Shopping List + Inventory — Privacy Policy
Last updated: October 28, 2026
Data Collection
The app has no account or sign-in. Your shopping lists, inventory, categories, and settings are stored only on your device, and we, as the developer, do not receive or store this content. Two things can leave your device: anonymous usage statistics (see "Usage statistics" below), unless you turn them off, and receipt photos, only if you turn on smart receipt reading (see "Smart receipt reading" below). The free version's ad provider also collects some information (see "Advertising" below).
Usage statistics
To understand which features are used and to improve the app, Shopping List sends anonymous usage events to TelemetryDeck, a privacy-focused analytics service. The events record actions, such as opening the app (with whether you have a subscription and a rough size range of your lists), adding, checking off or clearing items (with which page, never the item), switching tabs, sharing a list, using voice input or scanning a price tag or receipt (with whether it worked), searching the inventory (never the words searched), turning reminders on or off, opening spending or price history, exporting or importing a backup, changing the language, and the steps of a subscription purchase (opening the offer, tapping a plan, and the result). Each event also includes the app version, iOS version, device model, language and region settings, and an anonymous identifier. The identifier is derived on your device from an app-specific random ID and is hashed (scrambled one way) before it is sent, so it is not used to identify you or to follow you across other companies' apps and websites. We never send item names, prices, notes, search words, voice recordings, photos or anything you type, and these statistics are not linked to your identity or used for advertising. TelemetryDeck processes this data on our behalf under its privacy policy (telemetrydeck.com/privacy). You can turn this off at any time in Settings → Privacy settings with "Share anonymous usage data"; when it is off, the app stops sending events.
Advertising
The free version shows banner ads provided by Google AdMob through the Google Mobile Ads SDK. To show and measure ads, Google and its partners may collect and use information such as your device's advertising identifier or similar device identifiers, IP address, device and app information, and ad interactions, as described in Google's policy: https://policies.google.com/technologies/ads. If you have a Pro or Ad-Free subscription, the app does not request ads.
The app does not ask for permission to track you across other companies' apps and websites. In regions where the law requires it (for example the EEA and UK), the app shows Google's consent message before any ad is requested, and ads are not requested until consent is given where it is required. In those regions you can change your choice at any time from Settings → Privacy settings.
App Store Purchases
Shopping List offers optional auto-renewable subscriptions through Apple's App Store. When you buy or restore a subscription, the app receives the product and transaction status needed to enable the matching features, and checks it again from time to time. Apple processes the payment, and we do not receive your payment card details or Apple Account password.
Voice input, camera and photos (Pro)
These features are optional and only start when you tap them; the app asks for the matching permission the first time.
Voice input: the app turns what you say into text to fill in an item or an expense. It tries to do this on your device. If your device cannot, the app shows a message and the recognition is then handled by Apple's speech service, so your audio may be sent to Apple under Apple's privacy policy. We do not save recordings and we do not receive them.
Camera and photos (price tags and receipts): by default the photo is read on your device to find the names and prices. It is used only for that and is not saved by the app. Price tags are always read on your device. Receipt photos are sent off your device only if you turn on smart receipt reading, described below. You can also choose a photo from your library.
Smart receipt reading (Pro, optional)
Smart receipt reading stays off until you agree to it the first time you scan a receipt, and you can turn it off at any time in Settings, under Privacy settings. When it is on, the app makes a smaller copy of the receipt photo and sends it, with your app language and Apple's signed proof of your subscription, to our server, which runs on Cloudflare. Our server checks the subscription and passes the photo to Anthropic's Claude model, which reads the item names, quantities and prices and sends them back to the app. Neither the app nor our server saves the photo or what was read from it. If the service is not available, the app reads the receipt on your device instead.
To count each subscription's monthly allowance, our server keeps only a salted hash of the subscription's transaction number and how many receipts were read in each month. It does not keep the photo, your name, or your Apple Account. Anthropic processes the photo as our service provider. Under Anthropic's commercial data retention policy, inputs and outputs of its API are deleted automatically within 30 days, unless longer retention is needed to enforce Anthropic's Usage Policy or is required by law, and Anthropic says it does not train its models on data from its commercial API. A receipt can show a store name, an address or the last digits of a card, so please check what is in the photo before you send it.
Notifications
If you enable restock reminders, the app schedules local notifications directly on your device to let you know when items are running low. This is handled entirely on-device and does not involve any server.
Backup & Export
You may export your data to a spreadsheet file, or import a previously exported file, using your device's native share sheet. This only happens when you choose to do so — your data is never uploaded automatically.
Third-Party Services
This app uses Apple for App Store purchases and, when on-device recognition is not available, for speech recognition (Pro voice input). It uses Google AdMob for advertising in the free version, and TelemetryDeck for anonymous usage statistics. If you turn on smart receipt reading (Pro), receipt photos pass through our server on Cloudflare to Anthropic (Claude) to be read. It does not use any other analytics or crash-reporting service, or any account service.
Permissions
The app asks for a permission only when you first use the feature that needs it. Notifications: local restock reminders, scheduled on your device. Microphone and speech recognition: Pro voice input. Camera: photographing price tags and receipts (Pro). Photo library: choosing price tag or receipt photos (Pro), and choosing a backup file to import. The app does not request access to your location or contacts.
Contact
If you have any questions, please contact: contact@nebulatechapps.com
Shopping List + Inventory — 隐私政策
最后更新：October 28, 2026
数据收集
应用没有账号或登录。您的购物清单、库存、分类和设置只保存在您的设备上，我们作为开发者不会接收或存储这些内容。可能离开您设备的只有两类：匿名使用统计（见下文“使用统计”，除非您关闭），以及小票照片（仅在您打开智能识别后，见下文“智能识别小票”）。免费版的广告服务提供方也会收集部分信息（见下文“广告”）。
使用统计
为了解哪些功能被使用并改进应用，购物清单会向注重隐私的统计服务 TelemetryDeck 发送匿名使用事件。这些事件记录的是操作，例如打开应用（附带您是否订阅以及清单大小的大致区间）、添加、勾选或清空商品（只记录发生在哪个页面，不记录商品）、切换标签页、分享清单、使用语音输入或拍摄价签、小票（附带是否成功）、搜索库存（不记录搜索的文字）、开关提醒、打开消费或价格历史、导出或导入备份、切换语言，以及订阅购买的各个步骤（打开订阅页、点击方案和结果）。每个事件还带有应用版本、iOS 版本、设备型号、语言和地区设置，以及一个匿名标识。该标识由您设备上本应用专属的随机 ID 生成，并在发送前做单向加密（哈希），因此不会用来识别您，也不会用来跨其他公司的应用和网站追踪您。我们绝不发送商品名、价格、备注、搜索词、录音、照片或您输入的任何文字，这些统计也不会与您的身份关联，不用于广告。TelemetryDeck 代表我们并按其隐私政策（telemetrydeck.com/privacy）处理这些数据。您可以随时在“设置 → 隐私设置”中关闭“分享匿名使用数据”；关闭后，应用不再发送事件。
广告
免费版通过 Google Mobile Ads SDK 展示 Google AdMob 横幅广告。为展示和衡量广告，Google 及其合作伙伴可能收集并使用您设备的广告标识符或类似设备标识符、IP 地址、设备和应用信息以及广告互动等信息，详见 Google 的说明：https://policies.google.com/technologies/ads。如果您订阅了 Pro 或去广告会员，应用不会请求广告。
应用不会请求跨其他公司的应用和网站追踪您的权限。在法律要求的地区（例如欧洲经济区和英国），应用会在请求任何广告之前显示 Google 的同意提示；在需要同意的地区，未获得同意前不会请求广告。在这些地区，您可以随时在“设置 → 隐私设置”中更改选择。
App Store 购买
购物清单通过 Apple App Store 提供可选的自动续订订阅。购买或恢复订阅时，应用会接收用于启用对应功能的商品和交易状态，并会不时重新核对。付款由 Apple 处理，我们不会收到您的银行卡信息或 Apple 账户密码。
语音输入、相机和相册（Pro）
这些功能都是可选的，只有您点击时才会启动，第一次使用时应用会请求对应的权限。
语音输入：应用把您说的话转成文字，用来填写商品或支出。应用会先尝试在您的设备上完成识别；如果设备做不到，会显示提示，之后由 Apple 的语音识别服务处理，您的语音可能会按 Apple 的隐私政策发送给 Apple。我们不保存录音，也不会收到录音。
相机和相册（价签、小票）：照片默认在您的设备上识别，用来找出商品名和价格，只用于识别，应用不会保存。价签始终在设备上识别；小票照片只有在您打开下文所述的智能识别后才会离开您的设备。您也可以从相册选择照片。
智能识别小票（Pro，可选）
智能识别默认关闭，第一次扫描小票时会先征得您的同意，之后可随时在“设置”的“隐私设置”里关闭。开启后，应用会把小票照片缩小，连同您的应用语言和 Apple 签名的订阅凭证，发送到我们运行在 Cloudflare 上的服务器。服务器核对订阅后，把照片交给 Anthropic 的 Claude 模型读取商品名、数量和价格，再把结果发回应用。应用和我们的服务器都不保存照片，也不保存识别出的内容。服务不可用时，应用会改在您的设备上识别。
为了统计每个订阅每月的使用次数，我们的服务器只保存订阅交易编号的加盐哈希值和每月已识别的张数，不保存照片、您的姓名或 Apple 账户。Anthropic 作为我们的服务提供方处理照片。根据 Anthropic 的商业数据保留政策，其 API 的输入和输出会在 30 天内自动删除，除非为执行其使用政策需要更长时间保留，或法律另有要求；Anthropic 表示不会用其商业 API 的数据训练模型。小票上可能有店名、地址或卡号末几位，发送前请自行确认照片内容。
通知
如果您开启补货提醒，应用会在您的设备上直接安排本地通知，提醒您库存不足的商品。此功能完全在设备端完成，不涉及任何服务器。
备份与导出
您可以通过设备自带的分享功能，将数据导出为表格文件，或导入此前导出的文件。此操作仅在您主动选择时才会发生，您的数据不会被自动上传。
第三方服务
本应用使用 Apple 处理 App Store 购买；在设备无法本机识别时，语音输入（Pro）会使用 Apple 的语音识别服务。免费版使用 Google AdMob 提供广告，并使用 TelemetryDeck 进行匿名使用统计。如果您打开智能识别（Pro），小票照片会经我们在 Cloudflare 上的服务器交给 Anthropic（Claude）读取。本应用不使用任何其他分析或崩溃统计服务，也不使用账户服务。
权限
只有在您第一次使用对应功能时，应用才会请求权限。通知：补货提醒，在您的设备上本地安排。麦克风和语音识别：Pro 语音输入。相机：拍摄价签和小票（Pro）。相册：选择价签或小票照片（Pro），以及选择要导入的备份文件。应用不会请求访问您的位置或通讯录。
联系方式
如有任何疑问，请联系：contact@nebulatechapps.com