PRIVACY

Last updated: [[DATE]] · Version: [[VERSION]]

The short version, before it gets long:

• We host in Germany / the EU, on our own servers.
• We use no trackers and no ad networks. No cookie banner circus.
• We strip EXIF and GPS data from your photos before anything is stored.
• For food recognition we send images to Anthropic – as a processor, not for model training.
• Minimum age 16.
• You can export your data and delete your account in the app at any time.

1. Controller

[[OPERATOR – most likely: oerli GmbH]], [[ADDRESS]] E-mail: service@fridgee.net

[[Data protection officer – if appointed: name and contact. Check whether an appointment under Art. 37 GDPR / § 38 BDSG is required.]]

2. What we process

2.1 Account

E-mail address, username, password (stored as an argon2id hash, never in clear text), year of birth (age check only), language, time of registration. Legal basis: Art. 6(1)(b) GDPR (performance of a contract).

2.2 Profile

Display name, status text, website, profile picture – all optional and publicly visible. Legal basis: Art. 6(1)(b) GDPR.

2.3 Content

Photos of your fridge, titles, descriptions, hashtags, comments, votes, follows. This content is public and can be found via search engines. Legal basis: Art. 6(1)(b) GDPR.

Important about photos: Photos of a fridge front often show pictures, magnets, drawings and other personal items – including ones featuring other people. Only upload what you are entitled to upload. Before uploading we offer on-device face detection (images do not leave your device for this) and suggest blurring detected faces. See Terms of Use, section 6.

2.4 Technical data

IP address, timestamp, requested resource, status code, bytes transferred, user agent. Server logs are deleted or truncated after [[7]] days. Legal basis: Art. 6(1)(f) GDPR (security of operations, abuse prevention).

2.5 Smart Fridge (optional)

Detected food items, your inventory, your shopping lists, recipes you open. Your inventory is private and never becomes part of a public post – not even when it was derived from a public photo. You can turn AI detection off entirely in Settings. Legal basis: Art. 6(1)(a) GDPR (consent), revocable at any time.

2.6 Push notifications (optional)

Device token (APNs, FCM) or web push subscription. Only with your explicit consent; can be turned off. Legal basis: Art. 6(1)(a) GDPR.

2.7 Moderation

Reports, reasons, decisions, warnings, suspensions – with timestamp and case number. Without these records we cannot meet our obligations under the DSA. Legal basis: Art. 6(1)(c) and (f) GDPR.

3. What we do not do

• No Google Analytics, no Meta pixel, no TikTok pixel, no ad networks.
• No sharing or selling of personal data to third parties for advertising.
• No location requests. On the contrary: we remove existing GPS data from your photos.
• No profiling for advertising, no automated decisions with legal effect (Art. 22 GDPR) – moderation decisions are always made by a human.
• No cookies beyond the strictly necessary ones (see section 9).

4. Recipients and processors

On AI processing: We transmit to Anthropic only the downscaled image (max. 1080 px, without EXIF/GPS) and, for recipes, the list of your inventory items. No account, name or contact data is transmitted. Anthropic processes the data solely on our instructions and not to train its own models. [[Confirm the contractual status and link it here.]]

5. Retention

After account deletion, comments by other users remain; your username in them is replaced with "Deleted user".

6. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21). You may withdraw any consent at any time with effect for the future.

You don't have to write to us for that:

• Data export: Settings → Your data → Export your data. You get a ZIP with data.json and all original images.
• Deletion: Settings → Your data → Delete account.

You also have the right to lodge a complaint with a supervisory authority, for example [[COMPETENT SUPERVISORY AUTHORITY, address]].

7. Minors

Fridgee is for users aged 16 and over. We ask for the year of birth at registration. If we learn that an account is run by a younger person, we delete it. Our service is not directed at children.

8. Security

Transport exclusively over TLS. Passwords as argon2id hashes. Access to user data by our team is logged. Sessions use short-lived access tokens and rotating refresh tokens; changing your password logs out all other devices. Backups are encrypted and stored in the EU.

9. Cookies and local storage

We only use strictly necessary cookies:

We also store preferences such as design mode and the offline shopping list in your browser's local storage. That data never leaves your device. No consent banner is required for this under § 25(2) TDDDG.

10. What is public

Posts, comments, username, profile picture, cool score and rank are public – visible without an account and indexable by search engines (fridgee.net/f/…, /u/…, /t/…). Your inventory, shopping lists, e-mail address, year of birth and notifications are not public.

11. Changes

We update this policy when our processing changes. We announce material changes in the app. The current version is always at https://fridgee.net/legal/privacy.