Numa Basket is a grocery list that learns your household’s repeat purchases. This policy explains what data the app handles and why.
The short version
- Your list, items and purchase history live on your device. There is no account system and we do not upload your grocery list.
- To suggest what’s due, the app sends only numeric references and day-counts — never an item’s name and never a calendar date.
- The app is free, with a banner ad on the History and Rhythms tabs — never on your list, and never built from what you buy.
What’s stored on your device
Your items, lists (“trips”), what was ticked off and when, the groups you file items under, and your settings are stored locally in the app’s private database. Nothing here is sent to us. You can export or delete all of it yourself from the app’s Settings screen; Android’s own backup may also hold a copy in your Google account, as below.
Your own backup
Android’s own backup service includes this app, so a reinstall or a new phone brings your items, lists, groups and trips back with nothing to set up.
That copy goes to your Google account, not to us. We cannot read it, cannot delete it, and never see it. Whether it happens at all is controlled by Android, in Settings → Google → Backup, and by the same setting on a device-to-device transfer.
The per-install token the app uses to ask for rhythms is deliberately left out of the backup, so a restored copy provisions a new one rather than cloning the old device’s identity.
What leaves your device, and when
Suggestions (on app open, and to refresh them). The app sends a compact, de-identified summary to our statistics service so it can work out what’s due:
- a number standing in for each item you’ve bought before — never its name,
- how many days ago each purchase happened — never a calendar date,
- how many suggestions were shown and how many you took, so the app can report its own accuracy.
It does not send item names, dates, or anything that reveals which day of the week you shop. On first use the app creates a random per-install token, kept in the phone’s secure storage rather than the app’s database, so restoring a backup onto a new phone never carries your old device’s identity with it. The token authenticates the request; it does not identify you.
Offline by design. Writing your list, adding items and ticking them off never touches the network — only the suggestions feature does, and only with the de-identified summary above.
Reminders
The shopping reminder is off unless you turn it on, in Settings. When you do, Android asks your permission to show notifications; decline and the reminder stays off.
The reminder is worked out on your phone, from rhythms the app already has. Nothing extra is sent to schedule it, and the notification itself never leaves the device. The app also asks to be told when the phone restarts, so a reminder already scheduled survives a reboot.
Ads
Banner ads on the History and Rhythms tabs keep the app free. There are none on your list, in Settings, or on first run.
The ads come from Google AdMob. To choose and measure them, Google’s SDK uses your device’s advertising ID and device information, and that data goes to Google as a third party. What we send it is nothing about your shopping: no item names, no purchase history, no rhythms and no list.
In the EEA and the UK, the app asks for your consent before any personalised ad is shown, and you can change that answer later from Settings → Privacy options. You can also reset or delete the advertising ID itself in Android’s own settings, under Privacy.
What we do not collect
No name, email, account, phone number, location or contacts. No item name or purchase date ever leaves your device, to us or to any advertiser. Besides the network access it needs to fetch suggestions, the app asks only for permission to show notifications — and only if you turn the reminder on — and to be told about a restart. No camera, storage, location or contacts access.
Data retention & deletion
On-device data remains until you delete it — the app’s Data screen lets you export everything it knows as a plain file, or delete it all in one action, at any time. The de-identified numbers sent for a suggestion are used only to compute that suggestion and are not retained to build a profile of you.
Children
Numa Basket is not directed at children.
Changes
We may update this policy; material changes will be reflected here with a new effective date.
Questions about this policy? Contact support@numaapps.com.