Privacy Policy
🔒 FridgeUp! has no sign-up: we never ask for your email, a password or any login. Your food list stays on your device — and, on iOS, if you switch on iCloud sync, in your own private iCloud space. The only name the app ever asks for is a display name, if you create or join a Shared fridge: in that case the group's food list is stored on our server (see "Shared Fridge" below). Besides that, the only things that leave your device are anonymous usage statistics and, when you scan a barcode, the barcode number — both described below.
This Privacy Policy describes how FridgeUp! ("the App"), developed by Carmelo Sigilló and available on iOS and Android, handles your information. We are committed to protecting your privacy on both platforms.
All data you enter in FridgeUp! (food items, expiration dates, emojis, settings) is stored on your device, using your device's own local storage. Your food items leave your device only if you enable iCloud sync (iOS only) or create or join a Shared fridge. Scanning a barcode sends only the barcode number (see "Barcode Lookup"), and, on iOS, a few small items are kept in your private iCloud even when iCloud sync is off (see "iCloud Sync").
On iOS, FridgeUp! offers an optional, always-free way to keep your food list in sync across your own devices. It uses your own private iCloud account, subject to Apple's iCloud Privacy Policy. It is disabled by default, can be turned on or off at any time from the app's Settings, and is not tied to any purchase.
Even when iCloud Sync is off, two small things are kept in your private iCloud so that they follow you across your devices: the product names and emoji you teach the barcode scanner (up to 500), and a small status flag related to the 2026 launch offer.
All of this lives in your private iCloud, which is provided by Apple. It is never accessible to us.
If you create a group or join one, the following is stored in Firebase Realtime Database, operated by Google, in the europe-west1 region (Europe):
The app asks you for a display name when you create or join a group. This data is visible to the members of the group and is used only to make sharing work: we do not use it for advertising or tracking and we do not sell it. We use Firebase only for this purpose — not for analytics or advertising. As with any online service, Google's servers see the IP address your device connects from. On iOS, the app also opens a connection to Firebase every time it starts, even if you are not in a group. When you are not in a group, that connection sends no food items, names or identifiers — only your IP address and basic technical information (the Firebase version, your iOS version, the device type such as "iPhone", and the app's identifier). Firebase's software in the app also reports this kind of technical information to Google, and Firebase declares it as not linked to your identity.
Items you remove in the app are marked as deleted but may remain in our database. We do not currently delete groups or items automatically: group data stays in our database until we permanently delete it on request (see "Your Rights and Deleting Your Data" below). While you are in a group, iCloud sync of your food list is paused. If you neither create nor join a group, none of the group data listed above leaves your device. For how Google handles data, see Google's Privacy Policy.
When you scan a barcode, FridgeUp! sends only the barcode number to the public Open Food Facts database (world.openfoodfacts.org) to find the product name. No photo, food list or other data is sent with it. As with any online service, the server also sees the IP address your device connects from and standard technical request information (such as the app and system version). If the product is not in the database, the app asks you to type the name yourself; the name you type is then remembered on your device and, on iOS, in your private iCloud (see "iCloud Sync"). For how Open Food Facts handles data, see its own privacy information on its website.
FridgeUp! sends anonymous usage statistics to TelemetryDeck, a privacy-first analytics service, so we can see which features people actually use. It:
What we receive is a short list of event names — for example: app launched, food item added or consumed, theme changed, Pro purchased — sometimes with a simple value, such as which list an item was added to (fridge, freezer or pantry), the theme you chose, whether iCloud sync is on, the size of a tip, a simple count (for example how many items a grouped reminder contains), or the date and time you accepted the app's disclaimer. These statistics never include food names, expiry dates, photos or any personal content.
To tell one installation apart from another, each event carries a device identifier. FridgeUp! takes an identifier your device's operating system assigns to apps on it (identifierForVendor on iOS, or a comparable identifier on Android) and converts it into an irreversible hash before it leaves your device. We cannot turn that hash back into your device or you — and since we hold no account of any kind, there is nothing for it to be linked to.
For more information, see TelemetryDeck's Privacy Policy.
FridgeUp! requests access to your camera solely to scan barcodes and expiration dates on food packaging. Images captured by the camera are:
The only thing that can leave your device when you scan is the barcode number (see "Barcode Lookup" above).
If you enable notifications, FridgeUp! schedules local reminders about expiring food items. These notifications are generated and delivered entirely on your device. No notification data is sent to any external server.
In-app purchases (FridgeUp! PRO and tips) are processed exclusively through the app store you downloaded FridgeUp! from — Apple's App Store on iOS, or Google Play on Android. We do not collect or store any payment information ourselves. All transactions are handled by Apple or Google and subject to Apple's Privacy Policy or Google's Privacy Policy, respectively.
FridgeUp! is not directed at children and does not knowingly collect information from children under the age of 13. The app has no sign-up and asks for no email address or contact details; apart from an anonymous identifier, the only personal detail it can store on a server is the display name a user freely chooses in a Shared fridge.
You can ask us at any time what we hold about you and have it deleted. Write to fridgeup.ios@gmail.com (iOS app) or fridgeup.android@gmail.com (Android app) and include the invite code of your group (shown in the Shared fridge section of the app's Settings) and the display name you used. We reply within 30 days.
We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated date. Continued use of the app after changes constitutes your acceptance of the new policy.
If you have any questions about this Privacy Policy, please contact us at:
iOS app: fridgeup.ios@gmail.com
Android app: fridgeup.android@gmail.com
Developer: Carmelo Sigilló