🥦 Broccoly

Privacy Policy

Last updated: 7 June 2026

The short version: Broccoly collects as little as possible. The items from your receipts and your history stay on your device, encrypted. The receipt photo itself is never shared or saved. There are no accounts and we never ask for your name or email. To identify products, we send only the text of your receipt's line items to our matching service, and that request is deleted automatically afterwards.

Who we are

Broccoly ("we", "us") is a mobile app that scans grocery receipts and shows nutritional and environmental information about the products you buy, along with spending insights. This policy explains what data the app handles and how. If you have questions, email support@broccoly-app.com.

Information stored on your device

The items parsed from your receipts, along with your history and insights, are stored locally on your device. This data is encrypted at rest. The app does not store or share pictures from receipt scanning; each photo is read to extract the items and then discarded. This information is not synced either, because Broccoly has no accounts.

Information sent to our servers

To match the items on your receipt against product information, the app sends the following to our matching service (api.broccoly-app.com):

The parsed item text from your receipt (product names and price);
The store name (from the receipt), when the app can determine it, to improve matching;
A country code (for example, "DE"), to improve matching. This is sent only if you grant location permission. We use your location solely to derive the country code on your device; we do not send or store your coordinates;
If you use the optional Lock Screen progress indicator (Live Activity), an Apple-issued push token, used only so our server can update that indicator on your device through Apple's Push Notification service.

We do not receive your receipt photo, transaction details, your name, your email, your coordinates, contacts, or any account identifier. Matching requests are stored only transiently while they are processed and are then automatically deleted on a short schedule.

Your camera and photos

Broccoly uses your camera so you can photograph a receipt. The photo is read and interpreted on your device, then discarded. It is not shared or saved.

We use Google ML Kit's on-device text recognition and Apple's on-device text-recognition features to read the receipt and discard unnecessary information, such as transaction details and addresses. These features run entirely on your device.

No accounts

Broccoly does not require sign-up or login, does not build an advertising profile of you, and does not sell personal data. We don't keep a record that ties matching requests back to you.

Data sources and notifications

Open Food Facts — product, nutrition, and environmental information comes from the Open Food Facts database, which we update periodically to our own server; matching runs against that copy. Open Food Facts data is made available under the Open Database License (ODbL). All product lookups go through our own server.
Apple Push Notification service — if you use the optional Live Activity that shows scanning progress on your Lock Screen, our server delivers those updates to your device through Apple's Push Notification service. It is used only to update the progress indicator.

Data retention and deletion

Data on your device remains until you delete it. Uninstalling the app removes all of your local Broccoly data. Matching requests on our server are not linked to any identifier and are deleted automatically shortly after they are processed.

Children's privacy

Broccoly is not directed at children and does not knowingly collect personal information from children.

Changes to this policy

We may update this policy from time to time. When we do, we'll revise the "Last updated" date above. Significant changes will be reflected on this page.

Contact

Questions about your privacy? Email support@broccoly-app.com.