🔒 Myfridly Privacy Policy

This policy explains what data Myfridly ("the App") processes, why, for how long, and what rights you have over it.

Data controller

Fco. Javier Moral González, who provides Myfridly as an independent developer. Contact for any privacy matter: fjmgm@myfridly.com.

What data we process and why

Myfridly is designed to keep your data mainly on your own device. Specifically:

• Data stored on your device: your food inventory, shopping list, saved receipts and their photos, recipes, log of what you eat or throw away, language, currency and theme preferences, and the categories/storage places you correct over time. They are kept in the standard browser or app storage and do not leave your device except in the cases described below.
• Shared household data (only if you turn it on): if you create or join a household with a code, your inventory, shopping list, recipes, receipts (store, date, amount and products), must-have products and consumption log are stored in Google Firebase to sync them between the devices of the people who share that code. Receipt photos are not synced: they stay only on the device where they were taken, as does any payment detail printed on them (for example, the last digits of a card). Photos you add to recipes and products are stored in Google Firebase so the rest of the household can see them: avoid including people in them. If you turn on notifications, a technical notification identifier for your device and the app language are also stored there, so alerts reach you in your language.
• Shared household backups: to protect you against data loss, we keep a daily backup of each shared household's data for 30 days, plus a one-off copy if a list is suddenly emptied (the 30 most recent are kept). Backups are stored in Google Firebase, nobody can access them from the app, and they are only used to recover data if something goes wrong.
• Phone alerts: in the iPhone and Android apps, expiry alerts and receipt-scanning reminders are scheduled on your own device; the information they use does not leave your phone.
• Content you send to the artificial intelligence: when you photograph a receipt, a product or a barcode, dictate or type products, generate recipes, or import or dictate a recipe, that photo or text is sent once to the Anthropic API (Claude) to interpret it. We do not store those photos or texts on any server. Anthropic, as our provider, deletes them from its systems within 30 days, unless it must keep them longer by law or to enforce its usage policies.
• Usage data: the app generates a random installation identifier that is not linked to your name or email. Each time you use an artificial intelligence feature, we record with that identifier which feature was used, how many times per month and its technical cost. We use this to understand real usage, control costs, prevent abuse and, in the future, apply the free plan's usage limits. This data is stored in Netlify. Like any web service, Netlify also processes the IP address of your requests to serve the app and limit abuse.
• Public database lookups: when you scan a barcode, we query the open Open Food Facts database to try to identify the product. Only the barcode is sent.
• Microphone: only used when you tap the dictation button. Speech-to-text is done by your device's system; Myfridly only receives the resulting text.

Legal basis

• Providing the service you ask for (Art. 6(1)(b) GDPR): storing and syncing your data, the shared household, the artificial intelligence features, barcode lookups and alerts.
• Your consent (Art. 6(1)(a) GDPR): notifications, which are only turned on if you grant permission on your device and which you can withdraw at any time in its settings.
• Legitimate interest (Art. 6(1)(f) GDPR): backups, so you don't lose your data, and usage data, to control costs, prevent abuse and keep the app free.

Who we share data with

Only with the providers we need for the app to work, who process data on our behalf under their data processing agreements:

• Anthropic (Claude API): processes the photos and texts you send to the artificial intelligence. See Anthropic's privacy policy.
• Google Firebase: stores shared household data and its backups, and sends notifications, only if you use those features. See Firebase privacy information.
• Netlify: hosts the app and its functions, and stores usage data. See Netlify's privacy policy.
• Open Food Facts: free, open database used for barcode lookups (it only receives the barcode).
• Unsplash: free photo library we use to show an illustrative photo for recipes that don't have their own. It only receives the name of the dish, through our server; never your IP address or any of your data.

We do not sell your data to third parties.

Transfers outside the European Union

Anthropic, Google and Netlify may process data in the United States. These transfers rely on the EU-U.S. Data Privacy Framework where the provider is certified under it, or on the standard contractual clauses approved by the European Commission included in their data processing agreements.

How long we keep data

• Data on your device: until you delete it or uninstall the app.
• Shared household data: while the household is in use, or until you ask us to delete it.
• Backups: 30 days, then deleted automatically.
• Content sent to the artificial intelligence: we don't store it; Anthropic deletes it within 30 days, subject to the exceptions above.
• Usage data: grouped by month, for a maximum of 24 months.

Shared household

Anyone who has your household code can see and change that household's data. Only share it with people you trust.

If you want us to delete your household data and its backups before they expire, write to us with the household code.

Children

Myfridly is not intended for children under 14 and does not knowingly collect data from children under that age. If you are a parent or guardian and believe a child has given us data, write to us and we will delete it.

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time, and withdraw your consent to notifications, by writing to fjmgm@myfridly.com. Including your household code, if you have one, helps us find your data.

You can also delete the data stored on your device at any time from Settings → "Clear all data".

If you believe we have not handled your rights properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or the data protection authority in your country.

Changes to this policy

We may update this policy if the app's features change. The current version, with its update date, will always be published on this page.

Contact

For any privacy question, write to fjmgm@myfridly.com.