1. About this policy
OneClick Commerce LLC (“Spoony,” “we,” “us,” or “our”) operates the Spoony app and getspoony.com. This Privacy Policy explains how we collect, use, disclose, and retain personal information when you use those services or contact us.
Spoony helps households plan meals, organize recipes and groceries, and work toward a grocery budget. Some features require an account, permissions, or a feature that is available in your version of the app. The optional features described below collect information only when you use them.
This policy covers the app and website. A separate notice may apply to a creator application, employment application, or other program.
2. Information you provide
- Account information. Your email address, account identifier, sign-in provider information, and authentication/session information when you create or use an account. Sign in with Apple may provide a relay email address if you choose to hide your email. Apple handles your Apple credentials; we do not receive your Apple password.
- Household and planning information. A household name, numbers of adults and children, ZIP code, city and state, selected grocery stores, weekly budget, cooking schedule, appliances, pantry items, meal preferences, goals, and referral codes you enter.
- Dietary information. Diet selections, allergies, foods you avoid, and related free-text answers. These choices can reveal health information or religious beliefs. You can leave optional information blank and edit your preferences. Please provide information about another person only when you have authority to do so.
- Recipes and activity. Recipes you create or import, source links, ingredients, instructions, selected recipe photos, favorites, meal plans, meals marked as cooked, grocery lists, checked or removed items, and changes to that content.
- Shared-household information. Household membership, invitation codes, and information needed to connect accounts and synchronize a shared plan and grocery list.
- Communications. Your contact information and the contents of messages, attachments, and feedback you send us.
3. Location, photos, and device permissions
You can enter a ZIP code to find nearby stores. If you choose “Use my location,” the app asks iOS for location permission and uses a one-time location request and Apple Maps services to determine your area and find stores. The app does not continuously track your location in the background. Your selected area and store details can be saved with your household, including the store’s address and coordinates.
Camera and photo selection features access images you take or choose for a feature. Recipe photos can be saved to your account and shared with members of your household. Choosing a photo does not give us unrestricted access to your entire photo library.
You can change permissions in iOS Settings. Denying a permission may make its related feature unavailable. Device-level backups and Apple services are also subject to your Apple settings and Apple’s privacy practices.
4. Optional price contributions and AI processing
When price-sharing features are available and you choose to use them:
- Receipts and shelf tags. The app reads text from the image on your device and sends the recognized text and your selected store to our backend. The original image is not uploaded by these scan flows. Recognized text may include information beyond product names and prices, so crop or obscure personal, payment, and loyalty details before scanning.
- Weekly store ads. The pages or photos you select are uploaded for processing. Share only the store ad, without unrelated personal information.
- AI assistance. When enabled, our backend uses Anthropic’s Claude service to read weekly-ad images or documents and to match product descriptions from receipts or shelf tags to grocery items. The relevant images or text and store-chain context are sent to Anthropic. These optional scans are separate from meal planning; we do not send your full household profile to Claude through these scan functions.
- Community prices. We retain structured product and price information, such as item descriptions, package sizes, prices, deal conditions, store or chain, general ZIP area, and dates. Shopper contributions can be associated with a coded household identifier for quality controls and deletion. A coded identifier is not the same as anonymous data. We use these observations to improve prices and show useful prices and deals to other users, without displaying your account identity or household identifier to them.
Our price-observation database stores extracted price records rather than the original scan images or full receipt text. Processing providers may separately retain service logs or submitted content under their applicable service terms and our data-protection requirements. Before sending personal information to a third-party AI service, we request separate permission identifying the recipient, information, and purpose. Accepting these Terms or this policy alone is not that permission. You can decline optional AI processing and continue using features that do not require it.
5. Technical information and the website
Our hosting and backend providers process information needed to deliver and protect the services, such as IP addresses, request times, browser or device information, authentication events, service errors, and usage counters used to prevent abuse or enforce request limits.
The Spoony website uses Cloudflare for hosting and delivery. Our current website does not include advertising pixels or marketing analytics scripts. Our app does not use third-party advertising SDKs or an advertising identifier to target you with ads. Necessary hosting or security features may process technical information when you visit.
Links to recipe websites, retailers, Apple, and other third-party sites take you to services with their own privacy practices. External recipe or product images may also be loaded from their source hosts.
6. How we use information
- Provide meal planning, recipe organization, grocery lists, cooking tools, budget estimates, and personalization you request.
- Create and authenticate accounts, back up your content, synchronize devices, and operate shared households.
- Find stores, retrieve grocery information, estimate prices, and improve price estimates using contributed product and price records.
- Process recipe imports, photos, and optional scans.
- Respond to questions, troubleshoot errors, maintain security, prevent abuse, and operate the services.
- Meet applicable legal obligations, resolve disputes, and enforce our Terms.
We use dietary and allergy information to provide the meal-planning features you request. We do not use it to target advertising. We do not sell personal information or share it for cross-context behavioral advertising.
7. When information is shared
- With your household. People you connect to your household can access shared preferences, plans, recipes, photos, and grocery information, including dietary information stored in those preferences. Only invite people you trust. Leaving a household or deleting your account does not necessarily remove information from a household that continues to exist.
- With service providers. We use Supabase for account authentication, database storage, synchronization, and recipe-photo storage; Cloudflare for website delivery; Apple for platform services such as sign-in and store search; and Anthropic for the optional AI processing described above when enabled. Providers receive information relevant to their functions. We require providers handling personal information on our behalf to protect it at least as well as this policy and applicable Apple requirements require, and to use it only for authorized purposes.
- For grocery lookups. When a live grocery-data source is enabled, retailer or grocery-data services may receive product queries and store or ZIP context to return prices and availability.
- At your direction. If you export or send a list or other content using a share feature, it goes to the recipients and apps you select. Their copies are outside our control.
- For legal and security reasons. We may disclose information when required by law or when reasonably necessary to protect rights, safety, or security, investigate abuse, or respond to lawful requests.
- In a business transaction. Information may be transferred as part of a merger, acquisition, financing, reorganization, or sale of business assets, subject to applicable law and appropriate protections.
8. Storage, retention, and security
Some app information is stored on your device. When you sign in and use backup or sharing, household information and related content are also stored in our cloud backend. Our current app backend is hosted in the United States. Providers may process information in other countries. Applicable privacy laws and protections can differ from those where you live.
We retain account and household content while it is needed to provide the services, including shared-household features. Deleting or editing an item may leave a deletion record or earlier copy in backups, security logs, or synchronization records until it is removed through the relevant retention process. Support correspondence is kept as needed to resolve your request and handle related follow-up. Security and service records are kept for their operational purpose and applicable retention cycle. We may preserve specific records where legally required; any such exception must be limited to the information and period required. Contact us for information about a particular record or deletion request.
Price observations are subject to periodic cleanup and freshness limits. They are not a permanent personal purchase history. Removal from backups and provider logs may follow a different schedule from removal from the live app database. If completing your deletion request takes additional time, we will explain the timing and confirm completion.
We use safeguards intended to protect information, including access controls for household data and private storage for uploaded recipe photos. No system is completely secure. Protect your device and sign-in methods, and do not share household invitation codes publicly.
9. Your choices and privacy requests
Control collection and withdraw consent. You can edit or remove optional preferences in the app and revoke camera or location permissions in iOS Settings. Use a manually entered ZIP code instead of location access. To withdraw consent for optional processing or request deletion of previously submitted information, contact hello@getspoony.com. These requests are available to all users. Stopping scans prevents new submissions; revoking a device permission alone does not delete information already submitted. Withdrawal does not affect prior lawful processing, and a feature may stop working if it needs the information you withdraw.
Account deletion: Open the account controls in the app’s You section and select Delete account. Deletion removes your account and clears its local app data on that device. A household with no remaining members and its associated content are deleted through the account-deletion process. If another member remains, the shared household and its content can remain available to that member. Price contributions associated with a continuing household can also remain. You do not need to email support to initiate the in-app account-deletion process. If it fails, contact us for help. Uninstalling the app or signing out alone does not delete your cloud account. If Apple bills you for a subscription, account deletion does not cancel that subscription; manage it separately in Apple subscription settings.
Depending on your location and the laws that apply, you may have rights to access, obtain a copy of, correct, delete, or restrict use of your personal information; object to certain processing; withdraw consent; or appeal a denied request. You may also have the right to complain to your privacy regulator. These rights can be subject to legal exceptions.
Send requests to hello@getspoony.com. We may ask for information reasonably necessary to verify your identity and authority, and will respond within the time required by applicable law. Where applicable, an authorized agent may make a request for you with appropriate verification. To appeal a decision where that right applies, contact the same address with “Privacy appeal” in the subject. We will not unlawfully discriminate against you for exercising privacy rights.
Account deletion is not a substitute for a request concerning another person’s information retained in a shared household. Contact us if you need help with that information or cannot access your account.
10. Children
Spoony is intended for adults managing meals and households, and is not directed to children under 13. Adults may enter household size and dietary preferences, including information relevant to children’s meals. Do not enter children’s names or other identifying details that are unnecessary for planning. If you believe a child under 13 has provided personal information directly to us, contact us so we can investigate and take appropriate action.
11. Changes and contact
We may update this policy as the service changes. We will post the updated version with a new effective date and provide additional notice or obtain consent when required by law. This policy does not replace a consent that must be obtained separately for a particular use of information.
OneClick Commerce LLC
Privacy and support: hello@getspoony.com
Business location: El Dorado Hills, California, United States
Website: getspoony.com