Penaria Privacy Policy

Effective July 22, 2026

1. Who we are and how to reach us

Penaria is a grocery receipt intelligence app operated by Double Door Media LLC, an Oregon (USA) limited liability company ("Penaria", "we", "us"). Questions, requests, or complaints: dev@doubledoormedia.com. We respond to privacy requests within 30 days.

2. Scope

This policy covers the Penaria iOS app, the Penaria API, and the Penaria website. The short version: your receipt data exists to power your own price insights, we do not sell it or use it for advertising, and you can delete everything at any time from inside the app.

3. Information we collect

Account information. When you sign in with Apple or Google we receive your email address (or Apple's private relay address) and a unique account identifier. Sign in with Apple happens natively on your device; we never see your Apple or Google password.

Receipt data. When you scan or share a receipt, we process the image to extract the store name, date, line items, quantities, and prices, and we store that extracted data with your account so the app can track your prices over time. Receipt images are processed for extraction and are not retained on our servers afterward.

Community price contributions. Sharing is on by default but only activates once you enter a zip code, and you can turn it off any time in Profile. When active, the item names, prices, store name, and zip code from your scans are added to a shared price pool. These contributions are anonymous by design: they are stored without your account identifier and cannot be traced back to you, which also means they cannot be individually retrieved or deleted later. Your precise location is never collected; only the zip code you type.

Purchase information. If you subscribe to Penaria Pro, the purchase is processed by Apple. We receive subscription status through RevenueCat (our subscription-management provider) tied to your account identifier. We never receive your payment card details.

What we deliberately do not collect. No advertising identifiers, no third-party analytics or tracking SDKs, no contacts, no precise location, no browsing history, and no photos other than the receipts you choose to scan or share.

4. How we use information

• To provide the product: build your price history, compute trip estimates and store comparisons, and grade our own predictions against your receipts.
• To operate community pricing for users who participate.
• To provide support when you contact us.
• To enforce our terms, prevent abuse (for example scan rate limits), and comply with law.

We do not use your data for advertising, we do not sell or rent it, and we do not share it with data brokers. We do not use your receipt data to train general-purpose AI models.

5. How we share information

We share data only with the service providers needed to run Penaria, each processing it solely on our behalf:

• Supabase (database, authentication, hosting): stores your account and extracted receipt data.
• Google Cloud (infrastructure) and the Google Gemini API (receipt text extraction): receipt images are sent to Gemini for extraction; under Google's paid API terms they are not used to train Google's models.
• RevenueCat (subscription management): receives your account identifier and purchase state.
• Apple (sign-in and payments) under Apple's own terms.

Beyond providers, we disclose information only if required by law or legal process, to protect the rights or safety of users or the public, or as part of a business transfer (in which case this policy continues to apply and we will notify you). Anonymous community contributions are visible to other users only in aggregated, outlier-filtered form.

6. Where we store information

Our servers are located in the United States. If you use Penaria from outside the US, your information is transferred to and processed in the US, which may have different data-protection laws than your country.

7. How long we keep information

• Account and receipt data: for as long as your account exists.
• Account deletion: Profile > Delete account permanently removes your account, receipts, extracted items, prediction history, and entitlement records from our production systems immediately. Encrypted backups age out within 30 days.
• Anonymous community contributions: retained indefinitely; they contain no link to you.
• Support email: kept as ordinary business correspondence.

8. How we protect information

Data is encrypted in transit (TLS) and at rest. Database access is protected by row-level security so an account can only read its own rows. Production access is limited to the operator with multi-factor authentication. No system is perfectly secure; if we learn of a breach affecting your personal information we will notify you without unreasonable delay, consistent with applicable law.

9. Your choices and rights

• Access: your receipt history and prices are visible in the app itself. You can also email us for a copy of your data.
• Deletion: in-app, immediate, no email required (Profile > Delete account).
• Community sharing: one toggle in Profile turns contributions off.
• Correction: flagged "check price" items can be reviewed in-app; for anything else, email us.

We honor these rights for all users regardless of where you live, and we do not discriminate against you for exercising them.

10. State-specific notices (California and similar laws)

For residents of California and states with similar privacy laws: we collect the categories described in Section 3 (identifiers and commercial information); we use them for the purposes in Section 4; we disclose them only to the service providers in Section 5. We do not sell personal information and we do not share it for cross-context behavioral advertising, so there is nothing to opt out of. You may exercise rights to know, delete, and correct as described in Section 9, and you may designate an authorized agent by having them contact us with proof of authorization.

11. Children

Penaria is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has created an account, contact us and we will delete it.

12. Changes to this policy

If we make material changes we will update the effective date above and notify you in the app or by email before the change takes effect. Continued use after the effective date means the updated policy applies.

13. Contact

dev@doubledoormedia.com · Double Door Media LLC, Oregon, USA.