Privacy Policy (Draft)

WHAT'S LEFT! is a smart-kitchen platform that helps households manage grocery inventory, reduce food waste, discover recipes, scan receipts, compare grocery prices across supported retailers, and use voice assistance through Alexa. This policy explains what information we collect, how we use it, and the choices you have.

Where features are described as planned, they are part of our roadmap and are not yet available; we only collect information for them once a feature is active.

1. Information we collect

We collect and process the following to operate the service:

• Account & authentication information — your email address, name, and sign-in credentials managed by the platform's authentication provider.
• Kitchen inventory & ingredient quantities — item names, brands, quantities, units, and package sizes you enter or import.
• Storage locations & expiration dates — where items are kept (fridge, freezer, pantry, etc.) and freshness or expiration dates.
• Receipt images & extracted receipt data — photos you upload and the store, line-item, price, and product data we read from them.
• Shopping lists & grocery preferences — items you add, check off, or plan to buy, plus dietary preferences and allergies.
• Recipes, leftovers, & cooking history — recipes you generate or save, leftover records, and a log of meals you have cooked.
• Household memberships & invited users — your household name and the members you invite to share it.
• Selected retailers & store preferences — the grocery retailers and stores you choose as favorites, including store labels and fulfillment preferences.
• ZIP codes or location information — used to find nearby participating stores and retrieve local pricing.
• Alexa account-linking information — a linking code and access token stored on your household to connect the voice skill.
• Application usage, diagnostic, & security logs — activity records and logs used to operate, secure, and troubleshoot the service.
• Subscription status & payment-related information — planned, collected only when premium membership is launched, and processed by our payment provider.

2. How we use information

We use the information above to provide the following features:

• Grocery inventory management and tracking.
• Receipt scanning and automatic import of purchased groceries.
• Food expiration and freshness tracking.
• Recipe suggestions based on what you already have.
• Cook & Deduct, which plans ingredient deductions when you cook a recipe.
• Shopping-list management and restocking suggestions.
• Grocery price comparisons across supported grocery retailers.
• Retailer and store selection for your preferred participating stores.
• Household synchronization so invited members share one kitchen view.
• Alexa voice assistance for checking and updating your kitchen by voice.
• Premium membership features — planned, available only when launched.

Third-party AI services may process receipt images, extracted ingredient information, and recipe requests on our behalf to perform receipt reading, data extraction, and recipe generation. We send only the content needed for the specific task. We do not knowingly use your grocery data to train external models; each AI provider's handling of submitted content is governed by its own terms.

3. Alexa voice integration

When you invoke the WHAT'S LEFT! skill, Amazon sends your spoken request to our secure endpoint. This may include the request type, intent name, slot values (such as an item name you said), and an Amazon user identifier. Amazon does not send us your raw audio.

Before acting on any request, we verify that it was genuinely sent by Amazon using its signature and certificate and that it is fresh. We then identify your household through the access token you linked. The skill can read and update only the single household it is linked to — it cannot access other households, and it never places a paid order or charges you.

For your linked household, Alexa may work with kitchen inventory, shopping lists, leftovers, and meal ideas so you can ask what you have, add or use items, check what to buy, and get meal suggestions. You link and unlink Alexa from your Profile at any time; revoking a link immediately disables it.

Today, Alexa is linked to your household through a code-and-access-token method stored on your household record. Secure OAuth account linking with Amazon is planned for a later development stage and is not yet available.

Request signature and timestamp verification is implemented and passed isolated Stage A testing (rejection of malformed, expired, and improperly signed requests). Full positive verification with a live Amazon-signed request is pending and will be confirmed before the skill is certified.

4. Multi-retailer grocery platform

WHAT'S LEFT! is a multi-retailer platform, not a single-store application. Kroger is our first tested grocery pricing integration. Our intended retail ecosystem includes Kroger, Publix, Food Lion, Walmart, Sam's Club, Costco, and additional grocery retailers as integrations become available. These are current and prospective retailer targets — not every integration is operational today.

To retrieve pricing, availability, or other authorized shopping information, we may transmit relevant product search terms, selected store details, ZIP codes, or approximate location information to supported grocery retailers or their service providers. We do not send your full kitchen inventory to retailers.

Not every retailer supports live pricing, ordering, account linking, or in-app checkout. Where a retailer does not, WHAT'S LEFT! may provide a shopping-list handoff or manual list as a fallback. Kroger is currently used for price lookups through its public product catalog using the ZIP code you provide to find a nearby participating store and its current shelf price.

When you request pricing, availability, or a future cart transfer, the selected grocery search terms and the relevant shopping-list items may be shared with the supported retailer or its service provider so it can return accurate results. We do not routinely share your entire household inventory with retailers.

Grocery prices shown in WHAT'S LEFT! are estimates and may differ from the final price at checkout due to store location, product availability, promotions, substitutions, taxes, fees, or other retailer factors.

Retailer names and logos belong to their respective owners. WHAT'S LEFT! is not affiliated with, endorsed by, or sponsored by any retailer unless stated otherwise.

5. How we store & protect it

Your data is stored in your WHAT'S LEFT! account on the Base44 platform. Household data is isolated so only members of your household can see it. Alexa access tokens are kept on your household record and are shown masked in the app; revoke a link at any time to immediately disable it. We apply request verification and security logging to help protect the service.

We keep your information for as long as your account is active or as needed to provide the service. When you delete an item or record, it is removed from your active view. We may retain limited residual data in backups or logs for a reasonable period, and where required by law to protect rights, resolve disputes, enforce agreements, or meet legal obligations. To delete your account and all associated data, contact us at the address in Section 11; we will process the request in accordance with applicable law, subject to any legal retention exceptions.

6. How we share data

We do not sell your personal data. We share information only as described in this policy — for example, with supported retailers and their service providers when you request pricing, availability, or cart transfers, and with the AI and infrastructure providers that power receipt reading, recipe generation, and hosting. Each provider's use of any data you submit is governed by that provider's own terms, which we encourage you to review.

We do not knowingly use your grocery data to train external models, and we do not share your kitchen contents with advertisers or data brokers. These are our commitments based on current provider configurations; we will update this policy if our providers' terms or practices change in a way that affects your data.

7. Your rights & choices

Within the app you can add, edit, and delete inventory items, receipt records, and shopping-list items; mark leftovers as eaten, frozen, shared, or discarded; manage household members; and revoke Alexa access from your Profile. Generated recipes can be saved or declined; deleting a saved recipe is not available in-app and can be requested through support. To delete your account and all associated data, or to make a privacy or data request, contact us at the address in Section 11.

8. Children

WHAT'S LEFT! is not directed at children under 13, and we do not knowingly collect their data.

9. Policy changes

If this policy changes, we will update the date above and notify you in the app before material changes take effect.

10. Planned features

Planned features include premium membership and subscription services, Amazon Alexa In-Skill Purchasing subscriptions with subscription entitlement processing, additional retailer integrations, and secure OAuth account linking with Amazon and with supported retailers. We will update this policy before any such feature begins collecting or processing new categories of information, including subscription and payment-entitlement data.

11. Contact

For general customer support, privacy questions, personal data requests, account and data deletion requests, Alexa Skill support, and subscription support (when subscriptions become available), contact us: