Privacy

Last updated 20 October 2026

Groci plans the cheapest supermarket basket for your calories and protein. You can use all of it without an account. This page says what we keep, why, and how to have it deleted.

Your body stats

If you work out your targets from age, height, weight or body fat, those numbers stay in the page address on your device. They are never stored on our servers and never sent to our analytics tools.

If you sign in

Signing in is optional. You sign in with Google, and Google gives us only:

• your email address, which shows you which account you're using;
• an account number Google uses for Groci, so we recognise you next time.

We don't receive your name, photo, contacts or Google password. We also keep when your account was created and when it was last used, a record of each device you're signed in on, and the plans and dishes you save (below).

If you try Groci Plus, we also keep whether you're on the free trial or Plus, and when the trial ends.

If you subscribe, Stripe handles the payment. Your card details go to Stripe and never reach Groci. Stripe receives your email address (for receipts) and your random Groci account number. We keep Stripe's reference numbers for you and your subscription, which plan you're on, and when it renews or ends. Stripe keeps its own payment records, which businesses must hold for accounting, even after you delete your Groci account.

We use these only to run your account. We never sell them, and we never use them for advertising.

Saved plans and dishes

Signed out, what you save is kept only in your browser on that device. Removing an item, or clearing your browser's site data, deletes it.

Signed in, your saved plans and dishes are also kept in your account, so they appear on every device you sign in on. A plan you worked out from body stats is saved as the calorie and protein targets they produced, so your account never holds your age, height, weight or body fat. When you remove an item, we keep a note of its removal so your other devices remove it too. Signing out removes the account's items from that browser.

Cookies

• A sign-in cookie that keeps you signed in for up to 90 days, and a short-lived one used only while Google signs you in.
• Analytics cookies, below.

Analytics

We use PostHog and Google Analytics to see which features people use, so we know what to improve. They receive the pages you visit (without the settings in the address) and actions such as saving a plan. When you're signed in, PostHog also receives your random Groci account number, so your phone and laptop count as one person. Neither ever receives your email address or body stats.

How long we keep it

• Your account and its saved items: until you delete them.
• A device's sign-in: it ends within 90 days of its last use, or when you sign out.

Deleting your account

On the Account page, choose Delete my account. Your account, its saved items and every sign-in are removed straight away. A Plus subscription is cancelled first, so there are no further payments. Analytics events already recorded under your random account number stay with PostHog, but nothing links that number to you any more, and they never held your email address. You can also email us and we'll do the deletion for you.

Who runs Groci, and where the data is

Groci is run from Singapore and follows Singapore's Personal Data Protection Act. The site and its database run on Cloudflare's network. Google handles sign-in, and Stripe handles payments. You can ask to see or correct what we hold about you, or ask any question about this page, at hello@groci.sg.