Privacy Policy

Effective: April 7, 2026

Groflo, Inc. ("Groflo", "we") makes a shared shopping list app you control by texting Penny, our AI assistant. This policy tells you what we collect, how we use it, and what you control. We wrote it in plain English and we mean it.

1. Account and the Rally ecosystem

Your Groflo account is part of the Rally ecosystem, a shared identity layer that lets one Rally login work across Groflo and other Rally apps. Your account is shared. Your shopping list is not. Other Rally apps cannot read your list, your dietary preferences, your household, or your messages with Penny.

When you create a Groflo account we record your phone number, optional email, optional display name, and the timestamp of your consent. If you sign in with Google, we also receive your Google email and name.

2. SMS messages and your consent

Penny is an SMS-native assistant. If you give us your phone number, you are choosing to receive text messages from Penny: replies to messages you send her, list updates from your household, and occasional reminders about items you have asked her to track.

Message frequency varies based on your usage and your household's activity. Message and data rates may apply from your wireless carrier.

You can change how often Penny texts you in Settings. You can stop texts at any time by replying STOP to any Penny message. After you reply STOP we send one confirmation text and no more. Reply HELP to any Penny message for support.

We will not share your mobile information with third parties or affiliates for marketing or promotional purposes. Information you share with Penny stays inside Groflo and the service providers listed in section 4.

3. Information we collect

• Phone number — required for SMS, used to verify your account and to send and receive texts with Penny.
• Email and name — optional, used to recover access and to address you in messages.
• Shopping list data — items you add by app, text, or email, your edits, and your check-offs.
• Household relationships — who you share lists with.
• Brand preferences and dietary attributes — saved when you correct Penny or set them in Settings.
• Receipts you upload — to verify swap rebates. We extract the line items and store the parsed data; the original image is deleted within 30 days.
• Usage data — page views, feature usage, and error reports, used to keep Penny working.

4. Service providers

We share the minimum data needed with the providers who run the service. Each provider sees only the slice of data they need.

• Twilio — sends and receives your SMS messages, and sends one-time verification codes.
• Anthropic — runs the AI that turns your texts into list items. Your texts are sent for processing. Anthropic does not train its models on your data.
• Stripe — processes brand swap rebate payouts to you, when applicable. Stripe is also the payments backbone for the Rally ecosystem.
• Railway — hosts the Groflo backend.
• Google — only if you sign in with Google.
• SendGrid — sends transactional emails (password resets, magic links, optional digests).

5. How we use your data

• To verify your identity and keep your account secure.
• To send and receive SMS messages with Penny and your household.
• To organize your list, learn your brand preferences, and respect your dietary attributes.
• To pay you brand swap rebates you have earned.
• To improve Penny — but only with anonymized, aggregated data, never your individual list.

6. Brand partners and rebates

Groflo is free for shoppers because brands pay to suggest products on your list. Suggestions are always labeled. Brand partners never see your name, your phone number, your email, your address, or your individual list. They see aggregated, anonymized statistics about how often their products are chosen across the whole Groflo population.

7. Data retention

We keep your account data while your account is active. You can delete individual list items at any time in the app. You can delete your account by emailing privacy@groflo.io. After we receive your request we delete your personal data within 30 days, except records we are legally required to keep (for example, financial records of rebate payouts).

8. Security

We protect your data with encrypted connections (TLS), HttpOnly session cookies, hashed passwords (bcrypt), short-lived authentication codes, and industry-standard server hardening. We do not store payment card numbers; Stripe does.

9. Your rights

You have the right to access, correct, export, or delete your personal data at any time. California residents have additional rights under the CCPA, including the right not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined under the CCPA.

To exercise any of these rights, email privacy@groflo.io.

10. Children

Groflo is not for children under 13 and we do not knowingly collect data from children under 13.

11. Changes

When we make material changes to this policy we will notify you by email or by an in-app notice before the changes take effect. The "Effective" date at the top of this page always reflects the current version.

12. Contact

Questions or requests: privacy@groflo.io.

Mailing address available on request.