Who we are
NeverToss is operated by nevertoss.com ("we", "us"). This policy covers the website at nevertoss.com. Questions about anything here: [email protected].
What we collect
The waitlist
If you join the waitlist, we store your email address and which page you signed up on. We use it to send you the early-access invite when the iOS app is ready. That's what our signup form promises, and this policy holds us to it. We don't sell your email, share it with advertisers, or add you to other lists without asking first.
Page counts
We count how many times each page is viewed, as a single daily number per page. No cookies, no visitor IDs, no stored IP addresses, no third-party analytics scripts. We can see that a page got 40 views. We can't see who any of them were.
If you sign in
The site has a legacy web app behind Google sign-in. If you use it, we store your name, email and profile details from Google, plus what you add: receipt photos and the grocery items read from them. Receipt files are stored on our own servers.
Cookies
One essential session cookie, used for signed-in sessions and form security. No tracking or advertising cookies.
AI processing
Receipts you upload are read by Google's Gemini AI service to identify the items on them. We use API terms under which Google doesn't train its models on your data, and we don't train models on your data either. Shelf-life dates the app shows are estimates inferred by AI, not manufacturer dates.
Who touches your data
Two categories of service providers, and only what each needs: Google handles sign-in and the Gemini AI processing above, and an email delivery provider sends the emails we send you — it sees your email address and nothing else. Everything else runs on our own servers.
How long we keep things
Waitlist emails: until we've sent the invite and you've had a fair chance to use it, or until you ask us to delete yours. Account data: as long as your account exists. Aggregate page counts have no personal data to delete.
Your rights
Wherever you live, you can ask us what we hold about you, ask for a copy, correct it, or have it deleted. If you're in the EU/EEA or UK (GDPR) or California (CCPA), those are formal rights, including the right not to be discriminated against for using them, and the right to complain to your local authority. We don't sell personal information, so there's nothing to opt out of on that front. To use any of these rights, email [email protected] and we'll handle it within 30 days.
Children
The site isn't directed at children under 13, and we don't knowingly collect their data. If a child gave us their email, tell us and we'll delete it.
Changes
If this policy changes in a way that matters, we'll update the date at the top and, for anything significant, note it on this page. We won't quietly loosen it.