Privacy

Privacy policy

Last updated: October 3, 2026

This policy explains which personal data the FridgeLoop app for iPhone (including its Home Screen widget) and the website fridgeloop.donner.io process, why, and what rights you have. It is written for this app only.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Dennis Donner
Eduard-v-Winterstein-Straße 11
14480 Potsdam
Germany
Email: app-support@donner.io

We have not appointed a data protection officer, as we are not legally required to do so. For all privacy questions, write to the address above.

2. Summary

  • FridgeLoop needs an account. Your items, recipes and shopping list are stored in that account so they sync between your devices.
  • Barcode scan: only the barcode number is sent to Open Food Facts.
  • Receipt scan: the photo is uploaded, stored in your account and analysed by OpenAI.
  • Recipe suggestions: the names of your items, your language and your region are sent to OpenAI.
  • We use usage statistics (Amplitude, Firebase Analytics), crash reports and performance data (Firebase). We do not use the advertising identifier, do not track you across other companies’ apps or websites, and do not show ads.
  • You can delete your account in the app at any time.
  • This website sets no cookies, uses no analytics and loads nothing from third parties.

3. Account and sync

To use FridgeLoop you create an account with your email address and a password. Signing in, storing your data and syncing it run on Supabase. The password is never stored in plain text; your session is kept in the iOS Keychain on your device.

Data: email address, a user ID generated for you, password (stored as a hash), the time of registration and sign-in, and the content you create in the app (sections 4 to 9).
Purpose: providing the app and syncing your data.
Legal basis: Art. 6(1)(b) GDPR (performance of the contract with you).

If you forget your password or change your email address, we send you an email with a link. The link opens a page on this website on which you set a new password; the request goes to Supabase.

4. Items, expiry dates and shopping list

For each item you store a name, category, quantity, expiry date and, if you like, notes and the amount you paid (with currency, for example taken from a scanned receipt). The app also records whether an item was used up or thrown away, so the Insights screen can show you your own figures. For the shopping list we store the entries, whether they are ticked off and a history of items you added before, so you can pick them again.

This data is stored in your account (Supabase) and on your device. Database access rules ensure that every account can only read and change its own records.

Legal basis: Art. 6(1)(b) GDPR.

5. Barcode scan

The camera image is analysed on your iPhone with Apple’s VisionKit; no image leaves the device. When a barcode is recognised, the app asks the public product database Open Food Facts for the product name. Only the barcode number is transmitted, together with the technical data every internet request contains (such as your IP address and an identifier of the app). Open Food Facts is an independent organisation; its own privacy policy applies to the request.

Legal basis: Art. 6(1)(b) GDPR.

6. Receipt scan

You can photograph a receipt or choose one from your photo library. The app also reads the text on your iPhone with Apple’s Vision framework.

To recognise the items, the photo (as a JPEG image), your app language and your user ID are sent to our server (a Supabase Edge Function). The server stores the photo in a private storage area of your account and passes it to OpenAI, whose AI model reads the items and suggests an expiry date for each one. You then review the list and decide what to add.

Receipts may contain more than food, for example the name of the shop, the date, the time and the payment method. Please only scan your own receipts. The stored photo is not deleted automatically after the analysis; it is kept until you delete your account (section 16).

Legal basis: Art. 6(1)(b) GDPR. OpenAI acts as our processor; under its terms for business customers, data sent through the API is not used to train its models.

7. Recipe suggestions

When you ask for recipes, the names of the items you selected, your app language and your region are sent through our server to OpenAI. The suggested recipes (with servings, difficulty and cooking time) are stored in your account. Ingredients you move to the shopping list are stored there.

Legal basis: Art. 6(1)(b) GDPR.

8. Reminders and push notifications

If you allow notifications, FridgeLoop reminds you before items expire. You choose in the settings how many days in advance (0 to 30) and whether you want reminders at all. We store these preferences and a push token for your device in your account.

Our server checks regularly which items are about to expire and sends the reminder through Firebase Cloud Messaging (Google) and the Apple Push Notification service. The notification contains the names of the items concerned and, technically, your user ID.

Legal basis: Art. 6(1)(b) GDPR; displaying notifications requires your permission in iOS, which you can withdraw at any time in the iOS settings.

9. Home Screen widget

The widget shows the items that expire next. The app hands it a small summary through a storage area shared only between the app and the widget on your iPhone. Nothing is transmitted for this. The summary is removed when you sign out.

10. Usage statistics and crash reports

To understand which features are used, to find errors and to keep the app fast, we use:

  • Amplitude (data storage in the EU): events such as “item added” or “recipe opened”, the screens you visit, device model, iOS version, app version, language, mobile carrier, the device identifier for this app (IDFV), your IP address (to derive the country; the city is not recorded) and your user ID. If you installed the app through an ad in the App Store, we record the campaign and country (see below).
  • Firebase Analytics (Google): usage events and an app instance ID. Ad personalisation is switched off and the advertising identifier (IDFA) is not collected.
  • Firebase Crashlytics (Google): crash reports with technical details such as device model, iOS version and the state of the app at the time of the crash.
  • Firebase Performance Monitoring (Google): technical measurements such as app start time and the duration of network requests.

App Store ad attribution: once after installation, the app asks Apple (AdServices) whether it was installed through an Apple Search Ads campaign. Apple only answers with the campaign and the country; no personal identifier is involved, and no tracking permission is needed. The result is stored on your device and added to the usage statistics.

We do not use these data for advertising, and we do not combine them with data from other companies.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is a stable, reliable app and the improvement of its features. You can object at any time (Art. 21 GDPR) by email to app-support@donner.io.

11. In-app purchases

In-app purchases are processed entirely by Apple. We never receive your payment details. To know which features your purchase unlocks on all your devices, we use RevenueCat, which receives your user ID, the purchase information that Apple provides and the anonymous identifiers of our usage statistics (to link a purchase to the statistics). Purchases are managed in your Apple ID settings.

Legal basis: Art. 6(1)(b) GDPR.

12. Support emails

If you write to us, we process your email address and your message to answer you. If you use the contact button in the app, the email is prefilled with your account email address, the app version, device model, iOS version and your purchase ID at RevenueCat, so we can help faster. You can delete these lines before sending.

Legal basis: Art. 6(1)(b) GDPR for questions about your account or the app, otherwise Art. 6(1)(f) GDPR (answering enquiries).

13. Permissions

  • Camera: for the barcode and receipt scan.
  • Photo library: only if you choose a receipt photo from it.
  • Notifications: for expiry reminders.

The app does not request your location, contacts, calendar, microphone or health data. You can withdraw any permission at any time in the iOS settings; the related feature then stops working.

14. Service providers

We use the following providers. Where they process data on our behalf, we have concluded data processing agreements with them (Art. 28 GDPR).

ProviderPurposeRole
Supabase, Inc., USAAccount, database, file storage, server functions, emails for sign-up and password resetProcessor
OpenAI (OpenAI Ireland Ltd. / OpenAI, L.L.C., USA)Item recognition on receipts, recipe suggestionsProcessor
Google Ireland Ltd. / Google LLC, USA (Firebase)Analytics, crash reports, performance, push notificationsProcessor
Amplitude, Inc., USA (EU data storage)Usage statisticsProcessor
RevenueCat, Inc., USAManaging in-app purchasesProcessor
Apple Inc. / Apple Distribution International Ltd.App Store, in-app purchases, push notifications, ad attributionIndependent controller
Open Food Facts (association, France)Product names for barcodesIndependent recipient

We do not sell personal data.

15. Transfers outside the EU

Some of the providers above are based in the USA or may process data there. Where a provider is certified under the EU-U.S. Data Privacy Framework, transfers rely on the European Commission’s adequacy decision (Art. 45 GDPR); otherwise they rely on the standard contractual clauses adopted by the Commission (Art. 46(2)(c) GDPR). You can request a copy of the safeguards from us.

16. Retention and deletion

  • Account data (items, recipes, shopping list and its history, preferences, receipt photos): as long as your account exists.
  • Usage statistics and crash reports: according to the retention settings of the respective provider, and no longer than needed for the purposes above.
  • Server logs of our server functions: according to the log retention of Supabase.
  • Emails: as long as needed to handle your request, and beyond that only where retention is required by law.

Deleting your account: in the app under You → Settings → Delete account. We then delete your account together with your items, recipes, shopping list, preferences and stored receipt photos. Usage data at Amplitude and Firebase and the purchase record at RevenueCat are not removed by this step; write to app-support@donner.io and we will have them deleted. You can also ask us by email to delete your account.

17. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw consent at any time with effect for the future (Art. 7(3)).

Right to object (Art. 21 GDPR): where we process data on the basis of Art. 6(1)(f) GDPR, you can object at any time for reasons arising from your particular situation.

To exercise your rights, an email to app-support@donner.io is enough. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state where you live. The authority responsible for us is the Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg.

We do not use automated decision-making within the meaning of Art. 22 GDPR.

18. Children

FridgeLoop is not directed at children under 16. We do not knowingly process data of children under 16. If you believe a child has created an account, please let us know and we will delete it.

19. Security

All connections between the app, our server and our providers are encrypted (TLS). Every account can only access its own records; receipt photos are kept in a private storage area. Your session is kept in the iOS Keychain. No system is completely secure, but we take reasonable technical and organisational measures to protect your data.

20. This website

The pages of fridgeloop.donner.io set no cookies, use no analytics or tracking and load no fonts, scripts or images from third parties. Your language choice (English or German) is saved only in your browser’s local storage and is never transmitted.

When you visit the website, the web server automatically records technical access data in log files: IP address, date and time, the page requested, the amount of data transferred, the referring page and your browser’s user agent. We need these data to deliver the website and to keep it secure. Legal basis: Art. 6(1)(f) GDPR. The log files are kept by our hosting provider according to its retention periods and are not combined with other data.

21. Changes

We update this policy when the app or the legal situation changes. The current version is always available on this page. The date at the top shows when it was last changed.

← Back to the start page