Privacy Policy

TapTap Grocery · Last updated 1 September 2026

What we collect

Nothing. The app talks to no server of ours, so we have no way to receive your grocery list or anything else about you. There is no account to create, no email address to give us, and no identifier we assign to you.

We do run the website you are reading this on. It serves static pages and keeps the ordinary access logs any web server keeps — see This website, which also explains the one page where we deliberately switch that logging off.

What the app stores, and where

• On your device. Your current grocery list, the country catalog you selected, pills you have hidden, any custom pills you created, and how often you add each item. Habit counts exist only to make the app suggest things you actually buy. All of this is deleted when you delete the app.
• In your iCloud account, if you are signed in. The same small set of data syncs between your iPhone, iPad, Mac, and Apple Watch using Apple's iCloud key-value storage. This is your iCloud account, operated by Apple under Apple's privacy policy. We have no access to it.
• In a shared iCloud record, if you share a list. Sharing uses Apple's built-in CloudKit sharing. The people you invite need no account with us and give us nothing. The shared list lives in Apple's infrastructure, not ours, and you can stop sharing at any time.

Network connections the app makes

The app works fully offline. It contacts the network in only four situations, none of which identify you and none of which carry your grocery list. (A list handed over from another app is a separate case and does not involve a network request by us — see Lists sent from another app.)

• Apple's iCloud, to sync your list across your own devices and to share a list if you ask it to.
• Apple's App Store, to load the price of the lifetime unlock and to process a purchase or a restore. Purchases are handled entirely by Apple; we never see your payment details.
• Apple's public App Store lookup service, when you open Settings, to list our other apps. This request contains our developer identifier, not anything about you.
• Kickstart Exchange, on the Mac and on the iPad only, to fetch the one advertisement card the app shows next to the catalog. The iPhone never makes this request at all. The request identifies the app, not you: our API key, the bundle identifier, the platform, the app and SDK versions, and the App Store country. In shipping builds it also carries an Apple-signed App Transaction, which proves this is a genuine install and is discarded immediately after it is checked. There is no advertising identifier and no device identifier, your grocery list is never involved, and the lifetime unlock stops these requests entirely. See the Kickstart Exchange privacy notice.

What the app does not do

• No analytics or usage tracking of any kind by us. We operate no analytics service and receive no usage data.
• No advertising identifier, no device identifier, and no tracking. Kickstart Exchange matches apps, not people. The lifetime unlock removes the advertisement card altogether.
• No third-party SDK other than Kickstart Exchange, which is used only to show that one card on the Mac and the iPad. Everything else is built on Apple's own frameworks.
• No location, contacts, photos, microphone, or camera access. The app never asks, because it never needs them.
• No selling or sharing of personal data. There is none to sell.

On-device intelligence

When you type a custom item, the app may suggest a matching icon. On devices that support Apple Intelligence this runs through Apple's on-device Foundation Models; on every other device it uses a keyword list built into the app. Either way, what you type stays on your device and is never sent to us or to any third party.

Spotlight

The app indexes its own grocery catalog into Spotlight so you can search for an item from your Home Screen. This index is stored locally by iOS and is removed when you delete the app.

Lists sent from another app

Another app — Cuisinier En Chef, for instance — can hand you a shopping list through a link such as https://vendredi-app.fr/taptap-grocery/add?…. The ingredients are in the link itself.

• Nothing is added without you. The app shows you the list, names the app it came from, and waits. Any app, web page, or QR code can produce one of these links, so a link opened by accident must not be able to change your shopping list. It cannot.
• The matching happens on your device. Turning farine into the flour pill is done against the catalog built into the app. Nothing is looked up online.
• We do not receive the list. When the app is installed, the link opens it directly and never reaches a web server at all.
• If the app is not installed, the same link opens a page on our website that shows you the list and offers the app. That page is plain HTML: it runs no analytics, sets no cookies, loads nothing from anywhere else, and sends the list nowhere. Our web server is configured not to record the address of that page, precisely because the address contains your list. It is not written to our logs and it is not stored.

This website

The pages under vendredi-app.fr/taptap-grocery/ — this one included — are static files. They set no cookies and load no third-party scripts, fonts, or images. Our web server keeps ordinary access logs for the site, as web servers do, with the exception noted above; those logs are used to keep the site running and are not combined with anything else or shared.

Children

TapTap Grocery is safe for children to use — icon-only mode exists specifically so a child who cannot yet read can help build the shopping list. Because the app collects no data at all, it collects none from children either.

Your control

• Delete the app to remove everything stored on the device.
• Turn off iCloud for TapTap Grocery in Settings to stop syncing.
• Stop sharing a list at any time from the iOS sharing controls.
• There is no account to close, because there is no account. We hold nothing of yours to delete — the only thing our systems retain is the ordinary web-server log described above, which is about requests to the website and not about anything you do in the app. If you want a log entry removed, ask and we will remove it.

Changes

If this policy ever changes, the updated version will be posted on this page with a new date. If a future version of the app ever collected anything, we would say so here plainly and before it shipped.

Contact

Questions about this policy: sylvain@ireplay.tv
vendredi-app.fr