Privacy Policy

We collect information you provide when you:

• Create an account — your name, email address, and password (stored as a secure hash)
• Set up a household and fridges — household name, member email addresses for invitations, fridge names and specifications
• Add fridge content — inventory items (names, quantities, expiry dates, zones), grocery lists, meal plans, budget and transaction data, and maintenance task preferences
• Upload an avatar — profile photo stored securely in cloud storage
• Share to Community — recipes you choose to publish publicly, including titles, ingredients, and instructions
• Contact support — messages and email correspondence
• Subscribe to a plan — billing information processed by PayMongo (we never store full card details)
• Set preferences — currency symbol, timezone, locale, and notification preferences (in-app, email, and push)
• Enable push notifications — browser push subscription token stored to deliver notifications to your device
• Use AI chat with images — food photos you upload for AI analysis are sent to your configured AI provider (Google Gemini, OpenAI, or Anthropic) for processing
• Provide AI API keys (BYOK) — if you choose to configure your own AI provider key, it is stored encrypted in your household settings

When you use the Service, we may automatically collect:

• Usage data — pages visited, features used, timestamps, and actions taken within the app
• Device information — browser type, operating system, device type, and screen resolution
• IP address — used for security, fraud prevention, and approximate geolocation
• Cookies and similar technologies — see Section 8 for details

If you choose to sign in with Google, we receive your name, email address, and profile picture from Google as permitted by your Google account settings. We do not receive your Google password.

Information you add to a shared household (inventory items, grocery lists, activity events) is visible to all members of that household. Your display name and avatar are visible to household members. Your email address is only visible to household admins.

We share information with trusted third-party providers who assist us in operating the Service, subject to confidentiality agreements:

• Supabase — database hosting, authentication, and file storage
• PayMongo — payment processing and subscription management
• Nodemailer / Gmail SMTP — transactional and notification email delivery
• Google Gemini, OpenAI, Anthropic — AI-powered features (your inventory context and any uploaded food photos may be sent to generate recipe suggestions, power kitchen chat with multimodal analysis, provide voice responses via TTS, and deliver insights; none of these providers train on API requests by default)
• Vercel — web application hosting and edge functions
• Heroku — backend API hosting

We may disclose your information if required to do so by law or if we believe in good faith that such action is necessary to comply with a legal obligation, protect and defend our rights or property, prevent fraud, or protect the safety of our users or the public.

If FridgeFlow is involved in a merger, acquisition, or sale of all or a portion of its assets, your information may be transferred as part of that transaction. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.

When you use the AI recipe generation feature, your current inventory data (item names and quantities) is sent to Google Gemini to generate personalised recipe suggestions. This data is processed in real time and is not stored by Google. We retain the generated recipe only if you choose to save it to your collection.

Recipes you share to Community are publicly visible to all FridgeFlow users. Your display name is shown as the author. You may remove your community recipes at any time, but copies made by other users who saved them to their personal collections are not affected.

Messages you send in the AI Kitchen Chat are processed by an AI provider to generate responses. A snapshot of your current inventory and upcoming expiry dates is included as context. Chat history is stored in your account and can be deleted at any time.

When you attach a photo to an AI chat message (e.g. a food photo for identification), the image is sent as base64 data to your configured AI provider (Google Gemini, OpenAI, or Anthropic) for visual analysis. Images are not stored by the AI provider beyond the request. A reference to the image is stored in your chat history.

When voice mode is enabled in AI chat, your text and the AI's text response are sent to Google Gemini TTS to generate audio. The generated audio is delivered directly to your browser and is not stored on our servers after the response is complete.

Our AI features are restricted to food management, inventory, recipes, and related household topics. Off-topic queries are rejected. The AI does not provide medical, legal, or financial advice beyond basic food safety guidance. We do not use your data to train AI models.

You can review and update your personal information at any time from Settings → Profile. If you need assistance accessing or correcting your data, contact us at lewisvillamor26@gmail.com.

You can export your household data (inventory, grocery lists, activity history) in a structured format from Settings → Import/Export.

You can request deletion of your account and all associated personal data from Settings. We will process your request within 30 days. Note that anonymised aggregate data may be retained.

You can manage email and push notification preferences from Settings → Notifications, including per-type toggles for expiry alerts, maintenance reminders, weekly reports, and more. Push notification subscriptions can be revoked in your browser settings or within the app. Transactional emails related to account security and billing cannot be fully disabled as they are essential to the Service.

If you are located in the European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR), including the right to object to processing, restrict processing, and lodge a complaint with your local data protection authority. To exercise these rights, please contact us at the address below.

California residents have the right to know what personal information we collect and how it is used, to request deletion of personal information, and to opt out of the sale of personal information (we do not sell personal information). To exercise these rights, contact us at lewisvillamor26@gmail.com.