Privacy Statement for Grocery Box
Effective date: August 14, 2026 Version: 1.0
Grocery Box is designed to help you plan and manage grocery shopping without creating an account. This Privacy Statement explains what information is handled by the Grocery Box iOS app, where that information is stored, when the app contacts external services, and the choices available to you.
1. Who we are
Grocery Box is provided by ROSE trading as Rose Development ("Rose Development", "we", "us", or "our"). For the purposes of applicable data-protection law, RoseDev is the controller of personal data that it receives directly, for example when you contact us for support.
Contact details:
Postal address: Dirk Altalaan 8, 8881EV, West Terschelling, The Netherlands
Email: info@rosedev.nl
Telephone: +31 6 53182418
2. Privacy at a glance
Grocery Box:
does not require an account;
does not operate a cloud-sync service for your grocery data;
does not include advertising SDKs or in-app analytics;
does not track you across apps or websites; and
stores your lists and product information locally on your device.
The app connects to external product and price services only when needed for product lookup, product-image download, or product-data refresh. Those services receive the requested barcode and technical connection information, such as your IP address.
3. Information stored locally on your device
The information you enter, create, or save in Grocery Box is stored in the app's local database. Depending on how you use the app, this may include:
grocery lists, saved products, barcodes, quantities, categories, tags, stores, countries, prices, and currencies;
favorites, collections, ratings, notes, stock levels, planned purchase dates, purchase history, and shopping preferences;
product information returned by external product databases, including names, brands, ingredients, allergens, labels, nutrition information, and product images;
product photos that you take with the app; and
app settings such as appearance, accent color, and pending app destination.
RoseDev does not receive this locally stored information through its own servers. It remains under your control on your device unless you choose to share it. Depending on your Apple device and backup settings, app data may be included in an iCloud or computer backup managed by you and Apple.
4. Product, image, and price lookups
When you scan or manually enter a barcode, refresh product information, or scan a previously saved product whose online information is stale, Grocery Box may query one or more public product databases. When you explicitly request online price information, the app may also query Open Prices.
The app may use:
Open Food Facts: https://world.openfoodfacts.org
Open Beauty Facts: https://world.openbeautyfacts.org
Open Pet Food Facts: https://world.openpetfoodfacts.org
Open Products Facts: https://world.openproductsfacts.org
GTIN Hub: https://gtinhub.com
UPCitemdb: https://www.upcitemdb.com
Go-UPC: https://go-upc.com
Open Prices: https://prices.openfoodfacts.org
A request can disclose the following information directly to the service being contacted:
the barcode being looked up;
your IP address and standard network connection data;
the date and time of the request; and
technical request information, including the Grocery Box app identifier and version.
Product images are downloaded from URLs returned by these services. The operator hosting an image can therefore also receive your IP address and standard request information. Grocery Box does not send your locally written notes, shopping history, ratings, collections, or locally taken product photos to these lookup services.
These external services are independent operators and process information under their own terms and privacy notices. Their practices, availability, data accuracy, and retention periods are outside RoseDev's control. Relevant notices include:
Open Food Facts privacy information: https://world.openfoodfacts.org/privacy
UPCitemdb privacy policy: https://www.upcitemdb.com/privacy
Go-UPC privacy policy: https://go-upc.com/privacy-policy/
Please consult the other providers' websites for their current privacy information before using an online lookup.
5. Camera access and product photos
Grocery Box requests camera access only when you choose to scan a barcode or take a product photo. Photos taken through the app are resized and stored locally with the relevant product. Grocery Box does not upload your camera roll or locally taken product photos to RoseDev.
You can deny or revoke camera access in iOS Settings. Barcode scanning and taking product photos will then be unavailable, but you can continue to enter product information manually.
6. Notifications
If you allow notifications and schedule a purchase, Grocery Box creates a local notification on your device. Notification scheduling is handled by iOS. You can change or disable notification permission at any time in iOS Settings.
7. Sharing and importing
Grocery Box shares information only when you actively choose a share action. You can share a grocery list with product images, as plain text, or as a Grocery Box list file. The destination app, person, or service you select receives and processes the shared information under their own terms and privacy practices.
When you open a compatible Grocery Box list file, the app reads the file and adds or updates the included products in its local database. Importing does not automatically send the file to RoseDev.
8. Support communications
If you email us or otherwise contact us for support, we receive the information you choose to provide, such as your email address, message, and any attachments. We use it to respond, troubleshoot, protect the app and our rights, and comply with legal obligations. Please do not send sensitive personal information that is not necessary for your request.
We process support communications because it is necessary to respond to your request and for our legitimate interests in providing support and maintaining a secure, reliable app. We retain them only for as long as reasonably necessary for those purposes and any applicable legal requirements.
9. Legal bases for processing
Where the General Data Protection Regulation (GDPR) or similar law applies, our legal bases are:
Performance of a contract or steps at your request: to provide app functionality or respond to a support request.
Legitimate interests: to maintain, secure, troubleshoot, and improve Grocery Box and to handle legal claims, provided those interests are not overridden by your rights.
Legal obligation: where we must retain or disclose information to comply with applicable law.
Consent: where the law requires consent. iOS also asks for your permission before camera or notification access is enabled.
External product and price providers determine their own legal bases for their processing.
10. Retention and deletion
Locally stored information remains on your device until you edit or delete it, permanently remove archived products, remove the app and its data, or erase the device. Copies may remain temporarily in device backups until those backups are deleted or expire under your Apple backup settings.
Information that you share with another person, app, or service is governed by that recipient's retention practices. Network logs retained by an external lookup or image service are governed by that provider's policy.
11. Security
Grocery Box relies on iOS security controls and stores its database within the app's sandbox. Online requests use encrypted HTTPS connections. No method of storage or transmission is completely secure, so absolute security cannot be guaranteed. Protect your device with a passcode and keep iOS up to date.
12. International data transfers
RoseDev does not operate a server to receive your grocery database. External lookup, image, email, backup, or sharing providers may process information outside your country. Those providers are responsible for explaining and safeguarding any international transfers they make.
13. Children's privacy
Grocery Box is a general-audience shopping utility and does not offer accounts, public profiles, advertising, or social features. RoseDev does not knowingly collect personal data from children through the app. Parents or guardians should supervise a child's use of online lookup and sharing features.
14. Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or object to our processing of your personal data, and to receive a portable copy. You may also have the right to withdraw consent and lodge a complaint with a data-protection authority.
Because RoseDev does not receive your local Grocery Box database, the quickest way to exercise control over that data is directly in the app or by deleting the app and its data through iOS. For personal data contained in support correspondence, contact info@rosedev.nl. We may need to verify your identity before completing a request.
If you are in the Netherlands, you may contact the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): https://autoriteitpersoonsgegevens.nl
Requests concerning data held by an external lookup, image, backup, or sharing provider must be directed to that provider.
15. Changes to this statement
We may update this Privacy Statement when Grocery Box's features, service providers, or legal obligations change. We will publish the revised statement and update the effective date. Material changes will be communicated in an appropriate manner where required by law.
16. Contact
For privacy questions, requests, or complaints, contact:
ROSE, trading as Rose Development Dirk Altalaan 8, 8881EV, West Terschelling, The Netherlands Email: info@rosedev.nl Telephone: +31 653182418