Privacy Policy

1. Introduction

This Privacy Policy is provided by Isaac Agyemang, the individual developer of the Refill mobile application (the "App"), available on the Apple App Store and Google Play Store.

Refill was founded in Mauritius and is available globally. It helps users scan receipts, track grocery spending, save recipes, build grocery lists and access AI-powered insights. The App supports multiple currencies and is available in all jurisdictions where it is legally permitted.

We are committed to protecting your privacy and being transparent about how your data is used. This policy explains what we collect, how we use it, and the choices you have.

2. Information We Collect

2.1 Account Information

• Email address and name when you create an account
• Password (stored encrypted, never readable by us)
• Optional profile details you choose to provide

2.2 Receipt & Spending Data

• Receipt images you scan through the camera or upload from your gallery
• Extracted text: store names, items, prices, quantities, dates and totals
• Manually entered purchases and corrections
• Spending categories, patterns and history

2.3 Pantry & Recipe Data

• Grocery lists you create manually or with the help of the Refill AI chatbot
• Recipes you save by scanning, uploading an image, or entering manually

Note: Pantry stock level tracking is not currently available but may be introduced in a future version of the App.

2.4 Device & App Data

• Device type, operating system and app version
• App usage patterns (screens visited, features used)
• Crash reports and error logs

2.5 Camera & Photo Access

• Photos taken in-app for receipt scanning
• Gallery access only if you choose to upload from your device

2.6 Location Data (Optional)

• If you enable location services, approximate location may be used to identify nearby stores. This is entirely optional and can be disabled at any time in your device settings.

3. How We Use Your Information

3.1 Core App Functionality

• Scan and parse receipt images to extract grocery data
• Organise and categorise your spending history
• Generate spending insights and budget tracking
• Power the price comparison feature across stores
• Manage your pantry, grocery lists and saved recipes

3.2 AI & Intelligence Features

• Use the OpenAI API to power the Refill AI chatbot, which provides personalised spending insights and helps build grocery lists
• Receipt images are processed using OpenAI's vision capabilities for text extraction
• Price comparison is accessible via the Refill AI chatbot
• Your data is used to produce insights within the App and is not used to train third-party AI models

3.3 Account Management

• Create and maintain your user account via Supabase
• Authenticate your identity and provide secure access
• Sync your data across devices

3.4 Communication

• Send important App updates and service notifications
• Respond to support requests and feedback

3.5 App Improvement

• Analyse anonymised usage patterns to improve performance and features
• Debug technical issues

4. Data Sharing and Disclosure

4.1 We Do Not Sell Your Data

We do not sell, trade, rent or share your personal information with third parties for marketing purposes.

4.2 Service Providers

We share data only with trusted service providers who help us operate the App:

All service providers are bound by data processing agreements and may not use your data for their own purposes.

4.3 Legal Requirements

We may disclose your information if required by applicable law in the jurisdiction of the user or in response to valid legal processes, law enforcement requests, or situations involving a threat to safety. As a globally available app, we will assess each request based on the laws applicable to the user's location and our obligations as a developer.

4.4 Business Transfers

In the event of a merger, acquisition or sale of Refill, your data may be transferred as part of that transaction. You will be notified in advance.

5. Data Security

5.1 Our Measures

• All data is encrypted in transit (TLS) and at rest
• Secure cloud infrastructure via Supabase
• Access to personal data is limited on a strict need-to-know basis
• Security practices are reviewed and updated regularly

5.2 Your Responsibility

• Use a strong, unique password for your Refill account
• Do not share your login credentials
• Log out of shared devices
• Report any suspected breach to myrefillme@gmail.com

No system is 100% secure. While we take every reasonable measure, we cannot guarantee absolute security. Report any suspected breach to myrefillme@gmail.com.

6. Data Retention

6.1 How Long We Keep Your Data

• Account information is retained as long as your account is active
• Receipt, pantry, recipe and grocery list data is retained to provide the service
• App usage logs are retained for up to 12 months

6.2 Deleting Your Data

• You can delete individual receipts, items or entries at any time within the App
• You can request full account deletion by contacting us at myrefillme@gmail.com
• Upon account deletion, your personal data will be removed within 30 days
• Aggregated, anonymised data (with no link to you personally) may be retained for analytics

7. Your Rights and Choices

7.1 Access and Control

• View: Access all personal data we hold about you
• Update: Modify your account and profile at any time
• Delete: Remove specific receipts, entries or your entire account
• Export: Request a copy of your data in a portable format

7.2 Communication Preferences

• Opt out of promotional emails at any time (service emails may still be sent)
• Manage push notification settings through your device

7.3 Location Services

• Enable or disable location access in your device settings at any time

7.4 Camera & Gallery

• Revoke camera or gallery permissions at any time in your device settings. This will disable receipt scanning.

To exercise any of these rights, contact us at myrefillme@gmail.com.

8. Children's Privacy

Refill is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware this has occurred, we will delete it promptly. Contact us at myrefillme@gmail.com if you believe a child under 13 has used the App.

9. International Data Transfers

Refill is available globally. Your data is stored and processed on AWS infrastructure in the ap-northeast-2 region (Seoul, South Korea) via Supabase. By using the App, you consent to your data being transferred to and processed in South Korea. We ensure it is protected through appropriate safeguards including data processing agreements with Supabase. For more information see supabase.com/privacy.

10. Third-Party Services

The App uses the following third-party services to function:

These services operate under their own privacy policies. We encourage you to review them.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will:

• Post the updated policy in the App
• Update the Effective Date at the top
• Notify you by email or in-app notice for material changes

Continued use of the App after changes take effect means you accept the updated policy.

12. Contact Us

If you have any questions, concerns or requests about this Privacy Policy or your personal data, please contact us:

• App: Refill — Grocery Intelligence
• Website: refillme.app
• Email: myrefillme@gmail.com
• Support: Use the feedback feature in the App settings

We aim to respond to all requests within 5 business days.

13. Compliance

This Privacy Policy is designed to comply with applicable privacy laws including:

• Mauritius Data Protection Act 2017 — the primary law governing our operations
• GDPR (General Data Protection Regulation) — for users in the European Economic Area
• CCPA (California Consumer Privacy Act) — for users in California, USA
• PDPA and other applicable regional privacy laws depending on the user's jurisdiction
• Apple App Store & Google Play developer policy requirements