Home Terms of Service

Privacy Policy

Last updated: March 4, 2026

Vanilla ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application Vanilla (the "App"). Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the App.

1. Information We Collect

We may collect the following types of information:

  • Account Information: When you sign up, we collect your email address and password (securely hashed) to create and manage your account through Firebase Authentication.
  • Profile Data: During onboarding, you may optionally provide dietary preferences, favorite foods, cooking level, household size, calorie/protein goals, monthly budget, and your primary grocery store.
  • Grocery List Data: Items you add to your grocery lists, including item names, departments, estimated prices, and completion status, are stored in Google Firebase Firestore to enable syncing across devices.
  • Saved Recipes: Recipes you save and meal data you interact with are stored in your account.
  • Shared List Data: If you share a grocery list with other users, we store member associations, permissions, and invite codes to facilitate sharing.
  • AI Chat History: Messages you send to the Vanilla AI Helper are processed through third-party AI providers (OpenRouter/Qura) to generate responses. Chat history is stored locally on your device and is not permanently stored on our servers.
  • Usage Data: We may collect anonymized data about how you interact with the App for improvement purposes.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the App and its features
  • Personalize your experience, including tailored recipe suggestions and AI responses
  • Process and manage your Vanilla Plus subscription
  • Enable real-time grocery list sharing between users
  • Provide nutrition information via third-party APIs (Spoonacular, Open Food Facts)
  • Estimate grocery prices based on average market data
  • Send push notifications (shopping reminders, shared list updates) with your consent
  • Respond to customer support requests

3. Third-Party Services

Our App uses the following third-party services, each with their own privacy policies:

  • Google Firebase: Authentication, Firestore database, and Cloud Functions (Firebase Privacy)
  • OpenRouter / Qura: AI chat processing for the AI Helper feature
  • Spoonacular API: Recipe data and meal information
  • Open Food Facts: Nutritional data for ingredient lookups
  • Apple StoreKit: In-app subscription management
  • Apple MapKit: Store location search during onboarding

4. Data Storage & Security

Your data is stored securely using Google Firebase services with industry-standard encryption. Passwords are never stored in plain text. We use Firebase Authentication which handles password hashing and security.

While we implement commercially reasonable security measures, no method of electronic storage or transmission over the internet is 100% secure. We cannot guarantee absolute security of your data.

5. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share information only in the following cases:

  • With third-party service providers that assist in operating the App (listed above)
  • With other users you explicitly choose to share grocery lists with
  • If required by law, court order, or governmental authority
  • To protect our rights, privacy, safety, or property

6. Your Rights

You have the right to:

  • Access your personal data stored in the App
  • Update your profile information at any time through the App settings
  • Delete your account and all associated data through the App's settings
  • Opt out of push notifications through your device settings
  • Request a copy of your data by contacting us

7. Children's Privacy

Vanilla is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us so we can delete it.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy within the App or on our website. Your continued use of the App after changes are posted constitutes acceptance of the updated policy.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us through the feedback form available in the App, or by visiting our website.

← Back to Home