Privacy Policy
Last updated 2 October 2026
This policy covers the Grocento mobile app and this website. It describes what we collect, why we need it, who else sees it, and how to get it back or get rid of it.
Who we are
Grocento is a grocery ordering service. You tell us about your household once; we draft your shopping list, show what nearby stores charge for it, and arrange delivery of the order you confirm.
The data controller is [LEGAL ENTITY NAME], [REGISTERED ADDRESS]. When this policy says "we" or "Grocento", it means that company. Reach us at privacy@grocento.com.
What we collect
Everything below is either given to us by you, produced by your use of the app, or returned by a service you chose to connect.
| Data | Where it comes from |
|---|---|
| Account — name, email address, password (stored only as a one-way hash), profile picture, whether your email and phone are verified, your referral code | You, at signup |
| Social sign-in profile — name, email address and profile picture from Google, Facebook or Apple | The provider, if you sign in that way. Your picture is copied once at signup and never refreshed afterwards; we never receive your password, and we never post anything. |
| Delivery addresses — label, street address, latitude and longitude, and the Google Places identifier for the address | You, when you save or pick an address |
| Household preferences — household size and who it includes, dietary preferences, allergies, cuisines, weekly spending limit, shopping frequency, preferred grocers | You, during onboarding and whenever you edit them |
| Orders — items and quantities, price, discount, currency, store, status, delivery address and coordinates, chosen delivery window, and delivery time | Produced when you place an order |
| Payment references — your customer and payment method identifiers at our payment processor, the card brand and expiry month and year, and the amount, currency and status of each transaction | Our payment processor. Full card numbers and security codes never reach our servers. |
| Wallet and referrals — credit balance, every credit and redemption with its running balance, and the link between the person who referred and the person who joined, including the invited person's name and email if you entered them | Produced by referrals and completed orders |
| Devices — push notification token, platform (Android or iOS), and when the device was last seen | Your device, if you allow notifications |
| Support messages — the conversations and messages you exchange with our team in the app | You and our support staff |
| Uploads — any image or file you attach | You |
| Technical logs — IP address, request time, app version and error traces, kept by our servers | Automatic, for security and debugging |
We do not sell personal information, we do not share it for cross-context behavioural advertising, and we do not run advertising trackers or third-party analytics in the app or on this site.
Diet, allergies and beliefs
Some of what you tell us during onboarding is treated as sensitive personal information in several countries: food allergies are health data, and halal or kosher preferences can reveal a religious belief.
We ask for these only to keep unsuitable items out of your shopping list. We use them for nothing else, we do not use them to profile or target you, and we pass them to no one. You can change or clear these answers at any time in the app under preferences, and you can choose "no restriction" and leave the allergy list empty — the app still works, it just stops filtering for you.
Where the law requires consent for this kind of data, saving these preferences is how you give it, and clearing them withdraws it.
Why we use it
| Purpose | Basis |
|---|---|
| Creating and securing your account, signing you in | Performing our contract with you |
| Drafting your shopping list from your preferences | Performing our contract; consent for allergy and belief data |
| Finding stores near you and pricing your basket | Performing our contract |
| Taking payment, issuing refunds, preventing fraud | Performing our contract; our legitimate interest in preventing fraud |
| Delivering your order and telling you where it is | Performing our contract |
| Running wallet credits and referrals | Performing our contract |
| Answering your support messages | Performing our contract |
| Keeping the service up, secure and debuggable | Our legitimate interest in a working, secure service |
| Tax, accounting and other record-keeping | Legal obligation |
Location
Grocento needs to know where to deliver, and which stores are close enough to deliver there. That comes from the addresses you save. If you grant the location permission, the app can also offer your current position as a shortcut when you are adding an address — that is a convenience, and you can decline it and type the address instead.
We do not track your location in the background, and we do not collect location when the app is closed.
To turn an address into coordinates and to find nearby branches, we send the address or the coordinates to Google Maps Platform. Results are cached for a short time against a rounded, approximate location so that people in the same neighbourhood share one lookup.
Payments
Card payments are handled by Stripe. Your card details are entered into Stripe's own secure components and go straight to Stripe — we never see or store the card number, expiry or security code.
What we store is the reference Stripe gives us for your saved card, the brand and expiry month and year so you can recognise it in a list, and the amount, currency and outcome of each charge or refund. Stripe processes your payment data as its own controller under its privacy policy.
Notifications
If you allow notifications, your device registers a push token with us through Firebase Cloud Messaging so we can tell you when an order is packed, on the way, delivered, or when credit lands in your wallet.
Turn notifications off in your device settings at any time; we delete the token when the device stops accepting messages. We also send email about your account — verification, password resets and order confirmations. Those are service messages, not marketing, and they cannot be turned off while your account is open.
Who we share with
Only the services needed to run Grocento, each for one job:
- Grocery stores and their ordering services — your order, delivery address and delivery window, so the order can be picked, packed and driven to you.
- Stripe — payment processing and refunds.
- Google — Maps Platform for addresses and nearby branches, Firebase Cloud Messaging for push notifications, and Google Sign-In if you use it.
- Apple and Meta — only if you choose to sign in with Apple or Facebook, and only for that sign-in.
- Amazon Web Services — hosting and file storage.
- Our email provider — sending account and order email.
Beyond that, we disclose personal data only when the law requires it, to protect our rights or someone's safety, or — with notice to you — to a buyer if the business is sold.
How long we keep it
- Account and preferences — while your account is open, then deleted as described below.
- Orders and payment records — up to seven years after the order, because tax and accounting law requires it. These survive account deletion in reduced form.
- Support conversations — two years after the last message.
- Device tokens — until the device stops accepting notifications or you sign out.
- Technical logs — 90 days.
Your choices
Wherever you live, you can ask us to:
- give you a copy of the personal data we hold about you;
- correct anything wrong — most of it you can edit yourself in the app;
- delete your account and its data;
- stop using your data for a particular purpose, or withdraw a consent you gave;
- receive your data in a portable, machine-readable file.
Email privacy@grocento.com and we will answer within 30 days. We will not charge you or treat you differently for asking.
If you are in the UK or EU you may also complain to your national data protection authority. If you are in California, we do not sell or share your personal information as those terms are defined by the CCPA, and the rights above cover the CCPA rights to know, delete, correct and opt out.
Deleting your data
To delete your Grocento account and the personal data in it, email privacy@grocento.com from the address on your account with the subject Delete my account. We confirm within 3 working days and complete the deletion within 30 days.
Deleting removes your profile, saved addresses, household preferences, saved payment methods, wallet balance and ledger, device tokens, uploads, and support conversations.
Two things remain. Order and payment records are kept in reduced form, detached from your profile, for the seven years that tax and accounting law requires. Backups roll off on their own schedule and are fully replaced within 90 days.
If you signed in with Facebook, Google or Apple, deleting your Grocento account does not touch your account with them. Removing Grocento from that provider's app settings stops the sign-in but does not by itself delete your Grocento data — email us as above for that.
Children
Grocento is for adults who can enter a payment card. It is not directed at children, and we do not knowingly collect data from anyone under 13. If you believe a child has given us personal data, email privacy@grocento.com and we will delete it.
Security
Traffic between the app and our servers is encrypted with TLS. Passwords are stored as salted one-way hashes and cannot be read back, by us or anyone else. Sensitive credentials held for grocery store integrations are encrypted at rest. Access to production systems is limited to staff who need it.
No service can promise perfect security. If a breach affects your personal data we will tell you and the relevant regulator as the law requires.
Where data is stored
Grocento's servers and file storage are in the United States, and our service providers may process data there and in other countries. If you are in the UK or EU, transfers out are covered by the European Commission's standard contractual clauses or another approved safeguard.
Changes
When this policy changes we update the date shown at the top of this page. If a change materially affects how we use your data, we will tell you in the app or by email before it takes effect.
Contact
[LEGAL ENTITY NAME]
[REGISTERED ADDRESS]
Privacy: privacy@grocento.com
Support: support@grocento.com
This policy is governed by the laws of [JURISDICTION].