Privacy Policy

Last updated: April 28, 2026

FrigoChef ("we", "our") is committed to protecting the privacy of its users. This policy explains what data we collect, why, how we use it, and what your rights are.

By using the FrigoChef application (frigochef.web.app), you accept the practices described in this document.

1. Data Controller

Entity: FrigoChef (independent project)

Contact: rigahludovic@gmail.com

Hosting: Google Firebase (Europe — europe-west1 region)

2. Data Collected

2.1 Account Data

Email address (required)
Display name (optional, provided by Google OAuth if signing in with Google)
Profile photo (optional, provided by Google OAuth)
Dietary preferences, diets, allergies (optional, manually entered)

2.2 Usage Data

Fridge photos scanned (processed by Google Cloud Vision AI, not permanently stored)
Grocery receipt photos (processed by AI, not permanently stored)
Ingredient list detected by scans (stored in Firestore)
Recipes generated and viewed
Meal plan created
Shopping list generated
Family members added (name + optional dietary requirement)
Daily scan count (for quota management)

2.3 Payment Data

Payments are processed exclusively by Stripe. FrigoChef stores no banking data (card number, IBAN). Only the Stripe subscription ID and subscription status (active/cancelled) are kept in our database.

2.4 Technical Data

Firebase push notification token (for fridge expiry alerts)
Approximate geographic location (only when using store search — never stored)

3. Why Do We Collect This Data?

Purpose	Legal basis
Provide the service (AI scan, recipes, planning)	Contract performance
Account authentication and security	Contract performance
Subscription and payment management	Contract performance
Personalization (diets, preferences)	Consent
Push notifications (fridge alerts)	Explicit consent
Service improvement and anonymous statistics	Legitimate interest
Beta access codes and invitations	Consent

4. Retention Period

Account data: kept until account deletion
Scans and ingredients: kept until manual or account deletion
Photo images (fridge/receipts): processed in real time, not stored
Subscription data: kept 5 years after cancellation (legal accounting requirement)
Security logs: 90 days

5. Data Sharing

Your data is never sold. It may be shared only with:

Google Firebase / Firestore — database and authentication (European servers)
Google Cloud Vision & Gemini AI — image analysis and recipe generation
Stripe — payment processing (US/European servers, PCI-DSS certified)
Google Maps Platform — nearby store search (GPS coordinates not stored)

All these sub-processors are bound by GDPR-compliant data processing agreements.

6. Your Rights (GDPR)

In accordance with the General Data Protection Regulation (GDPR), you have the following rights:

Right of access

Obtain a copy of all your personal data

Right of rectification

Correct inaccurate data

Right to erasure

Delete your account and all your data

Right to portability

Receive your data in a readable format

Right to object

Object to certain processing (marketing)

Right to restriction

Suspend the processing of your data

To exercise your rights, contact us at rigahludovic@gmail.com. We will respond within 30 days. You may also contact the CNIL (cnil.fr) if you believe your rights are not being respected.

7. Cookies & Local Storage

FrigoChef uses:

Firebase Auth cookies — login session (required for the service to work)
localStorage / sessionStorage — temporary recipe cache in the browser (no personal data)

No advertising or third-party tracking cookies are used.

8. Security

HTTPS/TLS encrypted communications
Firebase authentication with JWT tokens
Firestore rules: each user only accesses their own data
API keys not exposed client-side (managed server-side)
Payments processed by Stripe (PCI-DSS Level 1 certified)

9. Minors

FrigoChef is intended for users aged 16 and over. We do not knowingly collect data from children under 16. If you believe a minor has provided us with personal data, please contact us to have it deleted.

10. Changes to This Policy

We may update this policy. In the event of significant changes, you will be notified by email or through the application. The date of the last update is shown at the top of this page.

Contact

For any questions about this policy or your personal data:

rigahludovic@gmail.com

Response time: 30 days maximum (GDPR)

CGU CGV Back to home