Legal

Privacy Policy

Effective April 8, 2026 · Last updated October 14, 2026

Harmony Technologies ("we," "us," or "our") operates the Harmony Food Agent app and website at harmonyfoodagent.com. Harmony Food Agent is created and owned by Damon Abramson. This policy explains what information we collect, how we use it, who we share it with, and your choices.

1. Information we collect

Account information

When you create an account, we collect your email address and a hashed password. We use Supabase for secure authentication. We do not store plain-text passwords.

Location

With your permission, we use your device's GPS coordinates or a ZIP code or city you enter, to find grocery stores, prices and products near you. It is saved on your device so you don't have to enter it again, and it is sent to our servers and to store data providers only to look up nearby stores. On your device, the state and the first three digits of your ZIP code are also used to match location-based offers and to check whether health-based offers are available where you are (see Advertising). We do not keep a history of your location or attach it to your account.

Barcode scans and product searches

When you scan a barcode or search for a product, we look it up in product databases through our own server. Scanned barcodes may be cached temporarily to improve performance. We do not build a permanent profile of what you eat.

Family profiles

If you add family member profiles (name, age, health conditions, allergies, sensitivities, diets and goals), that data is stored securely in our database. It is used to personalize food scores, safety alerts, alternatives, meal plans and Grandma Harmony's answers, and, only if you turn on Health-based offers, to choose sponsored offers on your device. It is never sold, and it is never shared with advertisers or with Google Analytics.

Offer settings

If you sign in, we keep your offer settings: whether Health-based offers are on, your home state if you choose one, and the dates you turned Health-based offers on or off.

Conversations with Grandma Harmony

When you type or speak to Grandma Harmony or the agents, your message and the family profile details needed to answer it (such as conditions, allergies and diets) are sent to our AI provider, Anthropic, to generate the reply.

Usage data

We use Google Analytics 4 to understand how the app is used, for example which features are opened, which products are scanned and which scores are viewed. Google Analytics uses cookies. We do not send names, email addresses, health conditions, allergies or other family profile details to Google Analytics, and for health-based offers we send only which part of the app the offer appeared in.

Device information

We may collect basic device information (operating system, browser type, app version) for debugging and performance.

2. How we use your information

• To provide and improve the app's core features (scanning, alternatives, store search)
• To personalize food safety alerts for your family members
• To answer questions you ask Grandma Harmony and the agents
• To choose which ads and sponsored offers to show (see Advertising)
• To process optional ad-free subscriptions through Google Play or our payment provider
• To respond to support requests
• To send transactional emails (account confirmation, password reset), never marketing without your consent
• To analyze aggregate usage patterns and improve the product

3. What we never do

• We never sell your personal data to anyone
• We do not collect social security numbers, financial account numbers or government IDs
• We do not access your contacts, photos or files beyond what is needed to scan a barcode
• We do not track your location in the background
• We do not share your health information or family profiles with advertisers, and we do not use them to target Google ads

4. Advertising

Harmony is free and is supported by advertising. If you do not have an ad-free subscription or a school or hospital account, you may see two kinds of ads.

Google ads

We use Google AdSense to show ads. Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the Internet. You can opt out of personalized advertising at Google Ads Settings, and opt out of other vendors' use of cookies for personalized advertising at www.aboutads.info/choices. Learn more about how Google uses information from sites that use its services.

Sponsored offers

Some placements show offers from partner brands and stores. To get offers, the app tells our server only which part of the app is asking and, for some placements, the category of the product on screen — nothing about you. It then chooses which offer to show on your device, using:

• The product you are looking at, for example its category.
• Your store-search area: the state and the first three digits of the ZIP code you set, used for offers from regional stores.
• Your family's health conditions, only if you turn on Health-based offers.

Health-based offers (opt-in)

• Off unless you turn it on in Settings → Offers & privacy. You can turn it off at any time, and we record when you turned it on or off.
• When it is on, the conditions in your family profiles are compared with offers meant for those conditions, on your device. Advertisers never learn who matched.
• When it is on, Harmony may also suggest nearby stores that carry foods and supplements suited to one of your family's conditions. To find them, it sends a product search term chosen for that condition (for example, the name of a supplement) and your ZIP code to our server and our store-search provider. It never sends your name, your email or the profile itself. When it is off, this search does not happen.
• Health-based offers are not available to people who live or are shopping in states where we have switched them off. At the time of this update, that is Washington, Nevada and Connecticut. We work out your home state from your ZIP code unless you choose one in Settings.
• Health-based offers never send the advertiser a tracking signal of any kind.

What partners receive

Partners do not receive your name, email address, the location you entered, or any health or family profile information; they receive counts of how often their offer was shown and clicked. If a partner's offer, other than a health-based one, includes a tracking image, viewing or clicking it lets that partner see standard technical information that any website receives, such as your IP address and browser type.

Ads never change a food score or a recommendation. An optional ad-free subscription removes all ads.

5. Third-party services

We use the following services, each with its own privacy policy:

• Supabase — authentication and database (supabase.com/privacy)
• Anthropic — AI service that writes Grandma Harmony's and the agents' replies (anthropic.com/legal/privacy)
• Google AdSense — advertising (policies.google.com/technologies/ads)
• Google Play and Google Sign-In — ad-free subscriptions in the Android app, and signing in with Google (policies.google.com/privacy)
• Stripe — payment processing for web subscriptions; we never see or store your full card number (stripe.com/privacy)
• Open Food Facts, FatSecret and USDA FoodData Central — product and nutrition databases; they receive the barcode or product name being looked up, not who is looking (openfoodfacts.org/privacy)
• Kroger API — store locations and prices, and adding items to your Kroger cart if you connect your Kroger account (kroger.com/privacy-policy)
• Apify — searches store websites for products and prices; it receives the search terms and ZIP code for the search (apify.com/privacy-policy)
• Samsung SmartThings — only if you connect your smart appliances (samsung.com privacy policy)
• Instacart — only if you send a shopping list to Instacart; it receives the list items (instacart.com/privacy)
• Hostinger — hosts this website and sends account emails such as confirmations and password resets (hostinger.com privacy policy)
• Resend — delivers support and notification emails (resend.com/legal/privacy-policy)
• Cloudflare — hosting for our server, content delivery and the Turnstile bot check (cloudflare.com/privacypolicy)
• Google Analytics 4 — usage analytics (policies.google.com/privacy)
• Nominatim / OpenStreetMap — turning GPS coordinates into a place name (osmfoundation.org privacy policy)

6. Camera

The app uses your camera only to scan product barcodes, and only while the scanner is open. We do not capture, store or transmit images or video.

7. Location permission

We request location only when you choose to share it, to find grocery stores and products near you. We do not track your location in the background or keep a history of where you have been.

8. How long we keep data

• Account data and offer settings: until you delete your account
• Family profiles: until you delete them or your account
• Cached product data: up to 30 days on our servers, then removed
• Analytics: in aggregate form, under Google's retention policy

9. Your rights and choices

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and its data
• Turn Health-based offers on or off at any time (Settings → Offers & privacy)
• Opt out of analytics and of personalized Google ads (see Advertising)
• Take a copy of your data with you

You can download your data, including your offer settings, or delete your account yourself at any time under Account & Security in the app. For anything else, email privacy@harmonyfoodagent.com.

10. Children

Harmony Food Agent is not directed at children under 13, and we do not knowingly collect personal information from them. Profiles for children are created and managed by an adult. If you believe a child has given us personal information, contact us and we will delete it promptly.

11. Security

We use industry-standard measures, including HTTPS encryption, hashed passwords and access-controlled databases. No system is completely secure, but we take reasonable steps to protect your data.

12. Changes to this policy

We may update this policy. When we do, we change the "Last updated" date at the top, and for significant changes we tell you in the app. Continuing to use the app after a change means you accept the updated policy.

13. Contact us