Privacy Policy

Effective 28 August 2026 · Last updated 28 August 2026

This policy explains what data the ThatFridge iOS app and its backend service (together, "ThatFridge", "we", "us") collect, why, who we share it with, and the choices you have. ThatFridge is operated by Muhammad Naufal Kamaruddin, an individual developer. Contact: support@thatfridge.com.

1. Data we collect

Account & identity

Your name, email address and username.
A hashed password (we never store it in plain text).
Authentication tokens issued to your devices.

Content you create

Fridges you own or join — names, storage sections, and any fridge photo you upload.
Food items — name, quantity, category, expiry / best-before date, storage location, and an optional link to where you buy it.
Shopping list items.
Recipes — titles, ingredients, steps, tags, links you import, and any photo or video attachments you add.
Fridge notes, goals, and earned badges.
Fridge sharing — if you invite someone to a fridge or request to join one, we store that request and the members list. People who share a fridge can see its contents, notes and items.

Photos you submit

When you use receipt scanning, fridge-photo scanning, or add a recipe photo, the image is uploaded to our server and sent to an AI vision provider to extract text and item details (see §3). Images are stored on our server so the feature keeps working; you can delete the associated items and recipes in the app.

AI chat & "remembered facts"

Your chat messages and conversation history with the AI crew.
The inventory context (your current items) sent alongside a message so the AI can answer usefully.
Remembered facts — the AI extracts short notes about your preferences and household (e.g. "prefers vegetarian meals") from conversations and stores them to personalise future replies. You can view and delete every remembered fact in Profile → AI Data & Memory.

Usage & diagnostic data

Usage history — which items you used up or threw away and when. This powers your "Kitchen Score", streaks, weekly score snapshots and organizer tallies. Deletable in the app.
Server logs — IP address, device/browser user-agent and timestamps, kept for security and debugging.

Subscriptions

ThatFridge Pro is an auto-renewing subscription sold through Apple. Apple processes your payment — we never receive your card details. We use RevenueCat to manage entitlements; RevenueCat receives a pseudonymous app-user ID (your account ID), purchase and receipt data, and device/platform information, so we can tell whether your Pro access is active.

Notifications

Expiry and low-stock reminders are scheduled locally on your device. In the current version we do not operate server-sent push notifications and do not collect a push token.

2. What we do NOT collect

No advertising identifiers (IDFA), no ad networks, no cross-app or cross-site tracking.
No location data.
No third-party analytics SDKs in the current version.
No access to your contacts or photo library beyond the specific images you choose to add.

3. How your data is used

To provide the core service — store your inventory, sync it across your devices and household, and send reminders.
To generate AI features — recipe suggestions, "what should I eat", chat answers, receipt/photo parsing, and food-icon generation.
To calculate your Kitchen Score and progress.
To operate subscriptions and unlock Pro features.
To secure the service, prevent abuse, debug problems and meet legal obligations.

We do not sell your personal data, and we do not use your content to train our own models.

4. Third parties we share data with

We share the minimum necessary with service providers who process data on our behalf:

Provider	Purpose	Data shared
DigitalOcean, LLC (servers in Singapore)	Runs our servers and database	All application data, at rest
Cloudflare, Inc.	DNS and hosting for our public website (this page)	Standard web request logs (IP, user-agent); no account content
OpenRouter	Routes AI chat / recipe requests to large-language-model providers	Your message text and inventory context
Downstream LLM providers (via OpenRouter)	Generate the AI responses	Same as above, per OpenRouter's routing
fal.ai	Receipt / fridge-photo vision parsing and food-icon image generation	The image you submitted and short prompts
RevenueCat	Subscription entitlement management	Account ID, purchase / receipt data, device info
Apple	App distribution, payments, in-app purchases	Handled under Apple's privacy policy

We may also disclose data if required by law, or to protect the rights, safety or property of ThatFridge or its users.

5. Data retention

We keep your data while your account is active. You can delete individual chat sessions, remembered facts and usage history at any time in the app. When you delete your account (see §6) we hard-delete your user record, authentication tokens, and the fridges you own together with their items, notes, sections and shopping lists. Backups containing residual copies are rotated out within 30 days. Fridges owned by other people that you were merely a member of are not deleted, but your membership is removed.

6. Your choices and rights

Delete your account — in the app: Profile → Delete account. This is immediate and permanent.
Delete AI data — Profile → AI Data & Memory to remove remembered facts, chat history and usage history.
Access / correct / export your data — email support@thatfridge.com and we will respond within 30 days.
Depending on where you live (e.g. EEA/UK GDPR, California CCPA/CPRA) you may have additional rights to object to or restrict processing, or to lodge a complaint with your data-protection authority. Our legal bases for processing are performance of our contract with you, your consent (for optional AI features), and our legitimate interests in securing and improving the service.

7. Security

Passwords are hashed with bcrypt. Traffic between the app and our servers uses HTTPS. Access to production systems is restricted. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Children

ThatFridge is rated 4+ but is intended for a general audience managing a household. It is not directed to children under 13 (or under 16 in the EEA), and we do not knowingly collect data from them. If you believe a child has provided us data, contact us and we will delete it.

9. International transfers

Our servers are located in Singapore. Our AI providers (OpenRouter and the models it routes to, and fal.ai) process data in other countries, including the United States. Where required, transfers rely on appropriate safeguards such as standard contractual clauses.

10. Region-specific information

South Korea (PIPA)

When you sign up in Korea we ask for your explicit consent to (a) collect and use the personal data described in this policy for the purposes stated, and (b) transfer that data across borders to the AI and infrastructure providers listed in section 4, including to the United States, for the purpose of providing AI features and hosting the service. You may withdraw consent by deleting your account, though some AI features will not work without it. A Korean-language version of this policy is available on request and will be published at thatfridge.com/privacy/ko. Personal-information protection officer: Muhammad Naufal Kamaruddin, privacy@thatfridge.com.

Malaysia (PDPA)

We process your personal data on the basis of your consent, given at sign-up, and in accordance with the Personal Data Protection Act 2010 (as amended). You may withdraw consent, access or correct your data, or raise a complaint by contacting privacy@thatfridge.com. We will notify affected users and the Commissioner of a personal-data breach that causes or is likely to cause significant harm, as required by law.

11. Changes to this policy

We will post any changes on this page and update the "Last updated" date. Material changes will also be surfaced in the app.

12. Contact

support@thatfridge.com