Privacy Policy

Privacy at a Glance

Using FridgeVista Without an Account

You may use FridgeVista without creating an account. Guest mode supports fridge inventory, shopping lists, expiration tracking, local reminders, appearance and app settings, privacy controls, and local data-clearing tools.

Guest mode uses a randomly generated, device-local storage identifier. This identifier is not an email address, FridgeVista username, Firebase account identifier, or subscription identifier. FridgeVista does not associate guest data with an account.

Guest data remains in FridgeVista's local app storage on this device. It is not synchronized to FridgeVista or another device, and FridgeVista cannot restore it from a server. Reset Data on This Device, clearing app data, or uninstalling FridgeVista can permanently remove it.

Creating or signing in to an account does not automatically transfer guest data in this version. Hosted AI, recipe and web search, custom AI-provider settings, Apple subscriptions, account management, and other account-based services require sign-in and do not use guest data.

1. Information We Collect

Account and Authentication Information

When you create or use an account, FridgeVista may process your name or username, email address, account identifier, authentication metadata, and credentials used to sign in. FridgeVista uses this information to create, authenticate, secure, and manage your account.

Passwords are used only for authentication. FridgeVista does not store a readable plaintext copy of your password. Passwords are processed and retained only in a protected, non-readable form by the authentication system used for the Service.

If you use Sign in with Apple or Google Sign-In, FridgeVista may receive limited profile information permitted by that provider, such as your name, email address, and provider account identifier. FridgeVista does not receive your Apple or Google password.

Pantry, Shopping, Recipe, and Other App Content

Depending on the features you use, you may provide food inventory entries, shopping-list items, expiration dates, storage locations, recipes, food preferences, dietary patterns and allergens, and other information you choose to save.

With guest mode, this content is stored under a device-local guest identity and is not associated with a FridgeVista account. When you are signed in, the same content is stored on your device and associated with your account on that device. FridgeVista does not synchronize either copy to its servers or to another device.

Content is transmitted only when a signed-in feature you invoke requires it, as described below. Hosted AI and recipe-search features are not available to guest users in the current release and do not read guest data.

Chat Messages and AI Context

AI features require a FridgeVista account in the current release. Guest mode does not send prompts, photos, fridge contents, or recipe preferences to an AI provider. For signed-in users, chat history, conversation summaries, and settings are stored on your device. When you send a message, FridgeVista transmits the messages needed for that request, together with the context the request requires, to the AI provider selected for your account. Depending on the request, that context can include your username, the fridge or shopping-list contents the model reads while answering, selected ingredients, and saved recipe preferences such as cuisines, dietary patterns, and allergens.

FridgeVista's servers process AI requests in order to produce a response. FridgeVista does not store the content of your prompts or responses as conversation records on its servers, and does not use them to train its own AI models.

Photos You Attach to a Chat

You can attach a photo from your camera or photo library to a chat message. FridgeVista resizes and re-compresses the image on your device, keeps a local copy in FridgeVista's app storage, and transmits the image to the AI provider selected for your account so the model can respond. The original file in your photo library is not uploaded and is not modified.

Attached photos are deleted from FridgeVista's app storage when you delete the chat, clear chat data, or delete your account. Photos are not sent to Sentry, are not used for advertising, and are not used to train FridgeVista's own models.

No Audio Collection

FridgeVista does not record, collect, store, or transmit audio. The Service does not include voice input or speech-to-text, and no microphone permission is required to use any FridgeVista feature.

Recipe Searches and Web Lookups

When you ask for recipes or use a feature that searches the web, FridgeVista generates search queries from your request and the relevant context, which may include the ingredients in your fridge, the items you selected, your saved recipe preferences, and your app language. FridgeVista sends those queries to a third-party search provider to retrieve results, and fetches publicly available recipe pages to extract recipe details. These lookups are required for recipe features to work, including when you have selected Apple Intelligence or your own AI provider.

Subscriptions and Purchase Information

Subscriptions are purchased through Apple. Apple processes the payment, and FridgeVista does not receive your payment card details, billing address, or Apple Account credentials. To provide paid access, FridgeVista receives and verifies Apple's signed transaction and renewal records, which include the product identifier, transaction identifiers, original transaction identifier, purchase, expiration, and revocation dates, renewal status, and the anonymous account token FridgeVista assigned to your account. FridgeVista stores the verified subscription state and transaction records on its servers so paid access survives reinstalls and device changes.

The app also reports its own StoreKit status to FridgeVista so the app and our support team can diagnose entitlement problems. Verified Apple state always takes precedence over this self-reported status.

Sign in with Apple Connection

If you use Sign in with Apple, the app sends Apple's one-time authorization code to FridgeVista so that FridgeVista can disconnect your Apple sign-in when you delete your FridgeVista account. FridgeVista exchanges that code with Apple and stores the resulting refresh token in encrypted form. The credential is used only for that disconnection request and is removed when your account is deleted.

Service, Usage, and Diagnostic Data

FridgeVista's servers maintain the records needed to operate the Service: your Firebase account identifier, your FridgeVista username, the anonymous App Store account token described above, your subscription state, daily and monthly AI token counters, recipe-recommendation counters, and daily web-search counters. These records are used for authentication, entitlement, quota accounting, abuse prevention, and support.

Errors, Crash Reports, and Error-Associated Replay

FridgeVista uses Sentry to identify and fix software errors, crashes, and reliability problems. When an error or crash occurs, Sentry may receive an error code, exception message, stack trace, timestamp, app version, operating-system version, device model or type, diagnostic context or breadcrumbs associated with the error, network or performance context, IP address, and event, installation, session, device, or account identifiers available to the SDK.

For a sample of sessions in which an error occurs, Sentry may also receive an error-associated session replay containing a visual and technical record of the app around the error. Ordinary sessions are not recorded. Text, images, and vector content are masked in the replay, and FridgeVista strips authorization and cookie headers from error payloads before they leave the device.

Sentry data may be linked to a user, account, device, installation, or session because the diagnostic event may include an IP address or persistent identifier. FridgeVista uses this information only for debugging, security, reliability, and app functionality. It is not used for targeted advertising, advertising measurement, or data-broker purposes.

Notifications

FridgeVista schedules expiration reminders for items nearing their expiration date locally on your device. The Service does not register a push notification token with a notification provider. You can manage notification permissions in your device settings.

Support Requests

If you contact FridgeVista through the help center request or by email, FridgeVista receives the reason you selected, the message you write, and any email address or other details you choose to include. FridgeVista uses this information only to answer you and resolve the issue you raised, and retains it only as long as needed for those purposes, including keeping a record of the request.

Information FridgeVista Does Not Collect

FridgeVista does not request or collect your precise location, contacts, calendar, browsing history outside the app, advertising identifier, or microphone audio, and does not scan your photo library for content. Recipe preferences such as allergens and dietary patterns are settings you choose to enter so FridgeVista can filter recipe results. FridgeVista does not treat them as medical records and does not use them for any purpose other than the features you invoke.

2. How We Use Information

FridgeVista uses collected information only as reasonably necessary to:

• create, authenticate, secure, and manage accounts;
• provide pantry, shopping, reminder, and other requested app features on your device;
• send AI requests to the provider you selected and return generated results;
• run recipe and web searches and retrieve public recipe pages;
• verify App Store subscriptions, determine entitlement, and enforce plan limits and usage quotas;
• diagnose errors, investigate crashes, monitor reliability, and fix bugs;
• protect the Service against abuse, fraud, and security threats;
• respond to support and privacy requests, including account deletion;
• comply with applicable legal obligations; and
• maintain and improve the functionality and performance of the Service.

3. AI Features and Your Choices

AI features require a signed-in FridgeVista account in the current release. FridgeVista's AI features can run on more than one provider. You choose the provider in the app, and the information sent depends on that choice.

When you use "My own AI API," your API key is stored in the device's secure keychain, is never sent to FridgeVista's servers, and is removed when you delete your account or reset device data. The provider you choose processes your content under its own terms and privacy policy.

FridgeVista does not use your AI prompts, responses, or attached photos to train its own AI models. FridgeVista Cloud AI runs on OpenAI's API. OpenAI's terms state that API content is not used to train OpenAI models unless the customer affirmatively opts in, and that requests may be retained for a limited period for abuse monitoring and legal compliance. Providers you configure yourself apply their own terms. Do not include passwords, payment details, government identifiers, medical information, or other highly sensitive information in an AI request or an attached photo.

FridgeVista does not use Sentry to collect user feedback through an in-app Sentry feedback form.

4. Third-Party Service Providers

FridgeVista relies on service providers to operate specific features. These providers process information for the service described below and under their own privacy and security terms.

5. How We Share Information

FridgeVista does not sell your personal information. FridgeVista may disclose information only:

• to service providers that perform the operational functions described in this policy;
• to the AI provider or search provider needed to complete a request you made;
• when required by law, legal process, or a valid governmental request;
• when reasonably necessary to protect users, FridgeVista, or others from fraud, abuse, security threats, or harm;
• in connection with a merger, acquisition, financing, reorganization, or sale of all or part of the business, subject to appropriate protections; or
• with your direction or consent.

Where FridgeVista shares information with third-party service providers, FridgeVista requires those providers to protect it under terms that provide the same or equal protection as described in this policy.

6. No Advertising Tracking or Data Brokerage

FridgeVista does not combine information collected from the Service with information from other companies' apps, websites, or offline properties for targeted advertising or advertising measurement. FridgeVista does not share information with data brokers and does not use Sentry, Firebase, OpenAI, Apple, or Serper for cross-app advertising tracking.

FridgeVista does not access the advertising identifier for tracking and does not include advertising or analytics SDKs. Diagnostic information may be linked to a user or device for bug fixing, but linkage for debugging is not used for advertising tracking.

7. Local Storage, Server Records, and Retention

Most FridgeVista data lives on your device. FridgeVista's servers keep only the account, subscription, and usage records needed to operate the Service.

Stored on your device

• Fridge inventory, shopping list, recipes, saved preferences, chat messages and summaries, and scheduled reminders.
• Cached copies of photos you attached to chats, until you delete the chat, clear chat data, or delete the account.
• Your Firebase session, kept in the device's secure keychain rather than in plain application storage.
• API keys for "My own AI API," kept in the device's secure keychain.
• Guest data, stored under a device-local guest identity until you reset it, clear app data, or uninstall FridgeVista. FridgeVista retains no server-side copy.

Stored on FridgeVista's servers

• Your Firebase account identifier, your FridgeVista username, and the anonymous App Store account token.
• Verified App Store subscription state, transaction records, and App Store Server Notification records, plus the subscription status the app reports for diagnostics.
• Daily and monthly AI token counters, recipe-recommendation counters, and daily web-search counters, keyed to your account identifier and used for quota, abuse prevention, and cost accounting.
• Encrypted Sign in with Apple credentials, used only to disconnect Apple sign-in. They are removed when your account is deleted, or as soon as the disconnection request to Apple completes, if that is still in progress.

Retention periods

• Device data remains until you delete it in the app, clear app data, or uninstall FridgeVista.
• Account, subscription, and usage records are retained while your account is active. They are deleted after account deletion is completed, except as described below.
• AI requests are processed to produce an answer and are not stored as conversation records on FridgeVista's servers. Optional request logging used for debugging is disabled by default; when it is temporarily enabled for diagnostics, it truncates long text and replaces image data so photos are not written to logs.
• Sentry error events and error-associated replays are retained for the retention period configured for FridgeVista's Sentry project and are then automatically deleted or de-identified under that configuration.
• Temporary backups and archived copies may remain until overwritten or deleted through the normal backup cycle.

FridgeVista may also retain aggregated or de-identified information that cannot reasonably be linked to a person for security, reliability, and service-improvement purposes.

8. Account Deletion and Data Requests

Guest users do not have a FridgeVista account to delete. To erase guest data, open Settings > Privacy & Data > Reset Data on This Device. Deleting a signed-in account does not automatically erase a separate guest-data namespace previously created on the same device.

You can delete your FridgeVista account from within the app through Settings > Account > Delete account. FridgeVista requires a recent sign-in for this action, so if your session is older than a few minutes you may be asked to sign in again before deletion proceeds. If you cannot access the app or encounter a problem with the deletion feature, write to support.pantrio@gmail.com with the subject FridgeVista account deletion.

Account deletion removes your FridgeVista account, email address, account identifier, username, subscription records tied to your account, usage counters, and the local app data stored on the device for that account, including chat history and attached photos. If you use Sign in with Apple, FridgeVista also asks Apple to disconnect the app from your Apple Account; if that automatic request cannot be completed, FridgeVista tells you how to disconnect it yourself in iOS Settings.

Deleting your FridgeVista account does not cancel an App Store subscription. Manage or cancel a subscription in your Apple Account settings. Deleting your FridgeVista account also does not delete your Google or Apple account; complete that with the provider if you want it removed.

The limited records described in section 7, and any information FridgeVista must retain for a limited period for legal, security, fraud-prevention, dispute-resolution, or backup purposes, may remain after deletion. Information stored only on your device may remain until you delete it, clear the app data, or uninstall FridgeVista.

Depending on your location, you may also have the right to request access to, correction of, deletion of, restriction of, or a copy of personal information associated with you. FridgeVista may take reasonable steps to verify your identity before fulfilling a request.

9. Your Choices

• Account information: You may update available profile information through the app or contact FridgeVista.
• AI provider: You may switch between FridgeVista Cloud AI, Apple Intelligence, and your own AI provider, or choose not to use optional AI features.
• Attachments: You choose whether to attach a photo to a message. Sending a photo transmits it to your selected AI provider.
• Incognito mode: Incognito keeps new chat messages out of the device's stored chat history, but requests are still sent to your selected AI provider while you use the feature.
• Notifications: You may change notification permissions through your device settings.
• Local data: You can clear chat messages, clear an account's data from the device, or reset device data from the app's privacy settings.
• Guest data: You may use FridgeVista without an account and reset the guest data stored on this device from Privacy & Data.
• Account deletion: You may initiate deletion using the in-app deletion control described above.

10. Security

FridgeVista uses reasonable administrative, technical, and organizational safeguards designed to protect information, including authenticated account access, encryption of network communications in transit, secure device storage for session credentials and API keys, and service-provider security controls. Sign in with Apple credentials stored on FridgeVista's servers are encrypted with AES-256-GCM. No electronic transmission or storage method can be guaranteed completely secure.

FridgeVista will take appropriate steps regarding security incidents and will notify affected users or authorities when required by applicable law.

11. Children's Privacy

The Service is not directed to children under 13, and FridgeVista does not knowingly collect personal information from children under 13. If FridgeVista learns that such information has been collected, it will take reasonable steps to delete it.

12. International Data Transfers

FridgeVista and its service providers may process information in the United States and other countries that may have different data-protection laws than your location. Where required, FridgeVista will use reasonable safeguards for international transfers.

13. Changes to This Privacy Policy

FridgeVista may update this Privacy Policy to reflect changes to the Service, data practices, legal requirements, or service providers. The updated policy will identify a new effective date. For material changes, FridgeVista may provide additional notice through the Service or by another reasonable method.

14. Contact FridgeVista

For privacy, account-deletion, support, or legal inquiries, use the FridgeVista help center request or contact FridgeVista Support at support.pantrio@gmail.com.