Legal
Privacy policy
Fridgedoor keeps a shared home's lists in step between the people who live there. Here's what that takes, in plain English.
At a glance
- We collect what the app needs to work: your account, and what your home adds to its lists.
- Your home's lists are visible only to the people in that home.
- It's stored in the EU, in Frankfurt.
- No ads, no analytics or tracking in the app, and we never sell data.
- You can delete your account in the app at any time: Settings → Delete account.
| What | Why | Where | How long |
|---|---|---|---|
| Your accountYour name and email address (from Apple, which may be a private relay address, or the one you sign in with), how you sign in, and when you joined and last signed in. Your display name and avatar colour. | To sign you in, and to show the people you live with who added what. | Supabase, in Frankfurt (EU) | Until you delete your account. |
| Your home's listsThe home's name and currency. Lists and items with their notes, quantities, aisles and running-low flags. Who added or ticked each item, and when. Store runs, including the shop's name. Invite codes. | This is the shared list itself. Only the people in your home can see it. | Supabase, in Frankfurt (EU), and a copy on each member's phone | As long as the home exists. Removed items stay marked as removed so every phone stays in step, and go for good when the home is deleted. |
| Notification tokensA token for each phone where you allowed notifications, and whether it's an iPhone or Android phone. | To tell the others when someone starts a store run, like “Tom is at Lidl”. | Supabase (EU). Each notification passes through Expo and Apple. | Until you delete your account, or the token stops working (for example, after you delete the app). |
| Plus early access requestsThat your home asked, who asked and when, any note they added, and our decision. | To decide on early access and give approved homes Plus. | Supabase, in Frankfurt (EU) | As long as the home exists. If the person who asked deletes their account, their name comes off the request. |
| A list you paste into Tidy upThe text you paste. | To turn it into clean items, sorted by aisle. | Only on your iPhone, in Apple's on-device model. It never reaches us. | Not kept. The items you add become part of your home's lists. |
| Emails you send usYour message and your email address. | To answer you. | Our email inbox | As long as we need them to help you. |
On your phone
- The app keeps an offline copy of your home's lists in a database (SQLite) on your phone, so the list works without signal and catches up when you're back online. Your sign-in is kept there too.
- The Groceries widget and the store-run Live Activity show your home's name, the next few items and who's at the shop. They read from that same copy, on your phone.
- Tidy up (Plus) uses Apple's on-device model (Foundation Models, part of Apple Intelligence) to turn a pasted list into clean items. It runs on your iPhone, and the text you paste never leaves it.
- The only permission the app asks for is notifications. It doesn't use your camera, location, contacts or photos.
- Signing out doesn't erase the offline copy. Deleting the app removes all of it from the phone.
Who sees what
- The people in your home see its lists, items and store runs, and your display name and colour next to what you added. Anyone with a valid invite code can join a home, so share codes only with people you want in. A code works for seven days.
- Our staff use an internal tool that shows counts (how many people and open items a home has), home and people's names, email addresses, how people sign in, a home's currency, early access notes and dates. It never shows a home's lists or items.
- Nobody else, except the providers below, who handle data only to run Fridgedoor for us.
Who helps us run it
Supabase (database and sign-in)
Stores your account and your home's data, and sends the sign-in emails. The database is in Frankfurt, Germany (AWS eu-central-1).
Expo, by 650 Industries, Inc. (app updates and notifications)
Expo delivers app updates (EAS Update) and relays push notifications. For each notification, Expo receives the push token, the title and the text (for example “Tom is at Lidl Karlín” and “Add anything in the next 10 min”), and two random IDs that tell the app which store run to open. When the app checks for an update, Expo sees the technical details of that request, such as the IP address, the app version and a random install ID that isn't linked to your account.
Apple
Sign in with Apple, delivering notifications to iPhones (APNs), and the App Store and TestFlight. Apple's own privacy policy covers your Apple account.
Coming later: payments
Plus will become a paid subscription. When it does, you'll pay through Apple's In-App Purchase, and we plan to use RevenueCat to check which homes have Plus. We'll update this policy before that starts.
Outside the EU
Expo and Apple are in the United States, and Supabase, Inc. is a US company even though our database is in Frankfurt. These transfers rely on [TO CONFIRM: the safeguards in each provider's data processing terms, such as EU standard contractual clauses or the EU–US Data Privacy Framework].
What we don't do
- No ads, in the app or anywhere else.
- No analytics or tracking SDKs in the app, and no tracking you across other apps or websites.
- We don't sell your data, or share it for advertising.
- We don't read your lists. Our internal tool can't show them.
Deleting your account
Open Settings in the app and choose Delete account. This:
- deletes your account and your profile, your notification tokens and your place in every home;
- leaves homes you share with the other members, with your name removed from the items you added or ticked and the store runs you started;
- deletes homes only you are in, with everything in them;
- if you signed in with Apple, revokes Fridgedoor's access to your Apple sign-in.
Deleting the app alone doesn't delete your account. You can also email us and we'll delete it for you. [TO CONFIRM: whether backups are kept, where, and how long deleted data stays in them]
Why we're allowed to
- To give you the app you signed up for (GDPR Article 6(1)(b)): your account, your home's lists and sync, store-run notifications and early access.
- Our legitimate interest (Article 6(1)(f)) in keeping Fridgedoor secure and working, preventing abuse, and answering your emails.
- Legal obligations (Article 6(1)(c)), where the law makes us keep something.
Notifications only arrive if you allow them on your phone, and you can turn them off any time.
Your rights
Under the GDPR you can ask us to:
- show you the data we hold about you (access);
- correct anything that's wrong;
- delete it (erasure): Settings → Delete account does this in the app;
- give you a copy in a machine-readable format (portability): email us and we'll send your account and your homes' lists;
- stop using it where we rely on legitimate interest (objection).
Email us at support@getfridgedoor.com and we'll answer within one month. If you're not happy with how we handle your data, you can complain to the Czech data protection authority, Úřad pro ochranu osobních údajů (ÚOOÚ, uoou.gov.cz), or to the authority where you live.
This website
This site sets no cookies and runs no analytics. The waitlist form on the home page doesn't send anything yet. The server that hosts the site may keep standard access logs, such as IP addresses and the pages requested, for security: [TO CONFIRM: website host and how long it keeps logs].
Children
Fridgedoor is for people aged [TO CONFIRM: minimum age] and over. If you think a younger child has an account, email us and we'll delete it.
Changes
When this policy changes, we'll update the date at the top. If a change matters, for example a new provider or a new kind of data, we'll tell you in the app before it applies.
Who we are
Fridgedoor is run by [TO CONFIRM: operator's legal name] (IČO [TO CONFIRM: IČO]), [TO CONFIRM: registered address], the controller of your data. Questions about privacy: support@getfridgedoor.com.