Privacy Policy

Last updated: July 4, 2026

Grocsay is a private community app for grocery store employees in Canada. Protecting your privacy is core to how the app is built. This policy explains what we collect, why, and how long we keep it.

What we collect

• Phone number — used only to verify you're a real person via a one-time SMS code (Firebase Authentication). Your phone number is never shown to other users. If your account is placed under a temporary posting restriction, a one-way hash of your phone number (not the number itself) may be kept in a moderation record until the restriction expires.
• Location — checked when you onboard (to find nearby stores) and when you create a post or comment (to confirm you're near your store). The proximity check runs on your device. We do not track or store your location history.
• Screen name and avatar — a randomly generated display name and an icon you pick. No real name, email, or profile photo is ever collected.
• Posts and comments — the content you choose to share, visible only to verified employees at your store.
• Push notification token — used only to deliver notifications about new posts at your store and the moderation status of your own posts (e.g. report warnings or removal).

What we don't collect

We do not collect your real name, email address, contacts, photos, or browsing activity outside the app. Posts and comments are never linked to your phone number in any way visible to other users.

How long we keep your data

• Your account automatically expires and is permanently deleted 7 days after creation.
• Posts automatically expire and are deleted 4 days after being posted.
• If you delete your account manually, your data is removed immediately. If your account was in good standing, you can register again right away. If your account was under a temporary restriction at the time of deletion, that restriction continues to apply to the same phone number for its remaining duration (this prevents abuse of the moderation system).

Who we share data with

We use the following third-party services to operate the app. They process data only as needed to provide their service:

• Firebase (Google) — phone authentication, push notifications, and fraud prevention (App Check).
• Supabase — database storage and backend functions.
• Foursquare — store location lookup during onboarding.
• OpenAI — automated screening of post and comment text for harmful content before publishing. Content sent for screening is not linked to your phone number or identity.

We do not sell your data to anyone.

Content moderation

Posts and comments are automatically screened for offensive or harmful language before publishing. Users can report content; posts that receive enough reports are removed and the poster is temporarily restricted from posting.

Your rights

You can delete your account and all associated data at any time from the Profile screen in the app. For privacy questions or requests, contact us at: grocsay-app.web.app/contact.html

Eligibility

Grocsay is intended for use by people employed in the grocery retail sector in Canada. You must be at least 18 years old to use the app.

Changes to this policy

We may update this policy from time to time. Continued use of the app after changes means you accept the updated policy.