Totup Privacy Policy

Last updated: July 7, 2026

Totup helps you see grocery prices and nutrition facts before checkout. In short: **your personal data lives on your device; we keep no account or profile that can be linked to you.** We only store scanned prices in anonymous form (not linkable to your identity) to power community price comparison.

1. Data that stays on your device

Receipts, shopping lists, history, settings, your monthly AI scan counter, and, if you sign in, your name and email (obtained from Apple or Google) are stored only on your phone. Deleting the app or using "Delete account" removes them; we hold no copies.

2. Data sent for processing

Open Food Facts database to fetch nutrition data. No identity is attached.

nutrition table, the photo is relayed through our server to Google's Gemini AI to read it. Photos are processed transiently and not stored on our server. Taking a photo is always your choice.

Google's privacy policy. Where required (e.g. the EU) you are asked for consent; on iOS your App Tracking Transparency choice is respected. Premium removes ads.

Google Play; we never see your payment details. RevenueCat is used to validate subscription status.

an anonymous observation (barcode, store name, price, country, date and a random device identifier) is sent to our server so we can offer community price comparison in the future. Your name, email or receipt/list contents are never sent and this data cannot be linked to your identity. If you set no store, the price stays on your device and is not sent.

which screens and features are used, and how often) are collected via PostHog. This data is tied only to a random device-specific identifier; your name, email, receipts and list contents are never sent. See the PostHog privacy policy.

notification registration through OneSignal, used to deliver announcements and reminders. You can turn permission off any time in your phone settings.

receipts and price memory are backed up on our server, tied to your account, so you can continue where you left off on another device. If you use the app as a guest, this data stays on your device only. Choosing "Delete account" permanently erases your cloud backup as well.

3. Camera

Used only when you open the scan screen, to read barcodes and take photos. We do not access the microphone.

4. Children

Totup is not directed at children under 13 and does not knowingly collect their data.

5. Security & transfers

Data in transit is encrypted (HTTPS). The service providers above (Google, Open Food Facts, RevenueCat, Apple) may process data abroad, solely to run the relevant feature.

6. Your rights (GDPR / KVKK)

Since your personal data lives on your device, you can access, correct and delete it directly in the app (Profile → Account). Questions and requests: destek@totup.app

7. Changes

Updates are published on this page with a new "last updated" date.