Gramm Privacy Policy

1.1 Locally Stored Information

The following information may be stored locally on your device:

• Calculation history;
• Custom shopping lists;
• Saved or favorite products;
• User-entered product information;
• User-entered nutrition information;
• Unit-price calculations;
• Nutrition comparisons;
• Application preferences and settings; and
• Other information necessary for the application’s local functionality.

This information is stored using local device storage, including SQLite/Android Room, as applicable to the version of Gramm you use. Gramm does not require a Gramm account for its core functionality, and the locally stored information described above is not routinely transmitted to Gramm’s servers.

1.2 Personal Information

Gramm is designed not to collect or maintain personally identifiable information (“PII”) as part of the application’s core functionality. Gramm does not sell, rent, or otherwise provide your personal information to third parties for their own marketing purposes. You should nevertheless avoid entering sensitive personal information into product names, shopping lists, notes, or other free-form fields unless necessary for your use of the application.

Gramm may request access to your device’s camera for barcode scanning. The camera is used exclusively for on-device barcode recognition, including barcode scanning using Google’s ML Kit technology. When you scan a barcode:

• The barcode recognition process occurs on your device;
• Gramm does not intentionally upload the raw camera image or video stream to Gramm servers;
• Gramm does not store raw camera images or video recordings on external servers; and
• Gramm uses the recognized barcode number to retrieve publicly available product information, as described below.

You may revoke camera permission through your Android device settings. Revoking the permission may prevent barcode-scanning functionality from operating.

When you scan a barcode, Gramm may send the barcode identifier itself to public product-information services to retrieve product metadata.

Depending on the product and availability, these services may include:

• Open Food Facts; and
• UPCitemdb.

The purpose of these requests is limited to retrieving publicly available product information, which may include:

• Product name;
• Brand;
• Package or serving size;
• Publicly available nutrition information;
• Product identifiers; and
• Publicly available CDN image URLs.

These requests are designed to be anonymous product lookups. Gramm does not intentionally attach your name, email address, account information, shopping-list contents, calculation history, or other personal profile information to these barcode lookup requests.

The third-party services receive and process requests according to their own privacy policies and terms. Gramm does not control the privacy practices, availability, accuracy, or security of third-party services.

Information retrieved from third-party databases may be incomplete, outdated, incorrect, or otherwise inaccurate. You should verify important product information against the physical product packaging and manufacturer’s labeling.

Although Gramm is designed around local-first operation, certain features require network access. Network requests may be made to:

• Retrieve publicly available product metadata following a barcode scan;
• Retrieve publicly available product images through third-party content delivery networks;
• Process purchases through Google Play; and
• Provide website functionality or other explicitly network-dependent features.

Except as described in this Privacy Policy, Gramm does not use these network requests to build a personal profile of your shopping activity or calculation history.

Gramm may offer paid features, including Gramm Pro, through Google Play. Purchases and subscriptions are processed through the Google Play Billing system. Gramm does not directly receive, process, or store your:

• Credit card numbers;
• Debit card numbers;
• Bank account numbers;
• Payment credentials; or
• Billing addresses.

Payment information is handled by Google and the applicable payment providers through Google Play. Gramm may receive limited purchase-related information necessary to determine whether a purchase or subscription is active and to provide the corresponding Pro functionality. Google’s handling of payment and account information is governed by Google’s own privacy policies and terms.

Because Gramm’s primary user data is stored locally, Gramm does not maintain a central server-side database containing your calculation history, shopping lists, favorites, or application preferences.

Your local data generally remains on your device until you:

• Delete individual items using available in-app controls;
• Clear applicable application data;
• Clear your local history or lists using available in-app controls; or
• Uninstall Gramm.

Uninstalling Gramm may permanently remove locally stored application data, depending on your Android device, operating-system settings, and backup configuration. You are responsible for maintaining any backups of information you wish to preserve.

Gramm does not sell or rent your personal information.

Gramm does not intentionally share your personal information with advertisers, data brokers, or third parties for behavioral advertising.

Limited information may be transmitted to third-party services when necessary to provide specific functionality, including:

1. Public product databases — barcode identifiers may be sent to Open Food Facts and/or UPCitemdb to retrieve product information.
2. Google Play — purchase and subscription transactions are processed through Google Play Billing.
3. Other service providers — where technically necessary to operate a particular feature, subject to applicable privacy requirements and the applicable provider’s terms.

Gramm does not intentionally transmit your local shopping lists, calculation history, favorites, or locally stored preferences to the public product databases described above.

Gramm is not specifically directed toward children under the age of 13.

We do not knowingly collect personal information from children under 13 through Gramm. If you believe that a child has provided personal information to Gramm in a manner that is inconsistent with this Privacy Policy, please contact us at support@gramm.mobile.

Parents and guardians should supervise children’s use of applications and should ensure that children do not provide unnecessary personal information through free-form application fields.

Gramm uses reasonable technical measures appropriate to its local-first design to protect information stored by the application.

Because much of Gramm’s data is stored directly on your device, the security of that information is also dependent on the security of your device, operating system, device passcode, encryption settings, backups, and other device-level protections.

No method of electronic storage or transmission is completely secure. Accordingly, we cannot guarantee absolute security.

You control the local information stored by Gramm. Depending on the version of the application, you may:

• Delete individual saved items;
• Remove shopping-list entries;
• Clear calculation history;
• Modify or remove favorites;
• Change application preferences;
• Revoke camera permission; and
• Uninstall the application.

You may also control network permissions and application access through your Android device’s settings, although disabling network or device permissions may affect certain Gramm features.

Gramm may interact with third-party services, including Google Play, Open Food Facts, UPCitemdb, Google ML Kit, and third-party content delivery infrastructure.

Those services operate independently from Gramm and may have their own privacy policies, terms of service, data practices, and retention policies.

This Privacy Policy applies to Gramm’s handling of information and does not govern the independent practices of third parties.

The Gramm website at gramm.mobile may provide information about the application, support resources, purchase information, and other publicly accessible content.

The website may necessarily process limited technical information associated with ordinary Internet communications, such as IP addresses, browser information, device information, or server logs, depending on the hosting and infrastructure used to operate the website.

Gramm does not use the website to intentionally create a personal profile of visitors.

If additional analytics, advertising, contact forms, cookies, or other tracking technologies are introduced in the future, this Privacy Policy will be updated as appropriate.

Gramm may be used by individuals in different countries.

Because Gramm is designed around local storage, much of the information you create in the application remains on your device. However, third-party services used by Gramm may process information in countries other than the country in which you reside.

Where applicable, Gramm will handle personal information in accordance with applicable privacy and data-protection laws. Nothing in this Privacy Policy is intended to limit rights that cannot lawfully be waived under the laws applicable to you.

To the extent applicable under California law, California residents may have rights concerning their personal information, including rights to know, delete, correct, or otherwise control certain categories of personal information.

Gramm does not sell personal information and does not intentionally share personal information for cross-context behavioral advertising.

Because Gramm’s core application data is designed to remain locally on your device, many requests concerning such data can be fulfilled directly by using the application’s deletion and data-management controls.

If you have a privacy-related request that cannot be addressed through the application, contact us at support@gramm.mobile.

Depending on where you reside and applicable law, you may have additional privacy rights, including rights relating to access, deletion, correction, restriction of processing, objection, portability, or withdrawal of consent.

Because Gramm’s core user-generated data is stored locally, you can generally exercise control over that information directly through the application or your device.

For questions regarding privacy rights or Gramm’s handling of information, contact: support@gramm.mobile.

Nothing in this section limits any mandatory rights provided by applicable law.

We may update this Privacy Policy from time to time to reflect changes to Gramm, applicable law, third-party services, or our data practices.

When we make material changes, we may update the “Last Updated” date and, where appropriate, provide additional notice through the application or website.

Your continued use of Gramm after an updated Privacy Policy becomes effective constitutes acknowledgment of the updated policy to the extent permitted by applicable law.

If you have questions, concerns, or requests concerning this Privacy Policy or Gramm’s privacy practices, contact:

AP Prints as the entity responsible for Gramm
Phillipsburg, New Jersey, USA
Email: support@gramm.mobile
Website: gramm.mobile

Effective Date: August 2026