Pocket Cabbage Privacy
This policy is organized to mirror the categories and terminology used in Apple's Privacy Nutrition Label. It describes the data Pocket Cabbage and its backend services actually handle, why the data is used, whether it is linked to you, and whether it is used for tracking.
Pocket Cabbage
Data Used to Track You
None
Pocket Cabbage does not use data for tracking across other companies' apps, websites, or offline properties, and does not share data with data brokers for tracking purposes. There are no third-party advertising SDKs.
Data Linked to You
Pocket Cabbage does not link this device identifier to your Apple ID, name, email address, or other directly identifying information. It is nevertheless listed here because Apple's definition of “linked to you” includes information associated with a device.
Data Not Linked to You
These categories are sent to our backend only when needed for the corresponding features. The policy supplied for this release states that they are not associated with a name, email address, Apple ID, or account identifier.
Data Stored Only on Your Device or Private iCloud Account
Household information, pantry inventory, receipts, saved recipes, meal plans, and price history are stored on the device and synced through your own private iCloud/CloudKit database. Thimbleberry Labs does not have access to that private iCloud store. When the app sends relevant information to our backend to perform a feature, the transmitted data is described in the categories above.
How Apple-style data categories map to Pocket Cabbage
App Functionality
All categories listed above are used to provide meal planning, grocery planning, price lookup, scanning, recipe generation, nutrition lookup, shopping lists, security, or related core features.
Product Personalization
The household preferences, dietary restrictions, tastes, dislikes, stores, and meal preferences are used to tailor recipes and meal plans to the household.
Tracking
None. Pocket Cabbage does not use data for cross-company advertising or advertising measurement and does not share data with data brokers.
What Pocket Cabbage Collects and Where It Goes
Pocket Cabbage does not require an account and does not collect your name, email address, phone number, or other contact information.
Household profile
The app stores family size, ZIP code, weekly budget and flexibility, dietary restrictions/allergies, taste preferences, dislikes, favorite stores, per-meal preferences, and free-form special instructions. Relevant fields are sent to our backend when you generate or swap a meal plan or build a shopping list.
- OpenAI receives relevant household details to generate recipes and meal plans and may estimate ingredient prices. Anthropic may be used instead if configured on our server.
- Kroger Developer API receives the ZIP code and ingredient search terms to find a nearby store and real shelf prices.
- U.S. Bureau of Labor Statistics may receive only a coarse U.S. region and generic grocery item codes for regional price fallbacks.
- USDA FoodData Central receives ingredient names to return nutrition facts.
Pantry inventory
Pantry item names, categories, storage locations, quantities, and units are stored on your device and synced through your iCloud account. They are sent to the backend when needed to generate a meal plan or shopping list.
Photos
Pantry, store-flyer, and receipt photos are sent to the backend for scanning. Our server holds each photo in memory only for the duration of that request and does not write it to disk or a database. The app stores the extracted results rather than the original photo. The AI provider's own retention practices apply to the image and text it processes.
Receipts, recipes, meal plans, and price history
Receipt information, saved recipes, meal plans, and price history are stored on your device and synced through iCloud. They are sent to the backend only when needed for pricing, generation, shopping-list creation, or a recipe swap.
Device attestation
Pocket Cabbage uses Apple's App Attest (DCAppAttestService) to verify requests come from a genuine, unmodified copy of the app. Our server stores a one-way hash of the attestation key, its public key, and a signature counter for as long as the app remains installed, to detect cloned or tampered clients and enforce fair-use limits. The hashed device identifier is not shared with the service providers listed below and is not used for tracking.
Third-Party Services
| Provider | Data received | Purpose |
|---|---|---|
| OpenAI / Anthropic | Scanned photos; relevant ZIP code, budget, family size, dietary restrictions, cuisine/meal preferences, pantry items, and sale prices | Recipe and meal-plan generation, price estimation, and image/text scanning |
| Kroger Developer API | ZIP code and ingredient search terms | Store discovery and shelf-price lookup |
| U.S. Bureau of Labor Statistics | Coarse U.S. region and generic grocery item codes | Regional average-price fallback |
| USDA FoodData Central | Ingredient names | Nutrition facts |
| Apple | Private iCloud/CloudKit sync, App Attest verification, local notifications | Data synchronization, security, and on-device reminders |
| Fly.io | Standard connection/hosting metadata | Backend hosting |
OpenAI and Anthropic control their own retention and data-use policies for information they process. The production configuration should be reviewed against their current policies before App Store submission.
Data We Do Not Collect
- Name, email address, phone number, or other contact information
- Precise location
- Contacts
- Advertising identifiers for tracking
- Health records from HealthKit or other medical-record systems
Dietary restrictions and allergies that you type into Pocket Cabbage are handled as described above; the app does not access external health records.
Data Retention and Deletion
Your household data, pantry, recipes, receipts, and price history remain on your device and private iCloud account until you delete them. You can delete individual items in the app, remove the app to delete its local copy, and use the app's export feature to keep your own copy.
On our server, AI-generated recipe caches are retained for up to 30 days. Resolved prices are cached for up to 24 hours, or up to 30 days for AI-estimated prices. Device attestation records are retained for as long as the app remains installed on the device. Reinstalling the app creates a new, unlinked device record.
Security
Data transmitted to our backend and from our backend to the listed providers is sent over encrypted HTTPS connections. App Attest is used to verify genuine app clients before issuing a short-lived session token.
Children's Privacy
Pocket Cabbage is intended for household grocery and meal planning and is not directed at children under 13. We do not knowingly collect data from children.
Changes to This Policy
If the app or backend changes how data is handled, we will update this policy and the date above. Apple App Store privacy disclosures will also be updated when required.
Contact
Questions about this policy or your data can be sent to support@thimbleberrylabs.com.