Privacy Policy

Last updated: September 16, 2026

Feji ("we", "us", or "our") provides a grocery-list application and related website (together, the "Service"). This policy explains what information we process when you use the Service, why, and what control you have over it.

Feji is available in the United States only, and is operated from California, United States. Feji is the party responsible for the personal information described in this policy, and you can reach us through our contact page.

1. Information We Collect

• Account information: your name, email address, and profile image URL, as provided by Sign in with Apple or Google Sign-In, along with the account identifier those services issue.
• Grocery content you create: list names, items, quantities, notes, prices you enter, store assignments, aisle order, any budget you set on a list, checked status, and your completed shopping-trip history, including trip totals.
• Trip payment records. When a trip on a shared list is completed, we record which member paid for it and the total they entered, so the split can be calculated. This is the amount you typed in, not information from any bank or card.
• Product barcodes you scan. The barcode number is sent to our service for product lookup.
• Figures from receipts you scan. When you scan a receipt, the prices and totals you choose to keep are saved with that trip. The receipt image itself stays on your device (see section 2).
• Recipe favorites. The recipes you save as favorites are kept on your account, so they are still there when you sign in again or move to a new phone. For a recipe you imported from a link, that includes its title, the link, its ingredients and method, and any notes you write. The photo is not uploaded (see section 6).
• Recipe searches. Text you type when searching recipes, and ingredient names you search by, are sent to our service and passed to our recipe data provider.
• Recipe links you share into Feji. When you share a web page to Feji, the address is sent to our service so the page can be fetched and its ingredients read. For social posts, see section 6.
• Notification tokens. If you enable notifications, your device's push token is stored on your account so we can deliver them, along with which categories of notification you have switched on.
• Technical information: app version, platform, the date you were last active, and diagnostic details when a crash or error occurs.
• Website messages. If you use our contact form, the name, email address, and message you submit are sent to our email provider.

Feji does not ask for or collect bank credentials, financial-account information, or payment-card numbers, and receipt photos never leave your device. Prices, budgets, and trip totals are figures you type in yourself, or keep from a receipt you scan, to track grocery spending. They are not drawn from any bank, card, or payment account, and Feji cannot move money.

We collect this information directly from you, and from Apple or Google when you choose to sign in with them.

2. What Stays on Your Device

Several parts of Feji are deliberately local. The following are stored on your iPhone and are never sent to our servers:

• Food for use-it-up reminders. What your trips brought home, when, how long each item is estimated to keep, and whether you marked it used or asked to be reminded again. The reminders are scheduled by your device, for your device.
• Your meal plan. The meals you have planned for the week.
• Receipt photos. A copy of each receipt you scan, kept with its trip so you can look at it again.
• Photos of recipes you imported. A copy of the picture from a recipe you imported from a link and saved as a favorite. The favorite itself is kept on your account (see section 1).
• Payment details for splitting. A phone number you save for someone you split with, and your own Cash App tag, stay in this app on this device. We do not upload them, and we do not show them to anyone else on the list.
• Your cached list, so the app keeps working in a dead spot in the store.

Because these are local, they are not part of the data export described in section 17, and we cannot recover them if you lose the device. Signing out removes them from the device, except the payment details for splitting, which stay until you remove them or delete the app.

3. How We Use Information

• Authenticate your account and protect access to your data.
• Store and synchronize grocery lists across your signed-in devices.
• Organize items by aisle, maintain shopping history, and generate repeat-purchase suggestions.
• Calculate spending insights and price history from the trips and prices you recorded.
• Look up product details for a barcode you scan, recipes you search for, and ingredients on a recipe link you share in.
• Share lists with people you invite, show you lists others have invited you to, and keep them in sync in real time while a shared list is open.
• Work out who owes what on a shared list from the trips its members completed.
• Send notifications you have asked to receive.
• Enforce the limits of your plan.
• Diagnose crashes and errors, prevent abuse, and keep the Service secure and working.

We rely on your consent for optional features, including camera, location, and notifications, each of which you can decline or turn off at any time in your device settings without losing access to the rest of the Service. Everything else we do with your information is necessary to provide the Service you have asked us for, or to keep it secure. We do not use your information for advertising, and we do not make automated decisions about you that produce legal or similarly significant effects.

4. Sharing Lists With Other People

Shared lists are off by default and require a Pro plan. If you choose to use them, information about you becomes visible to the other people on that list:

• If you join someone's list, that list's owner can see your name and your email address, along with your role on the list.
• If you own a list and create an invite link, anyone holding that link can see your name and the list's name before they join. Your email address is never shown to them.
• Everyone on a shared list can see the list's contents: its items, stores, prices, budget, aisle order, and trip history.
• Because shared lists sync in real time, other members see your changes as you make them, not only when they next open the app.

Invite links are single-use and expire after 14 days. You can remove a member at any time, or leave a list you joined. Either way, the removed person's details are cleared from the list. If you delete your account, your name and email are removed from every list you had joined.

5. Splitting the Cost of a Shop

Splitting is an optional feature of shared lists. It is a tally and nothing more: Feji does not process payments, move money, or connect to any bank, card, or payment account.

• The calculation uses the trips completed on that shared list: who paid, and the total they entered. Every member of the list can see that breakdown, including which member paid for which trip.
• The split shows members' names only, not their email addresses or payment details.
• When you ask someone for money, Feji opens Venmo, Cash App, or the Messages app with the amount and recipient filled in. You send it, not us. We do not receive confirmation of, or any record of, whether a payment happened.
• Feji does not record that a debt was settled unless you tell it so in the app.

A phone number you save for a person you split with, and your own Cash App tag, are held on your device only, as described in section 2. Someone else's payment details are their information, not the list's, so they are never uploaded or shared with the rest of the household.

6. Recipes and Shared Links

You can search recipes in the app, or share a link into Feji from another app to get its ingredients.

• Recipe pages. The address you share is sent to our service, which reads the page's published ingredient list. Sometimes your device reads the page instead, in which case the site sees a visit from your device. We do not send your name, email, or account identifier to the site being read.
• Social posts. Our servers do not fetch posts from social platforms. Your device reads the post and sends our service its text, such as the caption or subtitles, to find the ingredients, so the platform sees a request from your device rather than from us.
• Imported recipes you favorite. The recipe's title, the link, its ingredients and method, and any notes you write are saved to your account, like any other favorite. A copy of its photo is saved on your device only, because the original link can expire, and that copy is not uploaded.
• Recipe and product images are loaded by your device directly from the provider, which means your device's IP address is visible to them when an image loads.

7. On-Device Intelligence

On iPhones that support Apple Intelligence, some Feji features use Apple's on-device model, for example to help read receipts and recipes. This processing happens on your device.

We do not send your data to any third-party AI service, and we do not use your content to train any model.

8. Camera Access

Camera access is optional and used only to scan barcodes and receipts. Images are processed on your device and are not uploaded. A receipt you scan is kept on your device with its trip, as described in section 2.

9. Location Access

Location access (while using the app) is optional and used only to suggest nearby grocery stores when you add a store. Your approximate position sets the map search region on your device, and store suggestions come from Apple's map search. Feji's servers never receive or store your location, and the app does not track your location in the background. If you decline location access, store suggestions still work without the nearby bias.

10. Contacts

Feji does not request access to your contacts and cannot read your address book.

When you save a phone number for someone you split with, you can pick them from a contact sheet provided by iOS. That sheet runs outside Feji: iOS returns only the single person you chose, and only what you selected about them. The number is then stored on your device as described in section 2. Similarly, when Feji opens the Messages app to send a reminder, the recipient field is completed by iOS, not by us.

11. Notifications

Notifications are optional, and Feji sends these kinds, each with its own switch in Settings:

• Use-it-up reminders, sent the evening before, or the morning of, the last day food you bought is estimated to keep. These are scheduled and delivered by your own device from what is stored on it, and their buttons are handled on the device too. Nothing about them reaches our servers.
• Shopping day reminders, sent the evening before the day you usually shop, when things you often buy aren't on your list, and one note if Feji hasn't been opened for three weeks. Like use-it-up reminders, these are scheduled by your own device.
• Household activity, on a list you share: a short note when someone else on it adds things or starts shopping, or when someone joins a list you shared. It shows their first name and the list's name, and the item's name when they added just one. These are sent from our servers to the other people on the list, so the people on a list you share see the same notes about what you do on it. Switching this off tells our servers to stop sending them to you.
• Account updates, such as a waitlist approval or a change to your account. These are sent from our servers. Switching this off tells our servers to stop sending them.

You can turn all notifications off in iOS Settings at any time, and you will keep full use of the rest of the Service.

12. Storage, Security, and Where Your Data Is Held

Account and grocery data are stored with our cloud hosting provider. The app connects to our servers over encrypted connections, and access to shared lists is checked on our servers. Copies kept on your device for offline use are protected by iOS.

Feji is operated from the United States, and your information is stored and processed on servers in the United States. If you are in Canada, this means your information is held outside Canada and may be accessible to United States courts, law enforcement, and government authorities under United States law. By using the Service you understand that your information will be handled in the United States.

No service can promise perfect security, but we limit what we collect, keep server-side checks on access, and scrub personal information out of our diagnostic reporting.

13. Third-Party Services

• Cloud hosting and storage: authentication, storing your account and lists, real-time sync for shared lists, abuse prevention, and running our website and servers.
• Sign in with Apple and Google Sign-In: account authentication, when you choose to sign in with them.
• Push notification services: delivering the account and household activity notifications you enable.
• Map search from Apple: nearby-store suggestions. Your search text and, if you allow location, your approximate position are processed by Apple to return store names.
• A product database: barcode product information. Only the barcode number is sent from our servers. Product images are loaded by your device directly from the database, which means your device's IP address is visible to it when an image loads.
• A recipe database: recipe information. Your recipe search text and ingredient names are sent from our servers, without your name, email, or account identifier. Recipe images are loaded by your device directly from the database, which means your device's IP address is visible to it when an image loads.
• Recipe websites you share in: when you share a recipe page to Feji, our servers request that page from the site that hosts it, in the same way a browser would. Nothing about your account is sent.
• Venmo, Cash App, and Messages: used only to open those apps with a request prefilled when you choose to ask someone for money. Feji sends nothing to them itself and receives nothing back.
• Crash reporting: crash and error reports, hosted in the United States. Reports are not linked to your account and leave out personal information and your grocery content.
• Email delivery: delivering messages submitted through our website contact form.

We do not sell your personal information, we do not share it for cross-context behavioral advertising, and we do not disclose it to third parties for their own direct marketing purposes. If you are a California resident, this paragraph is our response under California's "Shine the Light" law (Civil Code § 1798.83).

14. Do Not Track and Cross-Site Tracking

Feji does not track you over time or across third-party websites or apps. We use no advertising networks and no analytics services. Because we do not perform the tracking that "Do Not Track" is designed to stop, we do not respond differently to Do Not Track browser signals.

We do not permit third parties to collect personally identifiable information about your online activities over time and across different websites through the Service. The third parties listed above receive only what is described there, for the purpose described there.

15. How Long We Keep Information

• Account and grocery data: kept while your account is active, and removed when you delete your account.
• Shopping-trip history: only a limited number of your most recent trips per list is kept. As you complete new trips, the oldest are removed automatically and permanently. Spending insights, price history, and the split are all calculated from the trips still held, so they shorten as older trips age out.
• Recipe favorites: kept until you remove them or delete your account.
• Invite links: expire 14 days after creation, and are removed when the list is deleted or its last member is removed.
• Product and recipe lookups: kept for up to 30 days so we make fewer outbound requests. These are not linked to your account, and a recipe search is stored scrambled rather than as the words you typed.
• Shared links: a page fetched for an ingredient import is read and discarded. We do not keep a history of the links you have shared into Feji, other than the link of a recipe you save as a favorite.
• Diagnostic reports: retained by our diagnostics provider for a limited period under their retention schedule, then deleted.
• Administrative records: where an administrator changes an account's status, we keep a record of that action for security and accountability. These records identify accounts by account identifier only, not by name or email.
• On-device data: the food behind use-it-up reminders, your meal plan, and the photos of recipes you imported stay until you sign out or delete the app, and saved payment details stay until you remove them or delete the app. Planned meals age out about a week after the date they were planned for.

16. Deleting Your Account

You may permanently delete your account from Settings in the app. We ask you to sign in again first, so that nobody else can delete your account from an unattended device.

Deletion removes your account record, your grocery lists, your shopping history and trip payment records, your notification tokens, your sign-in account, and your name and email address from any lists you had joined. It also revokes any invite links you had created.

Deleting your account signs you out, which removes the on-device data in section 2 from that iPhone except saved payment details for splitting. Delete the app to remove those too.

Two things persist afterward: backup copies held by our infrastructure provider, which expire on their own schedule, and the administrative records described above, which identify you only by account identifier. Deletion is permanent and we cannot recover a deleted account.

17. Your Privacy Rights

Wherever you live, you can:

• Access and take a copy of your information. Settings includes a data export that returns your profile, your lists, their items, stores, and trips, the lists you have joined, and your recipe favorites, in a portable JSON file. Exports are rate-limited to protect the Service, and the app tells you when the next one is available.
• Correct your information. You can edit your display name and all of your grocery content directly in the app.
• Delete your information. See "Deleting Your Account" above.
• Withdraw consent for camera, location, or notifications at any time in your device settings.
• Ask us questions or complain about how we handle your information, through our contact page.

If you would rather make any of these requests in writing instead of using the in-app controls, contact us and we will handle it. We will not charge you or degrade your experience for exercising these rights.

18. Additional Information for Canadian Users

We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act and applicable provincial privacy legislation, including Quebec's Law 25.

The person responsible for protecting personal information at Feji, our Privacy Officer under Quebec's Law 25, can be reached through our contact page.

As described above, your information is stored in the United States. If we become aware of a privacy breach that creates a real risk of significant harm, we will notify you and the appropriate regulator, being the Office of the Privacy Commissioner of Canada, and the Commission d'accès à l'information du Québec for Quebec residents, as the law requires, and keep a record of the breach.

If you are not satisfied with our response to a privacy concern, you may complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca, or, if you live in Quebec, to the Commission d'accès à l'information du Québec at cai.gouv.qc.ca.

This policy and our Terms are currently provided in English only.

19. Children's Privacy

Feji is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has given us personal information, contact us and we will delete it.

20. Changes to This Policy

We may update this policy as the Service changes. When we do, we will revise the date at the top of this page. If a change materially affects how we handle information we have already collected from you, we will tell you in the app, or by email, before it takes effect. The current version is always posted here.

21. Contact

Questions, privacy requests, and complaints can be submitted through our contact page.