1. LOCATION DATA WE COLLECT

With your permission, Gruby may collect the following types of location information:

1.1 Precise Location

GPS coordinates from your device, typically accurate within 10-50 meters. This is collected only when you actively use location-based features.

1.2 Coarse Location

Approximate location based on city, ZIP code, or general area. This may be derived from your IP address or network information.

1.3 User-Provided Location

Location information you manually enter, such as your preferred grocery store, delivery address, or Gathering location.

2. HOW WE USE YOUR LOCATION

We use location data for the following specific purposes:

3. WHEN LOCATION IS COLLECTED

3.1 Foreground Collection Only

Gruby only collects precise location when the app is actively in use (foreground). We do NOT track your location in the background when the app is closed or minimized. This is an important privacy protection.

3.2 On-Demand Collection

We request location only when you use specific features that require it. For example:

• When you tap "Find Stores Near Me"
• When you search for Gatherings in your area
• When you view grocery prices (for location-based pricing)
• When you create a Gathering and choose to share your location

3.3 No Continuous Tracking

We do not continuously track or monitor your movements. Each location request is a one-time snapshot used for the specific feature you requested.

4. LOCATION SHARING WITH THIRD PARTIES

We share location data with third parties only as necessary to provide our services:

4.1 Kroger API

Your ZIP code or coarse location is sent to the Kroger API to retrieve accurate, location-specific grocery pricing. Kroger receives only the minimum location data needed (typically ZIP code), not your precise GPS coordinates.

4.2 Other Gruby Users

Gathering Locations: When you host a Gathering and provide a location, that location is shared only with users you invite or approve to join. Public Gatherings display a general area (neighborhood or city) to help users find nearby events, but the exact address is only revealed to confirmed participants.

Profile Location: If you choose to display your general location on your profile (e.g., "San Francisco, CA"), this is visible to other users based on your privacy settings.

4.3 Firebase/Google Cloud

Location data may be stored in Firebase Firestore as part of your user preferences or Gathering data. Google's infrastructure processes this data in accordance with their Data Processing Terms.

4.4 What We Never Do

• We never sell your location data to advertisers or data brokers
• We never share your precise location with other users without your explicit consent
• We never use your location for advertising targeting
• We never build movement profiles or track your travel patterns

5. LOCATION DATA RETENTION

We retain location data only as long as necessary:

• Store lookup queries: Not stored beyond the immediate request
• Preferred store selection: Retained until you change it or delete your account
• Gathering locations: Retained for 30 days after the Gathering ends, then deleted
• Profile location: Retained until you remove it or delete your account
• Price lookup location: Not stored; used only for the immediate API request

6. YOUR LOCATION CONTROLS

You have full control over your location data:

6.1 Device-Level Controls

You can manage Gruby's access to your location through your device settings:

• iOS: Settings > Privacy & Security > Location Services > Gruby
• Android: Settings > Apps > Gruby > Permissions > Location

Options typically include:

• Never: Gruby cannot access your location
• Ask Next Time: Prompted each time a feature needs location
• While Using the App: Location available only when app is open (recommended)

6.2 In-App Controls

Within Gruby, you can:

• Manually enter your ZIP code for pricing
• Choose whether to display your location on your profile
• Set Gathering locations manually without using GPS
• Search for stores by address instead of "near me"

6.3 Delete Location Data

You can request deletion of stored location data by:

• Removing your preferred store in Settings
• Clearing your profile location in Account Settings
• Requesting full data deletion via Settings > Privacy > Delete My Data
• Emailing privacy@gruby.app with a deletion request

7. LOCATION ACCURACY AND PRECISION

Understanding location accuracy:

• GPS (Precise): Accuracy within 10-50 meters when outdoors with clear sky view
• Wi-Fi positioning: Accuracy within 15-40 meters in urban areas
• Cell tower triangulation: Accuracy within 100-300 meters
• IP-based: City-level accuracy only

We use the minimum precision necessary for each feature. Store finding uses precise location; pricing only needs ZIP code accuracy.

8. USING GRUBY WITHOUT LOCATION

Location access is optional. You can use most of Gruby without enabling location services.

Features that work without location:

• Browsing and saving recipes
• Creating and managing your pantry inventory
• Building and organizing shopping lists
• Messaging with friends and Circles
• AI recipe suggestions and ingredient scanning
• Meal planning and cooking timers
• Participating in Gatherings (host provides address manually)

Features that require location or manual ZIP entry:

• Automatic "stores near me" feature
• Location-specific grocery pricing (can enter ZIP manually)
• Discovering nearby public Gatherings (can search by city)

9. CHILDREN AND LOCATION DATA

Gruby does not knowingly collect precise location data from children under 13. If you are a parent or guardian and believe your child has provided location data to Gruby, please contact us at privacy@gruby.app so we can delete it.

10. SECURITY OF LOCATION DATA

We protect your location data with:

• Encryption in transit (HTTPS/TLS) and at rest
• Access controls limiting which systems and personnel can access location data
• Data minimization - we only collect and store what is necessary
• Regular security audits and vulnerability assessments
• Secure cloud infrastructure (Google Cloud Platform/Firebase)

11. JURISDICTION-SPECIFIC RIGHTS

11.1 California Residents (CCPA/CPRA)

Under California law, precise geolocation is considered "sensitive personal information." You have the right to:

• Know what location data we collect and how it's used
• Request deletion of your location data
• Limit the use of your sensitive personal information
• Not be discriminated against for exercising these rights

11.2 European Users (GDPR)

Location data is considered personal data under GDPR. We process location data based on your consent. You have the right to:

• Withdraw consent at any time
• Access your location data we have stored
• Request rectification or deletion
• Data portability
• Lodge a complaint with a supervisory authority

12. CHANGES TO THIS DISCLOSURE

We may update this Location Services Disclosure to reflect changes in our practices or for legal, operational, or regulatory reasons. If we make material changes to how we collect or use location data, we will notify you through the app or via email before the changes take effect.

13. CONTACT US

Questions about our location practices? Contact us:

Email: privacy@gruby.app

Subject line: "Location Services Inquiry"