Cookie Policy
GRUBY COOKIE POLICY
Effective Date: December 15, 2025
This Cookie Policy explains how Gruby ("we," "us," or "our") uses cookies and similar tracking technologies on our website and mobile application (collectively, the "Service"). By using the Service, you consent to the use of cookies as described in this policy.
1. WHAT ARE COOKIES
Cookies are small text files that are stored on your device when you visit a website or use a mobile application. They help us recognize you, remember your preferences, and improve your experience. Similar technologies include pixels, web beacons, local storage, and mobile device identifiers.
In the context of our mobile app, "cookies" in this policy also refers to similar storage mechanisms including:
- AsyncStorage: Local data storage on your mobile device
- SecureStore: Encrypted storage for sensitive data like authentication tokens
- Database Local Persistence: Cached data from our database for offline access
- Device Identifiers: Unique identifiers used for analytics and push notifications
2. TYPES OF COOKIES WE USE
2.1 Essential Cookies (Strictly Necessary)
These cookies are necessary for the Service to function properly. They enable core functionality such as security, authentication, and maintaining your session. Without these cookies, certain features of the Service cannot be provided. These cookies cannot be disabled.
| Cookie/Technology | Purpose | Duration |
|---|---|---|
| Auth Token | Maintains your logged-in session securely | 1 hour (auto-refreshed) |
| Refresh Token | Allows secure session renewal without re-login | Until logout or 30 days inactive |
| Session State | Tracks authentication state across app restarts | Persistent |
| CSRF Token | Protects against cross-site request forgery attacks | Session |
| E2E Encryption Keys | Local encryption keys for secure messaging | Persistent |
2.2 Functional Cookies
These cookies enable enhanced functionality and personalization, such as remembering your preferences, saved recipes, dietary restrictions, and display settings.
| Cookie/Technology | Purpose | Duration |
|---|---|---|
| User Preferences | Theme (light/dark mode), units (metric/imperial), language | Persistent |
| Dietary Settings | Your dietary restrictions and allergen filters | Persistent |
| Preferred Store | Your selected grocery store for pricing | Persistent |
| Recent Searches | Your recent recipe and ingredient searches | 30 days |
| Onboarding State | Tracks which tutorials you have completed | Persistent |
| Notification Preferences | Your push notification settings | Persistent |
2.3 Analytics Cookies
These cookies help us understand how users interact with the Service by collecting information about usage patterns, popular features, and areas for improvement. We use this data to optimize the Service and provide a better user experience.
| Cookie/Technology | Purpose | Duration |
|---|---|---|
| App Analytics | App usage analytics, feature engagement, user flows | 14 months |
| Website Analytics | Website traffic analysis, page views, session data | Up to 2 years |
| App Instance ID | Identifies unique app installations for analytics | Until app uninstall |
| Feature Usage Metrics | Which features you use most (recipes, pantry, AI, etc.) | Aggregated indefinitely |
2.4 Performance and Error Tracking Cookies
These cookies help us monitor application performance, identify errors, and improve loading times. They collect information about page load times, server response times, and error reports.
| Cookie/Technology | Purpose | Duration |
|---|---|---|
| Error Tracking | Captures crashes and errors to help us fix bugs | 90 days |
| Crash Reporting | Crash reporting and stability monitoring | 90 days |
| Performance Metrics | App load times, API response times, render performance | 30 days |
3. THIRD-PARTY COOKIES AND SERVICES
We work with trusted third-party service providers who may set cookies or use similar technologies on your device when you use the Service:
3.1 Cloud Infrastructure Services
Used for authentication, database, cloud storage, analytics, and push notifications.
- Authentication: Secure sign-in and session management
- Database: Real-time database with local caching
- Cloud Storage: Recipe images and user content
- Analytics: Usage statistics and feature tracking
- Push Notifications: Push notification delivery
3.2 AI Services
Powers AI recipe suggestions, ingredient analysis, and smart features. API requests are made server-side; no cookies are set on your device directly by AI services.
3.3 Computer Vision Services
Used for ingredient scanning via camera. Images are processed server-side and not stored after processing.
3.4 Grocery Partner Services
Provides real-time grocery pricing and store location data. Your location may be shared for location-based pricing.
3.5 Stock Photo Services
Provides stock photography for recipes when user photos are not available.
3.6 Push Notification Services
Manages push notification delivery to your device. Stores a push token to identify your device.
3.7 Error Tracking Services
Captures error reports and crash data to help us identify and fix bugs quickly.
3.8 Website Hosting Services
Hosts our website with performance optimization and analytics.
3.9 Apple/Google Sign-In
If you sign in with Apple or Google, those services may set their own cookies in accordance with their privacy policies.
4. HOW TO MANAGE COOKIES
4.1 Browser Settings (Website)
Most web browsers allow you to control cookies through their settings. You can set your browser to refuse all or some cookies, or to alert you when cookies are being set. However, if you disable or refuse cookies, some parts of the Service may not function properly.
- Chrome: Settings > Privacy and security > Cookies and other site data
- Firefox: Settings > Privacy & Security > Cookies and Site Data
- Safari: Preferences > Privacy > Manage Website Data
- Edge: Settings > Cookies and site permissions > Cookies and site data
4.2 Mobile Device Settings (App)
On mobile devices, you can manage tracking and analytics through your device settings:
- iOS: Settings > Privacy & Security > Tracking (to disable app tracking requests)
- iOS: Settings > Privacy & Security > Apple Advertising (to limit ad tracking)
- Android: Settings > Google > Ads > Delete advertising ID
- Android: Settings > Privacy > Ads > Opt out of Ads Personalization
4.3 In-App Privacy Settings
Within Gruby, navigate to Settings > Privacy to:
- Opt out of analytics data collection
- Clear cached data and preferences
- Manage push notification settings
- Request data export or deletion
4.4 Analytics Opt-Out
You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.
5. DATA RETENTION
Different cookies have different retention periods:
- Session cookies: Expire when you close your browser or app
- Persistent cookies: Remain on your device until they expire or you delete them
- Analytics data: Retained for 14-26 months depending on the service
- Error/crash reports: Retained for 90 days
- User preferences: Retained until you change them or delete your account
6. YOUR RIGHTS
Depending on your location, you may have certain rights regarding cookies and tracking:
- The right to be informed about the cookies we use
- The right to consent to or refuse non-essential cookies
- The right to withdraw your consent at any time
- The right to access data collected through cookies
- The right to have cookie data deleted
6.1 European Users (GDPR)
If you are in the European Economic Area, we will request your consent before setting non-essential cookies. You can withdraw consent at any time through our cookie settings.
6.2 California Residents (CCPA/CPRA)
California residents may opt out of the "sale" or "sharing" of personal information. We do not sell your data, but you can limit analytics tracking through your device settings.
7. UPDATES TO THIS POLICY
We may update this Cookie Policy from time to time to reflect changes in our practices, the services we use, or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the updated policy on this page with a new effective date.
8. CONTACT US
If you have questions about this Cookie Policy or our use of cookies and similar technologies, please contact us at:
Email: privacy@gruby.app
Subject line: "Cookie Policy Inquiry"