Privacy Policy

• Contractual Performance (Art. 6(1)(b) GDPR): Account registration, food expiration tracking, inventory sync, household sharing, subscriptions, and support requests.
• Explicit Consent (Art. 6(1)(a) GDPR): Optional telemetry, crash diagnostics (Firebase Crashlytics), usage analytics (Firebase Analytics), personalization features, and advertising-related choices where applicable.
• Legitimate Interests (Art. 6(1)(f) GDPR): App security, abuse and spam prevention (including rate limiting of feedback submissions), and system stability.

• Account Data: When you create an account, we store your email address, display name, optional avatar, age band, and sign-in method (email and password, Google, or Apple) in Supabase, linked to a user ID. We also record when you accepted this privacy policy and which version you accepted.
• Local-First Storage: Food items marked as personal remain strictly on your local device (Realm database) and are never transmitted to cloud servers.
• Cloud Sync Data: Cloud sync runs only when you belong to a household (used for household sharing and for syncing your own devices). Items you have not marked as personal are then stored in Supabase, including their names, quantities, categories, brands, barcodes, prices, expiry dates, storage locations, when they were opened, thawed, used up, or wasted, and who added them. Shopping lists (including notes), household membership, household product catalog entries (including purchase counts and prices), and profile display names are also stored securely in Supabase (hosted within the European Union, Stockholm region).
• Photos: Photos you add to food items or products, and your avatar, are uploaded to and stored in Supabase. These photos, including your avatar, are stored at unlisted links: anyone who has a photo's link can open it, so share links with care. Your avatar's link is derived from your user ID.
• Receipt & Barcode OCR Processing: Text recognition from receipts and date labels is processed on-device (via Google ML Kit). Temporary image files created during scanning are purged immediately from local cache upon text extraction and are never permanently stored or transmitted. This applies only to scan images, not to photos you choose to save.
• Feedback & Support: You can submit feedback with or without an account. If you are signed in, the request is linked to your account and records whether you have Spoilert Pro. We process the message and selected category, together with a per-install identifier used to link your ticket and any screenshot, prevent spam, and rate-limit submissions (this is always included, regardless of the diagnostics setting). Device diagnostics (app version and build, operating system and version, and language setting) and a screenshot are included only when you choose to provide them. When you report a problem from an error message, that error's reference code is included. Support submissions are sent to and stored in our Supabase-backed support systems so we can investigate and respond.
• Analytics & Crash Logs: When opted in, pseudonymous diagnostics and performance logs, linked to device and app-instance identifiers, are collected to improve app stability.

• Supabase Inc. (Database, authentication, cloud sync, photo storage, and support submissions; hosted in the EU, eu-north-1 Stockholm).
• Google Firebase (Analytics & Crashlytics, processed under Standard Contractual Clauses / Data Privacy Framework).
• Google Mobile Ads / AdMob (Advertising for the ad-supported experience. Google may process device identifiers, IP-address-derived approximate location, app interactions, and diagnostic information for advertising, analytics, and fraud prevention, as described in Google's SDK disclosures. Where consent is required, Google's consent form asks for it before personalized ads are shown, and on iOS adults (18+) are also asked for tracking permission. Users under 18, or whose age is unknown, receive only non-personalized, age-restricted ads, and all ads are limited to content suitable for most audiences.)
• RevenueCat (Subscription management and subscription revenue reporting. Processes your purchase history and your Spoilert account ID, or an anonymous app user ID before you sign in.)

• Access & Data Portability (Art. 15 & 20): Export your inventory, shopping list, product catalog, settings, and profile details from the app as a JSON backup or an inventory CSV file. For other data we hold about you, such as your email address, age band, or support requests, contact us for a copy.
• Rectification (Art. 16): Edit any item, category, or profile detail at any time.
• Erasure / Right to be Forgotten (Art. 17): Request deletion through the app or our public account deletion page. Household owners with other members must complete the household step described above first.
• Withdraw Consent (Art. 7(3)): Opt out of analytics, crash reporting, or personalization anytime in Privacy Settings.

To exercise any of these rights or for inquiries, contact us at support@spoilert.app.