Privacy Policy

Supplied is made by Gapps, MB, a company registered in Lithuania (company code 306265745, Panerių g. 51-98, LT-48334 Kaunas, Lithuania). We are the “controller” of your personal data: we decide how it's used, and we're responsible for it. “We” and “us” in this policy mean Gapps, MB.

This policy covers the Supplied app for iPhone and Android, our website at keepsupplied.com, and the emails we send. We're based in the European Union, so we follow the EU General Data Protection Regulation (GDPR) for everyone who uses Supplied, wherever they live.

Questions about your data: hello@keepsupplied.com.

Your account

When you create an account, we get your email address and the name you choose. Signing in runs on Google Firebase Authentication. Firebase stores your password in scrambled form, and we never see it. We also keep when your account was created and when you last signed in.

Why: to sign you in, keep your houses in step across phones, and match invitations to you.

Your house

In Supplied, a house is the kitchen everyone at home shares. For each house we store:

• its name and its six-character join code;
• the people in it, by the names they go by, and which account belongs to whom. Someone can be added by name alone (a child, for example), with no account and nothing stored but that name;
• what's at home: each item's name, amount, kind, where it's kept, when it came in, and its use-by date, whether you gave the date or we estimated it;
• the shopping list;
• the history: what changed, who changed it, and when;
• invitations: the email address someone in the house invited, and the answer.

Everyone in a house can see and change all of this. If someone invites you, we get your email address from them, and the invite waits until you sign in with that address and answer it. We don't email invitations ourselves. The app gives the person inviting you a message to send.

Why: this is the service itself.

What you say and type to Supplied

When you use the mic, your phone's built-in speech recognition (Apple's on iPhone, Google's on Android) turns your voice into words. Depending on your phone and its settings, Apple or Google may do this on their own servers, under their own privacy policies. To help it catch the names of things you keep, the app gives the recognizer the names of items already in your house. Supplied never receives your voice and never keeps a recording.

The words, or whatever you type, go to our server with a summary of your house (what's at home, the list, today's date and who's talking) and your last few exchanges. Our server sends them to OpenAI, whose language model works out what you meant, and the app then makes the changes. This only happens after you've allowed it in the app, and you can switch it off in Settings (see Who we share it with). Our server doesn't keep your sentences: the history records what changed, not the words you used. OpenAI doesn't use data sent through its API to train its models, and keeps it for up to 30 days only to detect abuse, unless the law requires longer.

Why: to understand what you mean and update your house, with your permission.

Subscriptions

You buy Premium through the App Store or Google Play. Apple or Google takes the payment, and we never see your card or bank details. To know who has which plan, we use RevenueCat. It receives your Supplied account ID, your email address, what you bought, when it renews or ends, your store country and currency, and basic information about your phone and the IP address it connects from. Our server asks RevenueCat about the people in your house, so that a Premium Duo or Premium Family plan can cover them. The others in your house can see that your plan covers them.

Why: to give you what you paid for, and to keep the records tax and accounting law requires.

Your phone and our servers

• Each signed-in phone gets a sign-in token. We store only a scrambled (hashed) copy, with the phone's platform (iPhone or Android), the app version, and when it was last used.
• Our servers keep short-lived logs of requests, including IP addresses. We use them to keep Supplied secure, to fix errors, and to limit how often one phone or address can use certain features.
• Firebase Remote Config sends your app our current settings, such as which features are switched on. It uses an identifier for your installation of the app to do this.
• When an item has no picture yet, the app tells us its name and kind, so we know which pictures to draw next. We note which houses have it only to count each house once.

Why: our legitimate interest in running a secure, reliable service and improving it.

How you use the app

To learn which parts of Supplied help and where people get stuck, the app can send usage events to PostHog, our analytics provider. Events say which screens you open, which buttons you tap, how long things take and which errors happen, along with basic details about your phone: its model, operating system, app version, language, and approximate location worked out from its IP address. They're linked to your account ID, a random code, not to your name or email. They don't include what you say or type, or the names of the things in your house.

Screen recordings, only if you agree. With your permission, the app can also record your sessions: a replay of Supplied's own screens and where you tap, so we can see where the app confuses people. Recording stays off until you say yes in the app. While it's on, the app shows that it's recording, and you can switch it off at any time in Settings. Recordings never include sound, other apps or anything outside Supplied, and what you type into text fields is hidden. They can show what's on Supplied's screens, such as the items in your house and your shopping list.

Why: our legitimate interest in improving Supplied (usage events), and your consent (screen recordings).

What stays on your phone

• Your kitchen, your list and your settings are also saved on your phone. That's why Supplied works without signal, and how the home-screen widget shows them.
• Reminders and alerts are created on your phone from your house's data. We don't use a push notification service.
• The app asks for two permissions, both optional: the microphone and speech recognition (only for listening while you use the mic, and you can always type instead), and notifications (for reminders). It doesn't ask for your location, contacts, photos or camera, and it doesn't use your phone's advertising identifier.

Asking another AI what to cook

“Ask in ChatGPT, Gemini or Claude” hands a question about what you have to the app or website you pick, or copies it for you to paste there. We don't send it anywhere ourselves. What happens next is up to that service and its privacy policy. The same goes for the cooking example on our website.

Our website

• Email sign-up. Your email address, which store button you pressed, which page, ad or link brought you, and your answers to the short survey afterwards, if you give them. We keep these with Kit, our email provider, to tell you when Supplied is out. Every email we send has an unsubscribe link. Your browser also keeps your address in its local storage, so the survey can be matched to it.
• The contact form. Your name, email address and question. They're kept in PostHog, where we read and answer them.
• The demo. What you type into the demo is sent to OpenAI to sort it, and recorded with the result in our analytics, so we can see how the demo is used. Please don't type anything personal into it.
• Analytics. PostHog records how people use the site: pages viewed, taps and clicks, device and browser type, approximate location worked out from your IP address, which ad or link brought you, and recordings of visits that show what was on screen and how you moved through it. Email fields are hidden in recordings; what you type into the demo is not. PostHog stores this in the European Union.
• Advertising. The site uses the Meta Pixel and Meta's Conversions API to measure our ads on Facebook and Instagram, and to show our ads to people who have visited. Meta receives the pages you view and actions such as signing up, its cookie identifiers, your IP address and browser details, and, if you sign up, a scrambled (SHA-256 hashed) copy of your email address. Meta also uses this under its own privacy policy.
• Cookies and local storage. PostHog's cookies and local storage, Meta's cookies (_fbp and _fbc), our own cookie that remembers which ad or link brought you (for 90 days), and a few local storage entries: your email address after you sign up, the referral code of a share link you arrived through, and whether we've already asked why you're leaving.

Why: to answer you, to tell you when Supplied launches, and our legitimate interest in understanding how the site is used and whether our ads work. Where the law requires consent for this, we ask for it.

• We don't sell your personal data.
• There are no ads in the app, and the app doesn't track you across other companies' apps and websites.
• Neither we nor OpenAI use your house's data to train AI models.
• We never record your screen in the app without asking you first.
• We don't ask for your location, contacts, photos or camera.

The GDPR asks us to name the legal basis for each use. Ours are:

• To provide the service you asked for (a contract with you): your account, your house and your subscription.
• Our legitimate interests, weighed against yours: keeping Supplied secure and working, fixing problems, deciding which pictures to draw, understanding how the app and our website are used, and measuring our ads. You can object to these (see Your rights).
• Your consent: sending what you say and type to OpenAI, screen recordings in the app and, where the law requires it, some cookies or emails beyond the one you signed up for. You can withdraw it at any time.
• Legal obligations: keeping purchase records for tax and accounting, and answering lawful requests from authorities.

The people in your house see what's in it, the list, the history, and everyone's names.

Service providers process data for us, on our instructions, under contracts that require them to protect it and use it only to provide their service:

• Google Firebase: signing in. Firebase Authentication receives your email address and password when you create an account or sign in, and sends the confirmation email. It keeps your password in scrambled form, and we never see it. Firebase Remote Config also sends the app our current settings. United States.
• RevenueCat: purchases. RevenueCat receives your email address, your Supplied account ID, what you bought and when it renews or ends, so your Premium plan follows you to your other phones and we can find your purchase if you write to us. United States.
• OpenAI: third-party AI that understands what you say. When you talk or type to Supplied, the words go to OpenAI with a summary of your house (what's at home, the list, today's date and who's talking) and your last few exchanges, and its language model works out what you meant. The app asks your permission before anything is sent to OpenAI, and you can turn it off at any time in Settings, under “Understand me with OpenAI”. With it off, Supplied can't understand what you say, but you can still change everything by hand. OpenAI never receives a recording of your voice or your email address. It doesn't keep what we send for its own use or use it to train its models, holds it for at most 30 days only to detect abuse, and then deletes it. United States.
• Vercel: runs our server and this website. United States.
• Neon: our database. United States.
• Kit: our email list. United States.
• PostHog: analytics for the app and this website, screen recordings you've agreed to, and contact form messages. European Union.

Companies that also use data under their own policies: Apple and Google, when you download the app, pay for a subscription or use speech recognition; and Meta, for advertising on our website.

Others, only when we must: to comply with the law, a court order or a valid request from authorities; to protect someone's safety or our rights; or if Gapps, MB or Supplied is merged or sold. In that case this policy keeps applying to your data, and we'll tell you.

Gapps, MB is in Lithuania, in the European Union. Most of our service providers are in the United States, so your data is stored and processed there. When data leaves the EU, it's protected by the EU-U.S. Data Privacy Framework where the provider is certified under it, or otherwise by the European Commission's Standard Contractual Clauses. Write to us if you'd like details.

• Your account and houses: for as long as you have your account. When you delete it, we delete your account data within 30 days. If you were the only person in a house, the house is deleted too. If others still use it, its items and list stay for them.
• Houses nobody uses: we may delete a house that nobody has opened for two years.
• Server logs: up to 30 days.
• What OpenAI receives: up to 30 days, as described above.
• Purchase and subscription records: as long as tax and accounting law requires, which is up to 10 years in Lithuania.
• Email sign-ups: until you unsubscribe or ask us to delete them.
• Analytics and recordings, from the app and the website, and contact form messages: up to one year. When you delete your account, we also delete the app's analytics and recordings linked to it.

Everything between the app, the website and our servers travels encrypted (HTTPS). Passwords are handled by Firebase and never reach us. Sign-in tokens are stored only in scrambled form on our side, and in your phone's secure storage on yours. The keys to the services we use stay on our servers, never in the app. Only we can access your data, and only to run and support Supplied. No system is perfectly secure. If something happens that puts your data at risk, we'll tell you and the authorities as the law requires.

Wherever you live, you can ask us to:

• give you a copy of your data, in a format you can take elsewhere;
• correct it;
• delete it;
• limit how we use it, or stop using it where we rely on our legitimate interests (including analytics and ad measurement);
• withdraw any consent you've given.

Write to hello@keepsupplied.com, ideally from the address you sign in with. It's free. We'll answer within one month, and we may ask you to confirm it's really you first.

In the EU: you can complain to a data protection authority. Ours is the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija), L. Sapiegos g. 17, LT-10312 Vilnius, Lithuania (vdai.lrv.lt). You can also complain to the authority where you live. We'd be grateful for the chance to put it right first.

In the United States: some states, such as California, Virginia and Colorado, give residents the right to know, access, correct and delete their personal information, and to opt out of its sale, of “sharing” for targeted advertising, and of profiling. We give these rights to everyone, in every state. We don't sell personal information. The only sharing for advertising is the Meta Pixel on our website, described above. The app does none. To opt out, block third-party cookies or turn on your browser's tracking protection, and write to us if you'd like us not to send your sign-up to Meta. You can use an authorized agent, and we'll check that they act for you. If we turn down a request, you can appeal by replying to our answer. We won't treat you differently for using any of these rights. Our website doesn't currently respond to Do Not Track or Global Privacy Control signals.

• In the app: change or remove any item by hand, leave a house (Settings, then Leave this house), or sign out (Settings, then Sign out).
• Your account: delete it whenever you like.
• Microphone and notifications: both are optional, and you can turn them off in your phone's settings. You can always type instead of talking.
• Usage analytics and screen recordings: turn either off in the app's Settings. Screen recordings are off unless you've said yes.
• Emails: use the unsubscribe link at the bottom of any email, or write to us.
• Website: block cookies or use private browsing, and change your ad preferences in your Facebook or Instagram settings.

You need to be at least 13 to have a Supplied account. In the EU, if you're under the age your country sets for agreeing to online services on your own (between 13 and 16), a parent or guardian has to agree for you. A house can include children by name, with no account, and nothing but that name is stored. If we learn that a child under 13 has an account without a parent's consent, we'll delete it. Parents can write to us at any time.

When we change this policy, we update the date at the top. If a change matters, for example a new kind of data or a new company receiving it, we'll tell you in the app or by email before it takes effect.

Gapps, MB
Company code 306265745
Panerių g. 51-98, LT-48334 Kaunas
Lithuania
hello@keepsupplied.com