Short version: your produce photos and your kitchen stay on your phone. We do not sell anything about you, we do not run ads, and we do not build an advertising profile from your groceries.
The one thing that leaves your device: when you scan, the photo is sent to an AI provider to be read, and the result comes back. That is the only way the scan can work. We do not keep the photo.
Photos you scan
- In the app: your scan photos are stored on your device only. They are not uploaded to us and they are not part of any backup we hold.
- To read a scan, the image is sent to our AI provider, OpenRouter, which routes it to a vision model (currently OpenAI's GPT-4o family and Google's Gemini). They process the image to return a result. We do not store the image on our servers, and we do not attach your name or email to it.
- The web checker on this site works the same way: your photo goes straight to the model for reading and is not saved by us.
- If we ever want to use photos to improve ripeness accuracy, we will ask you first, in plain words, and you will be able to say no.
Your account, if you make one
You can scan, track produce and get your first alert with no account at all. If you do create one, we store your email address and a password (hashed, never in plain text) with our hosting provider, Supabase.
An account also lets you back up your kitchen so it survives a new phone, and share a kitchen with your household. That backup contains the produce you tracked and whether you ate or tossed it. Nothing else.
This website
We count visits with Plausible, which is cookieless and stores no personal data. It tells us how many people opened a page and which ones tried the checker. It does not follow you anywhere else, and there is nothing here to sell.
Anonymous usage data
We record basic events so we can tell whether the app works: that a scan happened, that an item was added, that a paywall was seen. These are tied to a random identifier generated on your device, not to your name, your email or your phone's advertising ID. We use them to fix what is broken and to decide what to build.
Purchases
Subscriptions are handled by RevenueCat and by Google Play. We never see your card details. RevenueCat tells us whether a subscription is active, and nothing more.
The launch email list
If you give us your email on this site, it is stored by our host, Netlify, and used for exactly one message telling you the app is live. We do not add you to a newsletter and we do not pass it on. Reply once and we will delete it.
Children
RIPE is not directed at children under 13 and we do not knowingly collect their data.
Your rights
You can delete your account from inside the app, which removes your stored data from our systems. Step-by-step instructions, and how to ask us to do it if you cannot sign in, are on the delete your account page. You can also email us and ask what we hold, ask for a copy, or ask us to delete it. If you never made an account, we have nothing tied to you to begin with.
Processors we use
- Supabase: accounts, household sharing, anonymous events
- OpenRouter (routing to OpenAI and Google models): reading scan photos
- RevenueCat and Google Play: subscriptions
- Netlify: this website and the launch email list
- Plausible: website visit counts. Cookieless, no personal data, nothing sold on.
- Sentry: crash reports, so we can fix what breaks
Changes
If this policy changes in a way that matters, we will say so in the app rather than quietly editing this page.
Contact
Questions, requests, or complaints: support@isitripe.com.