🌿 Privacy Policy

Last Updated: October 4, 2025

1. Information We Collect

Sage is designed to respect your privacy. Here's what we do and don't collect:

Local Data (Stored on Your Device)

• Food inventory items - names, quantities, expiration dates, barcodes, photos, notes
• User preferences - app settings, Discord webhook URL (if configured), household name
• Household information - household name, member names (if using household sharing)

Cloud Sync Data (Optional - Supabase)

If you choose to use household sharing features, the following data is synced to Supabase (an open-source backend):

• Food inventory items from your household
• Household name and member names
• Anonymous authentication tokens (no email or personal info required)

What We DON'T Collect

• ❌ No email addresses
• ❌ No phone numbers
• ❌ No location tracking
• ❌ No analytics or usage tracking
• ❌ No advertising IDs
• ❌ No personal identifiable information

2. How We Use Your Information

Your data is used ONLY for these purposes:

• Local inventory management - Track your food items on your device
• Household sharing - Sync inventory with family members (if enabled)
• Expiration notifications - Send alerts via Discord webhook (if configured by you)
• Barcode lookup - Fetch product information from public APIs (Open Food Facts, UPCItemDB)

3. Data Storage & Security

Local Storage (Hive Database)

All your data is stored locally on your device using Hive, an encrypted local database. This data never leaves your device unless you explicitly enable household sharing.

Cloud Storage (Supabase - Optional)

If you enable household sharing:

• Data is stored in Supabase (open-source Firebase alternative)
• You can use our hosted Supabase instance OR self-host your own
• Data is transmitted over HTTPS
• Anonymous authentication - no email or password required

4. Third-Party Services

Sage may interact with these third-party services:

Barcode Lookup APIs

• Open Food Facts - Free, open database of food products
• UPCItemDB - Product information database
• These services receive ONLY the barcode number when you scan items

Discord Webhooks (Optional)

If you configure a Discord webhook URL, Sage will send expiration notifications to your Discord channel. We don't store or have access to your webhook URL on any server.

Supabase (Optional)

If you enable household sharing, your inventory data is synced via Supabase. See their privacy policy at supabase.com/privacy

5. Data Sharing

We DO NOT sell, rent, or share your data with anyone.

The ONLY data sharing happens when:

• You explicitly enable household sharing (data shared with your household members via Supabase)
• You configure Discord notifications (sent to YOUR Discord webhook)

6. Your Rights & Control

You have complete control over your data:

• Delete your data - Uninstall the app to remove all local data
• Export your data - Contact us for a data export (coming soon in-app)
• Disable cloud sync - Leave household to stop syncing
• Self-host - Run your own Supabase instance for full control

7. Children's Privacy

Sage does not knowingly collect information from children under 13. The app is designed for household management and is intended for use by adults.

8. Open Source & Transparency

Sage is 100% FOSS (Free and Open Source Software). You can inspect the entire codebase, including:

• How data is stored locally
• What data is sent to Supabase
• How barcode APIs are used
• No hidden tracking or analytics

9. Changes to This Policy

We may update this privacy policy from time to time. We'll notify you of any material changes by updating the "Last Updated" date at the top of this policy.

10. Contact Us

Questions about this privacy policy? Contact us:

• GitHub Issues: github.com/yourusername/sage
• Email: [Your contact email]