the site being read.
• Social videos. Links from TikTok, Instagram, and YouTube are never fetched by our servers. Your device reads the post's caption itself and sends only that text, so the platform sees a request from your phone rather than from us.
• Imported recipes you favorite. The recipe's title, ingredients, and a copy of its photo are saved on your device, because the original link can expire. This copy is not uploaded.
• Recipe and product images are loaded by your device directly from the provider, which means your device's IP address is visible to them when an image loads.

7. On-Device Intelligence

Feji uses Apple Intelligence on iPhones that support it, in two places: reading a social caption into an ingredient list, and writing a short summary of your grocery spending.

This processing happens on your device using Apple's on-device model. Your spending figures are not sent anywhere to produce the summary. For a shared caption, only the resulting ingredient lines are sent to our service, to be split into quantity and name the same way every other import is. If your device does not support Apple Intelligence, Feji falls back to ordinary text parsing and nothing is lost but a little accuracy.

We do not send your data to any third-party AI service, and we do not use your content to train any model.

8. Camera Access

Camera access is optional and used only when you open the barcode scanner. Feji reads supported barcode values from the live camera view on your device. Camera images and video are never uploaded or stored by Feji.

9. Location Access

Location access (while using the app) is optional and used only to suggest nearby grocery stores when you add a store. Your approximate position sets the map search region on your device, and store suggestions come from Apple Maps. Feji's servers never receive or store your location, and the app does not track your location in the background. If you decline location access, store suggestions still work without the nearby bias.

10. Contacts

Feji does not request access to your contacts and cannot read your address book.

When you save a phone number for someone you split with, you can pick them from a contact sheet provided by iOS. That sheet runs outside Feji: iOS returns only the single person you chose, and only what you selected about them. The number is then stored on your device as described in section 2. Similarly, when Feji opens the Messages app to send a reminder, the recipient field is completed by iOS, not by us.

11. Notifications

Notifications are optional, and Feji sends two kinds, each with its own switch in Settings:

• Use-it-up reminders, sent the evening before, or the morning of, the last day food you bought is estimated to keep. These are scheduled and delivered by your own device from what is stored on it, and their buttons are handled on the device too. Nothing about them reaches our servers.
• Account updates, such as a waitlist approval or a change to your account. These are sent by our servers to your device's push token. Switching this off tells our servers to stop sending.

You can turn all notifications off in iOS Settings at any time, and you will keep full use of the rest of the Service.

12. Storage, Security, and Where Your Data Is Held

Account and grocery data are stored using Firebase and Google Cloud infrastructure. The app talks to our servers over encrypted connections, and access to a shared list is checked on our servers rather than trusted to the app. Copies held on your device for offline use, including the one the home screen widget reads, are protected by iOS and stay private to Feji.

Feji is operated from the United States, and your information is stored and processed on servers in the United States. If you are in Canada, this means your information is held outside Canada and may be accessible to United States courts, law enforcement, and government authorities under United States law. By using the Service you understand that your information will be handled in the United States.

No service can promise perfect security, but we limit what we collect, keep server-side checks on access, and scrub personal information out of our diagnostic reporting.

13. Third-Party Services

• Firebase and Google Cloud: authentication, server-side data storage, real-time sync for shared lists, and abuse prevention.
• Google Sign-In and Sign in with Apple: account authentication.
• Firebase Cloud Messaging and Apple Push Notification service: delivering account notifications you enable.
• Apple Maps: nearby-store suggestions. Your search text and, if you allow location, your approximate position are processed by Apple to return store names.
• Open Food Facts: barcode product information. Only the barcode number is sent from our servers. Product images are loaded by your device directly from Open Food Facts, which means your device's IP address is visible to them when an image loads.
• TheMealDB: recipe information. Your recipe search text and ingredient names are sent from our servers, without your name, email, or account identifier. Recipe images are loaded by your device directly from TheMealDB.
• Recipe websites you share in: when you share a recipe page to Feji, our servers request that page from the site that hosts it, in the same way a browser would. Nothing about your account is sent.
• Venmo, Cash App, and Messages: used only to open those apps with a request prefilled when you choose to ask someone for money. Feji sends nothing to them itself and receives nothing back.
• Sentry: crash and error diagnostics, hosted in the United States. Reports include your account identifier so we can recognize repeat failures, but we configure them to exclude your email address, IP address, location, search text, and grocery-list content.
• EmailJS: delivering messages submitted through our website contact form.
• Vercel: website and API hosting.

We do not sell your personal information, we do not share it for cross-context behavioral advertising, and we do not disclose it to third parties for their own direct marketing purposes. If you are a California resident, this paragraph is our response under California's "Shine the Light" law (Civil Code § 1798.83).

14. Do Not Track and Cross-Site Tracking

Feji does not track you over time or across third-party websites or apps. We use no advertising networks and no analytics services. Because we do not perform the tracking that "Do Not Track" is designed to stop, we do not respond differently to Do Not Track browser signals.

We do not permit third parties to collect personally identifiable information about your online activities over time and across different websites through the Service. The third parties listed above receive only what is described there, for the purpose described there.

15. How Long We Keep Information

• Account and grocery data: kept while your account is active, and removed when you delete your account.
• Shopping-trip history: only a limited number of your most recent trips per list is kept. As you complete new trips, the oldest are removed automatically and permanently. Spending insights, price history, and the split are all calculated from the trips still held, so they shorten as older trips age out.
• Invite links: expire 14 days after creation, and are removed when the list is deleted or its last member is removed.
• Product and recipe lookups: kept for up to 30 days so we make fewer outbound requests. These are not linked to your account, and a recipe search is stored scrambled rather than as the words you typed.
• Shared links: a page fetched for an ingredient import is read and discarded. We do not keep a history of the links you have shared into Feji.
• Diagnostic reports: retained by our diagnostics provider for a limited period under their retention schedule, then deleted.
• Administrative records: where an administrator changes an account's status, we keep a record of that action for security and accountability. These records identify accounts by account identifier only, not by name or email.
• On-device data: the food behind use-it-up reminders, your meal plan, and your favorites stay until you sign out or delete the app, and saved payment details stay until you remove them or delete the app. Planned meals age out about a week after the date they were planned for.

16. Deleting Your Account

You may permanently delete your account from Settings in the app. We ask you to sign in again first, so that nobody else can delete your account from an unattended device.

Deletion removes your account record, your grocery lists, your shopping history and trip payment records, your notification tokens, your sign-in account, and your name and email address from any lists you had joined. It also revokes any invite links you had created.

Deleting your account signs you out, which removes the on-device data in section 2 from that iPhone except saved payment details for splitting. Delete the app to remove those too.

Two things persist afterward: backup copies held by our infrastructure provider, which expire on their own schedule, and the administrative records described above, which identify you only by account identifier. Deletion is permanent and we cannot recover a deleted account.

17. Your Privacy Rights

Wherever you live, you can:

• Access and take a copy of your information. Settings includes a data export that returns your profile, your lists, their items, stores, and trips, and the lists you have joined, in a portable JSON file. Exports are rate-limited to protect the Service, and the app tells you when the next one is available.
• Correct your information. You can edit your display name and all of your grocery content directly in the app.
• Delete your information. See "Deleting Your Account" above.
• Withdraw consent for camera, location, or notifications at any time in your device settings.
• Ask us questions or complain about how we handle your information, through our contact page.

If you would rather make any of these requests in writing instead of using the in-app controls, contact us and we will handle it. We will not charge you or degrade your experience for exercising these rights.

18. Additional Information for Canadian Users

We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act and applicable provincial privacy legislation, including Quebec's Law 25.

The person responsible for protecting personal information at Feji, our Privacy Officer under Quebec's Law 25, can be reached through our contact page.

As described above, your information is stored in the United States. If we become aware of a privacy breach that creates a real risk of significant harm, we will notify you and the appropriate regulator, being the Office of the Privacy Commissioner of Canada, and the Commission d'accès à l'information du Québec for Quebec residents, as the law requires, and keep a record of the breach.

If you are not satisfied with our response to a privacy concern, you may complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca, or, if you live in Quebec, to the Commission d'accès à l'information du Québec at cai.gouv.qc.ca.

This policy and our Terms are currently provided in English only.

19. Children's Privacy

Feji is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has given us personal information, contact us and we will delete it.

20. Changes to This Policy

We may update this policy as the Service changes. When we do, we will revise the date at the top of this page. If a change materially affects how we handle information we have already collected from you, we will tell you in the app, or by email, before it takes effect. The current version is always posted here.

21. Contact

Questions, privacy requests, and complaints can be submitted through our contact page.