Legal

Privacy Notice

Last updated: 21/07/2026 · Effective for all users of the Larder Telegram bot and larder.sg website

Founder note, not legal boilerplate: Larder is built and run by a solo founder in Singapore. This notice describes exactly what we collect and why, in plain language. It has not yet been reviewed by a lawyer — we recommend one before this is treated as a final, binding legal document, especially once we begin any data partnership with third parties (see "Future data partnerships" below). If you have questions, email us — see Contact.

Who we are

Larder ("we", "us") operates a Telegram bot and companion website that turns a photo of a grocery receipt into a shared inventory for your household. This notice explains what personal data we collect, why, and what your rights are under Singapore's Personal Data Protection Act (PDPA).

What we collect

We collect only what's needed to run the household inventory:

Telegram account info: your numeric Telegram user ID and the display name you set with us — not your phone number or Telegram username, unless you choose to share it (e.g. on the waitlist form).
Email address — if you join our waitlist, sign up for early access, or verify your account.
Household data: the household ID and password you or another member set (the password is hashed — we never store it in plain text and cannot recover it).
Grocery data: item names, quantities, categories, and prices extracted from receipts you send, plus the inventory levels, budget settings, and consumption history this produces for your household.
Usage data: when you last used the bot, and — if you choose to send it — free-text feedback about scan accuracy.

What we don't store: we never save the photo or PDF of your receipt on our servers. It's sent directly to Google's Gemini API for one-time processing (see below), and only the resulting text — item names, prices, categories — is kept.

Why we collect it

To run the core product: turning your receipts into a live, shared household inventory.
To send you alerts you've asked for — low-stock essentials, budget thresholds.
To verify your identity and protect your household from unauthorized access (rate-limiting, lockouts on repeated failed attempts).
To respond to support requests and feedback.
To improve receipt-parsing accuracy over time.

Who we share it with

We use a small number of service providers to run Larder, each acting as a data processor on our behalf:

Google (Gemini API) — receives your receipt photo/PDF momentarily to extract item data. Google's own terms govern how they handle this during processing; we do not control this beyond configuring the request.
Telegram — the messaging platform itself; your photos and messages pass through Telegram's infrastructure as part of using the bot at all.
Our hosting provider — stores the database described above.

We do not sell your personal data, and we do not share it with advertisers or other third parties for their own marketing purposes.

Future data partnerships

As Larder grows, we may explore working with grocery retailers or brands on aggregate consumption trends — for example, to help them understand shopping patterns. If we do this:

We will only ever share data that has been aggregated and de-identified — meaning it cannot be traced back to your household or Telegram account — or
If we ever wanted to share identifiable household-level data, we would ask for your separate, explicit, opt-in consent first, clearly explaining what would be shared and with whom. This would never be bundled into a general terms update — you'd have to actively say yes.

How long we keep it

We keep your household's data for as long as your household is active. If you leave a household or ask us to delete your account, we will delete your personal data within a reasonable period, except where we're required to retain it (e.g. for fraud prevention or legal obligations). Backups are retained on a rolling basis and phase out over time.

How we protect it

Household passwords are hashed with bcrypt — never stored or logged in plain text.
Repeated failed login/verification attempts are automatically rate-limited and temporarily locked out.
Access to admin functions is restricted to a small set of authorized Telegram accounts.

Your rights

Under the PDPA, you can ask us to:

Access the personal data we hold about you.
Correct inaccurate data (e.g. your display name).
Withdraw consent and request deletion of your account and associated data — leave a household anytime with /leavehousehold, or email us to remove your account entirely.

To exercise any of these, contact us using the details below.

Children

Larder is not directed at children and is not intended for use by anyone under 13.

Changes to this notice

If we make material changes — especially anything affecting how your data might be shared — we'll notify active households via the bot before the change takes effect.

Contact

Questions, requests, or concerns about your data: hello@larder.sg