Privacy Policy

Last updated: September 5, 2026

LyonKeep helps your household keep track of groceries, deals, schedules, chores, and more — largely by letting you take a photo and having it read the details for you. This policy explains what we collect, how we use it, who we share it with, and the choices you have.

Who we are

LyonKeep ("LyonKeep", "we", "us") is operated by [LEGAL ENTITY], based in the United States. You can reach us at [email protected].

Information we collect

Information you provide

Account details — your email address, username, a securely hashed password, your display name, and household settings you choose (time zone, ZIP code, stores you shop, notification preferences).
Household content you enter or scan — grocery and pantry items, receipts, store flyers and deals, coupons, warranties, recipes and meal plans, shopping lists, to-dos, chores, announcements, appointment/visit notes, and calendar events.
Information about your family, including children — schedule events, chores, and related records may include a child's first name, activities, dates, and the places they'll be (for example, a practice location). This information is entered by a parent or guardian. Children are records within your household — they do not have their own accounts and cannot sign up (see "Children" below).

Photos you upload

When you scan a receipt, flyer, coupon, schedule, warranty, product, or recipe, the photo is held only in memory, sent to our AI provider to extract the details, and then discarded. We do not store your photos — only the information extracted from them (which you review before it's saved).

Information collected automatically

An essential session cookie to keep you logged in.
Your device's push-notification subscription, only if you turn on reminders.
Your IP address, used transiently for security and rate-limiting.
AI usage records (counts and token totals per scan) used to monitor cost and reliability — not the content of what you scanned.

How we use your information

To provide the service — reading your photos into structured records, and connecting those records (what you have, what's running low, what's on sale, what's coming up).
To send the reminders and the weekly summary you choose to turn on.
To keep the service secure and working (rate-limiting, bot protection, backups, debugging).

We do not sell your personal information, and we do not use it to serve you third-party advertising.

AI processing and the services we rely on

To read your photos and text, and to run the app, we share data with the following service providers ("subprocessors"), each only as needed:

Google (Gemini API) and Anthropic (Claude API) — extract details from the photos and text you submit. We access these through their developer APIs to process your request, and we do not use your content to train our own models.
TheMealDB — meal/recipe suggestions.
Open Food Facts — product lookups from a barcode.
Flipp / Wishabi — weekly store flyer/deal data.
Railway — application hosting and our database.
Cloudflare — network/DNS, and encrypted database backups (R2).
Our email provider — to send account and notification emails (when configured).

Each provider handles data under its own terms. We may also disclose information if required by law, or to protect the rights, safety, and security of our users and service.

Children

LyonKeep is designed for parents and guardians. Accounts are created and managed by adults; children do not create accounts or provide information to us directly. Any information about a child in your household is entered by you, and you are responsible for it. "Kid Mode" is an optional, simplified view that runs inside your household's own session — it is not a separate account or login for a child. If you believe a child has created an account or provided us information directly, contact us at [email protected] and we will delete it.

Your choices and rights

Access & export — download everything in your household as a file from Settings → Export.
Delete — permanently delete your household and its data from Settings.
Correct — edit or remove any record directly in the app.
Notifications — turn reminders and the weekly summary on or off in Settings.

We honor access, export, and deletion requests for all users. Depending on where you live (for example, California or the EU/EEA), you may have additional rights; contact us to exercise them.

Retention

We keep your information for as long as your household is active, or until you delete it. Photos are not retained. Encrypted backups are kept for approximately 30 days before being rotated out. When you delete your household, its data is removed from our live database.

How we protect your information

Passwords are stored only as bcrypt hashes; traffic is encrypted in transit (HTTPS); each household's data is isolated from every other household's; photos are never written to disk; and we apply rate-limiting and bot protection to sign-in and upload endpoints. No method of storage or transmission is 100% secure, but we work to protect your information.

Cookies

We use a single essential cookie to keep you signed in. We do not use advertising or third-party tracking cookies.

Changes to this policy

If we make material changes, we'll update the "Last updated" date above and, where appropriate, notify you in the app or by email.

Contact

Questions? Email [email protected].