Privacy Policy

Last updated: August 1, 2026

This Privacy Policy explains how Solo Group LLC ("Solo Group LLC," "we," "us," or "our") collects, uses, discloses, and protects information about you when you access or use the Solo website, web application, and related services (collectively, the "Service").

Solo is operated by Solo Group LLC, a limited liability company organized under the laws of the State of California. If you have questions about this Policy or our privacy practices, contact us at support@solokitchen.org.

By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with it, please do not use the Service.


1. Scope of This Policy

This Policy applies to information we process about:

  • Visitors to our website and marketing pages;
  • Registered users who create an account and use the Service; and
  • Prospective users who contact us or sign up for updates.

This Policy does not apply to third-party websites, products, or services that we do not own or control, even if they link to or from the Service. We encourage you to review the privacy policies of any third parties before providing them with your information.

2. Information We Collect

We collect information in three ways: information you provide directly, information we collect automatically, and information we receive from third parties.

2.1 Information You Provide Directly

Account information. When you register for the Service, we collect the information needed to create and manage your account. This typically includes your name, email address, and a password (which we store only in hashed form). You may also choose to provide additional profile details such as a display name, profile picture, or organization name.

Receipts and food data. When you use the Service, you may upload images of receipts or provide purchase information. We extract and store information from these receipts, including merchant names, store locations, purchase dates, items purchased, quantities, and prices, in order to provide pantry tracking, recipe matching, and related features of the Service. By default, the receipt image itself is discarded once this information has been extracted. If you separately opt in (in Account Settings), we retain the receipt image itself, tied to your account, for the training purpose described in Section 3.

Connected email account (optional, Gmail integration). If you choose to connect a Gmail account, we access it to search for and extract grocery receipts on your behalf. This is a distinct, opt-in feature — see Section 13 for what we access, what we do with it, what we store, and how to stop it.

Dietary and health-related information. To personalize the Service, you may provide dietary preferences, restrictions, allergies, and similar health-related information (for example, "vegetarian," "gluten-free," or a specified allergy). Because this information can reveal details about your health, we treat it as sensitive and use it only to personalize your experience and provide the features you request. Where required by law, we process this information based on your consent, which you may withdraw at any time by updating your preferences or contacting us. Providing this information is optional, but some personalization features may not work without it. You remain responsible for confirming that any recipe or product is appropriate for your own dietary needs and allergies — see Section 10 of our Terms of Service.

Communications. When you contact us for support, respond to a survey, or otherwise communicate with us, we collect the contents of those communications and any information you choose to include.

Preferences. We collect settings and preferences you configure within the Service, such as notification settings and display options.

Payment information. If you purchase a paid plan or make a payment, our third-party payment processor collects and processes your payment details (such as your card number and billing information) on our behalf. We do not store your full payment card number on our own systems. We receive limited information from the processor, such as a transaction confirmation, the last four digits of your card, and your billing contact details, which we use to manage your subscription and maintain records of your purchases.

2.2 Information We Collect Automatically

When you access or use the Service, we and our service providers automatically collect certain information about your device and how you interact with the Service. This includes:

  • Usage data: pages and features viewed, links clicked, actions taken, session duration, referring and exit pages, and timestamps.
  • Device and technical data: IP address, browser type and version, operating system, device identifiers, screen resolution, and language settings.
  • Log data: server logs that record access times, error reports, and system activity.
  • Session replay data: recordings of how you interact with the Service interface, such as clicks, scrolling, and navigation patterns, which we use to diagnose issues and improve usability. Sensitive input fields are masked and excluded from these recordings.

We collect this information using cookies, web beacons, pixels, local storage, and similar technologies. See Section 6 (Cookies and Similar Technologies) for details.

2.3 Information From Third Parties

We may receive information about you from third parties, such as:

  • Analytics providers who help us understand how the Service is used;
  • Authentication or single sign-on providers, if you choose to log in through a third-party account;
  • Google, if you choose to connect a Gmail account through our optional Gmail integration (see Section 13) — we receive read-only access to search for and extract grocery receipts from the connected inbox; and
  • Service providers who support our operations.

We combine this information with the information we collect directly to operate and improve the Service.

2.4 Sensitive Information and Information We Do Not Collect

The only sensitive information we collect is the dietary and health-related information you choose to provide, as described above, which we use solely to personalize the Service. Aside from that, we do not intentionally collect sensitive personal information — such as government-issued identifiers, precise (GPS-level) geolocation, financial account numbers beyond what our payment processor handles, biometric data, or information about your race, religion, or political views. Please do not submit such information to us unless specifically requested.

3. How We Use Your Information

We use the information we collect for the following purposes:

To provide and operate the Service. We use your account and usage information to create and maintain your account, authenticate you, deliver the features you request, and provide customer support. We process the files and content you upload to provide the features they are submitted for, and we use your dietary and health-related preferences to personalize your experience and generate relevant recommendations.

To process payments. If you purchase a paid plan, we use your payment and billing information, together with our payment processor, to process transactions, manage your subscription, prevent fraudulent payments, and keep records of your purchases.

To improve and develop the Service. We analyze usage data and analytics to understand how the Service is used, diagnose problems, develop new features, and improve performance, reliability, and user experience.

To improve product recognition for all users. We use de-identified information derived from receipts — such as mappings between abbreviated receipt text and full product names — to improve the accuracy of receipt scanning and product recognition across the Service. This information cannot reasonably be used to identify you.

To find grocery receipts in a connected email account (optional). If you connect a Gmail account, we search it for grocery receipts and extract the same purchase information described above, so those receipts can be added to your pantry without manual scanning. See Section 13 for details on this feature, including the Limited Use restrictions we apply to Google user data.

To train and improve our scanning models (opt-in only). If you turn on "Share receipt photos to help train Solo" in Account Settings, we retain the photos or files of receipts you scan, associated with your account, and use them internally to train and improve the AI models that power receipt scanning. This setting is off by default, applies only to receipts scanned while it is on, and you can turn it off at any time; turning it off stops future receipts from being retained but does not automatically delete images already retained — use your deletion rights under Section 10 for that.

To communicate with you. We use your contact information to send you service-related messages (such as security alerts, account notices, and changes to our terms or policies), respond to your inquiries, and — where permitted — send you product updates and marketing communications you can opt out of at any time.

To maintain security and prevent abuse. We use information to detect, investigate, and prevent fraudulent, unauthorized, or illegal activity, to enforce our Terms of Service, and to protect the rights, property, and safety of Solo Group LLC, our users, and others.

To comply with legal obligations. We use information as necessary to comply with applicable laws, regulations, legal processes, and enforceable governmental requests.

4. Legal Bases for Processing (EEA/UK Users)

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction that requires a legal basis for processing personal data, we rely on the following bases:

  • Performance of a contract — to provide the Service you have requested and fulfill our obligations to you.
  • Legitimate interests — to operate, secure, and improve the Service, provided our interests are not overridden by your rights and freedoms.
  • Consent — where we rely on your consent (for example, certain cookies or marketing communications), which you may withdraw at any time.
  • Legal obligation — where processing is necessary to comply with applicable law.

5. How We Share Your Information

We do not sell your personal information. We share information only in the circumstances described below.

Service providers. We share information with third-party vendors who perform services on our behalf — such as hosting, data storage, analytics, email delivery, customer support, and payment processing. This includes artificial intelligence service providers that process receipt text — including, if you use the optional Gmail integration described in Section 13, text extracted from emails in a connected inbox — on our behalf to extract and categorize purchase information as part of providing the Service. These providers are authorized to use your information only as necessary to provide services to us and are bound by contractual obligations to protect it.

Legal and safety. We may disclose information if we believe in good faith that doing so is necessary to comply with a law, regulation, legal process, or governmental request; to enforce our agreements and policies; to detect or prevent fraud or security issues; or to protect the rights, property, or safety of Solo Group LLC, our users, or the public.

Business transfers. If Solo Group LLC is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

With your direction or consent. We may share information with third parties when you direct us to or otherwise consent to the sharing.

Aggregated or de-identified data. We may share information that has been aggregated or de-identified so that it cannot reasonably be used to identify you, for any purpose permitted by law.

6. Cookies and Similar Technologies

We use cookies and similar technologies to operate the Service, remember your preferences, understand usage, and improve your experience. Cookies fall into the following general categories:

  • Strictly necessary — required for the Service to function, such as authentication and security.
  • Functional — remember your settings and preferences.
  • Analytics/performance — help us understand how the Service is used so we can improve it.

You can control cookies through your browser settings and, where offered, through in-product cookie controls. Blocking some cookies may affect the availability or functionality of the Service. Where required by law, we obtain your consent before setting non-essential cookies.

7. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law. When determining retention periods, we consider the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process it, and applicable legal requirements.

In general, we retain your account information and dietary/health preferences for as long as your account is active; uploaded files and content for as long as needed to provide the associated feature or until you delete them; and payment and transaction records for the period required to meet our tax, accounting, and legal obligations. Receipt images retained under the opt-in training use described in Section 3 are stored in a private location accessible only to Solo Group LLC and retained until you delete them, delete your account, or request deletion under Section 10.

When we no longer need your personal information, we will delete or de-identify it, or securely store and isolate it from further use.

8. Data Security

We implement technical and organizational measures designed to protect your personal information against unauthorized access, loss, misuse, and alteration. These measures include encryption of data in transit, access controls, and monitoring. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

9. International Data Transfers

Solo Group LLC is based in the United States, and we operate the Service globally. Your information may be transferred to, stored in, and processed in the United States or other countries that may have data protection laws different from those in your jurisdiction. Where required, we implement appropriate safeguards — such as standard contractual clauses — to protect information transferred internationally.

10. Your Privacy Rights

Depending on where you live, you may have certain rights regarding your personal information. We honor these rights regardless of your location where practicable.

10.1 Rights Available to All Users

  • Access and portability — request a copy of the personal information we hold about you.
  • Correction — ask us to correct inaccurate or incomplete information.
  • Deletion — ask us to delete your personal information, subject to certain exceptions.
  • Opt out of marketing — unsubscribe from marketing emails at any time using the link in the message or by contacting us.

10.2 Additional Rights for EEA/UK Users (GDPR)

If you are in the EEA or UK, you also have the right to restrict or object to certain processing, the right to withdraw consent where processing is based on consent, and the right to lodge a complaint with your local data protection authority.

10.3 Additional Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect, use, and disclose; the right to request deletion or correction; and the right to opt out of the "sale" or "sharing" of personal information and to limit the use of sensitive personal information. We do not sell your personal information and do not share it for cross-context behavioral advertising. We will not discriminate against you for exercising your rights.

10.4 How to Exercise Your Rights

To exercise any of these rights, contact us at support@solokitchen.org. We will verify your request and respond within the timeframe required by applicable law. You may designate an authorized agent to make a request on your behalf, subject to verification.

11. Children's Privacy

The Service is not directed to children under the age of 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at support@solokitchen.org and we will take steps to delete it.

12. Third-Party Links and Services

The Service may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of those third parties. This Policy applies only to the Service.

13. Gmail Integration (Optional Feature)

Solo offers an optional feature that lets you connect a Gmail account so we can automatically find and import grocery receipts from your inbox instead of you scanning them manually. This feature is off by default, only ever operates on an account you affirmatively connect through Google's own OAuth consent screen, and you control whether to turn it on at all.

What we access. We request only the read-only "gmail.readonly" scope, which lets us read — but never send, delete, modify, or otherwise act on — messages in the connected inbox. We do not read your inbox wholesale: we run a narrow, targeted search limited to a bounded date range and messages matching grocery/delivery-related keywords or known merchant and delivery-service sender domains.

What we do with message content. For messages our search surfaces, we first read only sender, subject, date, and a short snippet to determine whether a message is likely a grocery receipt. For messages that pass this check, we read the full message body and send its text to our AI service provider (see Section 5) to extract structured receipt information — merchant, date, line items, quantities, and totals — which is then processed through the same enrichment pipeline used for photographed receipts.

What we store. We store the OAuth tokens necessary to maintain the connection, a timestamp cursor marking how far we've scanned, and a record of when a scan ran and how many messages it found and parsed (counts only, never message content, subject lines, or sender addresses). Draft receipts from a scan are shown to you for review and are not saved to your account unless you explicitly confirm them; once confirmed, we store the same extracted fields as any other receipt (merchant, date, items, quantities, prices) plus an internal identifier used to avoid importing the same email twice. We do not store full email bodies or subject lines, and the opt-in receipt-image training feature described in Section 3 does not extend to Gmail-derived data — connecting Gmail never enrolls you in that separate feature.

Your control. You can revoke Solo Group LLC's access at any time from your Google Account's "Third-party apps & services" settings, which immediately invalidates our stored tokens; if a stored connection becomes invalid (whether by your revocation or otherwise), we stop using it and will prompt you to reconnect before scanning again. Revoking access does not delete receipts already imported — use your deletion rights under Section 10 for that. As of this Policy's last update, revocation is available through your Google Account settings; an in-app disconnect control may be added later, and this Policy will be updated to reflect it if so.

Limited Use. Solo Group LLC's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular: we do not use Gmail data to serve advertisements of any kind, including retargeting, personalized, or interest-based advertising; we do not sell Gmail data; we do not allow anyone other than you, Solo Group LLC personnel and systems, and the AI service provider used solely to extract receipt data as described above to read Gmail data; we do not use Gmail data to determine credit-worthiness or for lending purposes; and we do not use Gmail data for any purpose outside of providing and maintaining this specific receipt-import feature.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting the updated Policy on this page with a new "Last updated" date and, where appropriate, by providing additional notice (such as an email or in-product notification). Your continued use of the Service after the changes take effect constitutes your acceptance of the revised Policy.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, please contact us:

Solo Group LLC Email: support@solokitchen.org