Privacy Policy
Effective: April 5, 2026
Aeyo has no servers. Your data lives on your device and in your personal iCloud account (Apple's infrastructure). Aeyo cannot access it.
What stays on your device
Grocery lists, carts, stores, purchase history, learned aisle order, insight scores.
What syncs to your iCloud
Everything above, encrypted in your private CloudKit database. Only your Apple ID can access it. Aeyo cannot.
The only data that leaves your device (community signals)
- Normalized item names (e.g. "Organic Whole Milk", never "John's Milk")
- Category and store preference votes
- Anonymous purchase ticks with coarse location (~5 km² tile, never exact GPS)
- Aisle position index for the current session
What is never sent: your identity, device ID, exact GPS, or any cross-session history.
Community signals are aggregated every 12 hours. Raw signals are deleted immediately after aggregation. Individual signals cannot be identified or retrieved.
What Aeyo does not collect
Names, email addresses, phone numbers, photos, health data, precise GPS, crash reports, or any third-party analytics.
You are in control
Delete local data in Settings. Delete iCloud data via your Apple ID. Community signals, once anonymized, cannot be individually deleted.
Children
Aeyo is not directed at children under 13 and does not knowingly collect their data.
Aeyo does not sell data.