Privacy Policy

Last updated October 29, 2026

Harvest helps you rank the food and products you use, find ones that fit your goals, and share what works with people you choose. This policy explains what we collect, why, who can see it, and what you can do about it.

The short version: we don't sell your data, we don't show ads, and we don't track you across other apps or websites. We use your information only to run Harvest.

What we collect

• Account: your email address, password and phone number. Passwords are handled by our sign-in provider, Supabase, and are never stored in plain text. Adding a phone number at sign-up is optional. If you add one, it's never shown to other people, and we don't use it to verify your account. Friends who already have your number in their contacts can find you on Harvest (see Contacts below). We also record which version of the Terms of Use you accepted, and when.
• Communications choice: whether you asked for news, tips and offers from us by email and text. It's off unless you tick the box, and you can stop anytime by replying STOP to a text, using the unsubscribe link in an email, or emailing us.
• Profile: your name, username, profile photo (if you add one), communities (for example Parents or Athletes), sport, and the date you joined.
• Health and diet information: your goals and current focus (for example steadier energy or better digestion), diet preferences, the allergens you ask us to flag, and check-ins on how a product worked for you. If you add family members, we keep their first name, age range and allergens. We use this information only to personalize your scores and suggestions.
• Rankings and activity: products you rank, your answers to "which did you like more?", where you bought something and what you paid, notes, products you save or want to try (including links you paste), shopping lists, recipes, products you type in, and products you ask us to add.
• How you use the app: which screens you open and what you do there (for example scanning a barcode, opening a product, looking at swaps), and the products you scan, open, pick from a search or buy. We count this ourselves, without outside analytics tools, to learn which features people use and to suggest swaps for products you've come across. We don't keep what you type in searches.
• Receipts (optional): if you add a photo of a grocery receipt, we read the food and drink on it and keep only the products you confirm you bought. The photo itself is not saved.
• Posts and community: messages you send in your social circle chat, posts, recipes, answers and questions you share, posts you save or hide, and reports you make.
• Connections: who you follow, circles you join, people you block, and the invite code you joined with.
• Photos you choose to upload: a profile photo, and photos you add to a product page. We shrink them and save them as new images before uploading. Each one is checked automatically before anyone else sees it (see Services we use), and some are looked at by a person on our team.
• Notifications: if you allow them, a push token for your phone, so we can tell you about check-ins, messages in your circles, friends joining from your invite, and friends ranking something you saved. Turn them off any time in your phone's Settings.
• Kroger (optional): your chosen Kroger-family store, and if you connect your Kroger account, an access token used only to add items to your Kroger cart.

What stays on your phone

• Camera: used to scan barcodes and, if you choose, to take a profile or product photo. Barcode scanning happens on your phone; scan images are not uploaded.
• Photo library: only the photos you pick. A screenshot you pick to read a barcode is read on your phone and not uploaded. Only photos you add to your profile or a product, and receipts you add, are uploaded.
• Clipboard: read only when you tap Paste, to fill in a link.
• Messages: when you invite a friend, Harvest opens your Messages app with a suggested text. You choose who to send it to. We never see who you text.
• Contacts (optional): if you tap Find friends from your contacts and allow access, Harvest turns each phone number in your contacts into a one-way code (a SHA-256 hash) on your phone and sends only those codes. We compare them with the phone numbers people gave when they signed up, show you who's on Harvest, and keep nothing we were sent. Names, emails and the numbers themselves never leave your phone. Only people who added a phone number can be found this way.
• Your sign-in is saved on your phone so you stay logged in.

We don't collect your location, your contact list, or your advertising identifier, and we don't use third-party analytics or advertising tools.

How we use it

• To run the app: show your rankings, predict how much you'll like products you haven't tried, tailor scores to your goals and allergies, show your circle's posts, find prices and deals at your store, and build shopping lists.
• To calculate community scores from everyone's rankings.
• To keep Harvest fair and safe: spotting unusual ranking activity that could distort scores, and reviewing reported posts and photos.
• To answer you when you contact us.

Who can see what

• Anyone using Harvest: your name, username and profile photo (for example in people search), photos you add to a product page, and products you type in (their name and brand, not that you added them).
• Your circle (people who follow you or share a circle with you): your communities, rankings and the scores you gave, the swaps you make, and the messages and posts you share with them.
• No one else: your email, phone number, password, allergies, goals, diet, family details, check-ins, shopping lists, recipes, saved items and Kroger details.
• Community scores: your rankings count toward each product's community score, combined with everyone else's, without your name on them.

Services we use

We share only what each service needs to do its job:

• Supabase stores account and app data and the photos you upload. Render hosts our server.
• Kroger, USDA FoodData Central, FatSecret, Open Food Facts and UPCitemdb provide product, nutrition and price information. We send them product names or barcodes, and for Kroger, your chosen store. We don't send your name or email.
• Links you save: to show a title for a link you paste, our server opens that link. For TikTok and YouTube links, we ask TikTok or YouTube for the title.
• Anthropic checks each uploaded photo for content that isn't allowed, and reads the receipts you add. We send the photo and, for a product photo, the product's name; not your name or email.
• Expo delivers push notifications to your phone. We send it your phone's push token and the text of the notification.
• When you connect Kroger, you sign in on Kroger's own site, and Kroger's privacy policy applies to what you share with them.

We don't sell or rent personal information, and we don't share it for advertising. We may disclose information if the law requires it, to protect the safety of our users, or as part of a merger or sale of Harvest, in which case this policy continues to apply.

Your choices and rights

• Edit your profile, goals, allergies, diet and family details in the app at any time. Remove your profile photo from your profile.
• Delete rankings, saved items, shopping list items, recipes, posts and your chat messages in the app.
• Block people, and report posts from any post.
• Delete your account in the app under Profile → Delete account. This permanently removes your sign-in, profile, rankings, lists, posts and answers, and takes your name off other people's follows and circles. It also deletes your profile photo and the photos you added to product pages. Community scores are recalculated without your rankings. Products you typed in stay as part of the shared product catalog, without your name; email us if you want them removed.
• Email info@letsharvest.co to get a copy of your data, correct it, or ask us to delete anything. We'll answer within 30 days.

Children

Harvest is not for children under 13, and we don't knowingly collect their information. If you think a child under 13 has an account, email us and we'll delete it. Parents may add a child's first name, age range and allergens to their own account to personalize suggestions. Children do not get their own accounts.

Security and retention

Data is sent over encrypted connections, and access to it is limited to what's needed to run Harvest. We keep your information while your account exists. When you delete your account it is removed from our systems, and backups age out within 30 days.

Changes

If we change this policy, we'll update the date above. For significant changes, we'll also tell you in the app before they take effect.

Questions: info@letsharvest.co