Privacy Policy

Last updated and effective: September 7, 2026

Maksim Yaromau, Individual Entrepreneur, Georgia IP No. 302239897, 70 M. Tsinamdzgvrishvili street, Georgia, is responsible for In My Fridge (we/us). Contact us about privacy or support at Yaromaum@gmail.com.

This policy covers the iOS app, inmyfridge.app, its recipes and guides, legal and support pages, and supporting services. The public website can be browsed without an account. The production app uses Sign in with Apple. Terms: https://inmyfridge.app/terms

Dictation can add ingredients and equipment. The current app uses Apple's on-device speech recognition and local interpretation. You review and edit suggestions before saving. Microphone and speech permissions are optional and can be revoked in iOS Settings.

When local interpretation is uncertain or finds no usable catalog match, and remote assistance is enabled for that flow, the transcript may be sent through our authenticated backend to OpenAI for text interpretation. The request contains the transcript, language and request identifier, not your email, Apple identifier, push token, complete inventory or dietary preferences. The app does not send microphone audio to our backend or OpenAI. We do not persist or log audio or raw transcripts.

The backend requests that OpenAI not store the response as application state. Separate provider security and abuse-monitoring retention may still apply; we do not promise zero retention. Provider information: https://developers.openai.com/api/docs/guides/your-data

The current app has no camera, photo-library, receipt or barcode input feature. Recipe nutrition values are estimates, not a personal health record.

Our website serves public recipes, guides and product information. Hosting and security providers process IP addresses, user agents, requested URLs, timestamps, response status and related diagnostics to deliver and protect pages. Avoid putting private information into URLs. With your permission, a separate PostHog project measures website visits, public pages viewed, reading engagement, navigation, search result counts, filters, app-button impressions and clicks, support-link clicks, generic errors and page performance. It uses a pseudonymous browser identifier in local storage and a session identifier, campaign labels and broad referral categories. We do not send raw search text, email contents, account credentials, URL query strings or full referrer URLs. Session recording, advertising pixels and automatic form-content capture are disabled. IP location enrichment is disabled for website analytics; providers still process network addresses to receive requests.

Analytics remain off until you choose Allow analytics. You can decline or withdraw through Privacy choices in the footer. Withdrawal stops collection and clears the analytics identifier on that browser. Your choice is remembered for up to 180 days. Do Not Track and Global Privacy Control signals keep analytics off. Optional website analytics rely on consent; declining does not restrict site access. Hosting may use necessary security cookies, and browsers may cache assets. External links follow destination policies.

Optional notifications and reminders use your notification choices and, where needed for delivery, technical notification identifiers. You can disable them in iOS Settings. Opening legal pages inside the app makes an ordinary website request; app account credentials and your kitchen inventory are not included in that request.

We use Apple for identity, speech, notifications and App Store services; RevenueCat for purchases and entitlements; PostHog for app and optional website analytics; OpenAI for the limited text assistance above; and hosting, database, security, logging and email providers to operate the service. Relevant information may also be disclosed to advisers, authorities or successors where legally required or necessary to protect rights or complete a business transfer.

We do not sell personal data for money or use it for cross-company advertising tracking. We and our providers may process data outside your country, including in countries with different privacy laws. Applicable transfer safeguards are required where law demands them.

Local information remains until you, the app or iOS removes it. Server account data is retained while needed to operate your account. Operational request metadata, deletion-operation records, security logs and backups may remain for security, recovery and legal needs. We do not promise that every backup or operational log is erased immediately or on a fixed short schedule. Support correspondence and purchase records may remain as needed for support, accounting, fraud prevention and legal obligations.

Choose Settings > Delete account in the app and confirm to initiate deletion of your account, associated server data, credentials and app data on that device. Limited deletion-confirmation, security, billing and legally required records may remain. You can also contact us about deletion. Deleting an account or app does not cancel an Apple subscription; manage it through Apple.

Where applicable, we rely on performance of our agreement for requested features and purchases, legitimate interests for proportionate security and reliability work, consent when required for optional processing, and legal obligations for required records. Device permission is not a blanket consent to unrelated processing.

Depending on applicable law, you may request access, correction, deletion, portability, restriction or objection, information about sharing, and withdrawal of consent without affecting earlier lawful processing. Under Brazil's LGPD, this may also include confirmation of processing, anonymization or blocking of unnecessary or unlawful data and review of qualifying solely automated decisions. Contact Yaromaum@gmail.com; we may proportionately verify identity and will handle requests within applicable legal deadlines. You can complain to your competent privacy authority, including Brazil's ANPD. Information: https://www.gov.br/anpd/pt-br/assuntos/titular-de-dados-1/direito-dos-titulares

We use safeguards including protected device storage, Keychain credentials, encryption in transit, access controls and log redaction. No system is completely secure. The service is intended for people aged at least 13 or the applicable local minimum age for independent use. Contact us if a child has provided data without required permission.

We may update this policy, publish a new effective date and provide additional notice when required. English, Russian and Brazilian Portuguese versions are provided for their respective audiences; mandatory local privacy rights always apply.