Privacy Policy

The Shrunk iOS app has no accounts or logins, analytics or advertising SDKs, ads, or cross-app tracking. The app stores the minimum needed to look up a product, alert you about something you asked us to watch, and honour a subscription you bought from Apple. This website uses the limited, non-advertising measurement described below.

The Shrunk website uses Vercel Web Analytics and Speed Insights to measure page views, web performance, and whether an App Store call to action was clicked. Our custom CTA events contain the page path, CTA placement, and outbound destination with its query string and fragment removed. They never contain barcodes, store or location data, email addresses, form input, the app's device id, or app activity.

These tools run only on this website. They are not included in the Shrunk iOS app, are not used for advertising, and are not used to follow you across other apps or websites.

Shrunk never collects: your name, email address, postal address, phone number, device location, contacts, photo library, health data, payment details, or any advertising identifier. If you tap Use Current Location, Apple Location Services processes a one-time location on your device to find and rank nearby stores; Shrunk does not transmit or retain the coordinate. There is no advertising SDK and no analytics SDK in the app.

Contributing a photo is optional and free. On your phone, Shrunk reads the label with Apple's on-device Vision framework to make an initial read. When you submit, the photo is uploaded to our server along with that reading, every time— not only when the reading is unclear. Every contribution is written to a private review queue so a human can compare the submitted reading with the label. The photo is deleted as soon as that review is accepted or rejected. No crowd reading becomes public and no alert is sent before this review. The number that survives review becomes part of the product's public size history and is not attributed to you.

Barcode scanning is separate, and no image ever leaves your phone: camera frames are read on device to extract the barcode digits, and only those digits are sent to our API to look the product up.

If you allow notifications, Apple issues a push token for this install and we store it so watchlist alerts and the weekly digest can reach you. Turning notifications off in iOS Settings stops delivery; asking us to delete your device row removes the token.

Shrunk Pro is an auto-renewable subscription sold by Apple. Apple handles payment; we never see your card, your Apple Account, or your billing details. Our server receives Apple's cryptographically signed transaction, verifies it, and stores an expiry date plus the random purchase token the app generated, so your subscription survives a reinstall — alongside two internal bookkeeping fields (a timestamp and a notification id) that only make sure Apple's renewal updates are applied in the right order and are never applied twice. Neither identifies you beyond what the purchase token already does.

• Cloudflare — hosts our API, database, photo storage and cache (United States).
• Vercel — hosts this website and provides the page-view, performance, and CTA measurement described above. It does not receive activity from the Shrunk iOS app.
• Apple — delivers push notifications, processes subscriptions, and resolves an optional one-time location or typed place on your device into a ZIP and coordinate. The coordinate ranks stores on-device and is then discarded.
• Kroger— when you have a store selected, we ask Kroger's Products API for that store's price and size for the barcode you scanned; we send the barcode and the store id. To find stores, we send only the ZIP resolved from your location or place search to Kroger's Locations API. To find alternatives, we send the product's category as a search term to Kroger's Products API. Neither the ZIP nor the category is stored by us, and we never send Kroger your device id, push token, coordinate, or search text.
• USDA FoodData Central and Open Food Facts — queried by barcode when a product is new to us, to fill in a name and image.

We do not sell or rent data, or share it with advertisers or data brokers. Website measurement is limited to the Vercel services described above.

• U.S. Department of Agriculture, FoodData Central — Branded Foods package sizes. Public domain data; USDA does not endorse Shrunk.
• Kroger Products API— live store prices and sizes, shown in the app with the attribution “Prices from Kroger”. Shrunk is not affiliated with, endorsed by, or sponsored by The Kroger Co.
• Open Food Facts — product names and images, licensed under the Open Database License (ODbL). Open Food Facts is a nonprofit, community-maintained project and does not endorse Shrunk.
• Shoppers — label photos and net-weight readings contributed through the app.
• Brand and product names are trademarks of their owners, used to identify products.

• Stop everything: delete the app. Nothing further is sent.
• Delete what is on the server: email us the Device ID shown in Settings → About → Device ID and we will erase the device record, your watchlist, your notification settings, and any submissions tied to it. Accepted size observations stay, because they are product facts and carry no identifier.
• Turn off alerts: Settings → Notification preferences, or iOS Settings → Notifications → Shrunk.
• Clear local scan history: Settings → Clear scan history.
• Manage or cancel Pro: iOS Settings → your name → Subscriptions. Apple handles cancellations and refunds.

Shrunk is not directed at children under 13 and we do not knowingly collect data from them. There is nothing in the app that asks for a name or an age.

Everything travels over HTTPS. The API stores no credentials for you, because there are none. Our own service credentials live in encrypted secret storage, never in the app.

If this policy changes materially, we will update the date at the top and note the change in the app's release notes. The current version always lives at this URL.

privacy@stackcurious.com