🚧 This website is still under construction — some content is not yet final.

SmartFridge App-Icon SmartFridge
DE Get the app

Privacy Policy

This English version is provided for your convenience. The German version is the legally binding one.

1. Controller

The controller responsible for data processing under the General Data Protection Regulation (GDPR) is:
Robin Lorenz
Ensinger Straße 44
89073 Ulm
Germany
Email: smartkuehlschrank.support@gmail.com

2. General information on data processing

I only process personal data to the extent necessary to provide this website, the SmartFridge app and its features. Depending on the specific processing, the legal basis is the performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR), legitimate interests (Art. 6(1)(f) GDPR), or consent given by you (Art. 6(1)(a) GDPR).

3. Hosting of this website

This website is hosted on Cloudflare Pages and delivered via Cloudflare's content delivery network (Cloudflare, Inc., 101 Townsend St, San Francisco, CA, USA). Visiting the website automatically generates technical data (e.g. IP address, date and time of access, page requested, browser used) in server log files. This serves the technical provision and security of the website (Art. 6(1)(f) GDPR). Cloudflare may transfer data to the USA; EU Standard Contractual Clauses serve as a safeguard for this third-country transfer.

4. User account and registration in the app

Using the SmartFridge app requires creating a user account with an email address and password. This processing serves the performance of the usage contract (Art. 6(1)(b) GDPR). Account and usage data are stored and processed via Supabase (Supabase Inc.) in an EU server region. Processing by Supabase is based on a data processing agreement under Art. 28 GDPR.

5. Fridge contents, meal planning, recipes and shopping lists

A core feature of the app is that you enter information about your fridge contents (e.g. food items, quantities, best-before dates), your meal plans, recipe choices and shopping lists. This data is processed to provide you with the corresponding app features (Art. 6(1)(b) GDPR) and is likewise stored via Supabase.

6. AI meal planner (Google Gemini)

For the AI meal planner, I transmit the data required for this purpose – your stored fridge contents as well as any preferences and intolerances you have entered – to Google's Gemini API (Google Ireland Limited or Google LLC, USA) to calculate suitable meal suggestions. Your account or contact data (e.g. email address) is not transmitted to Google. This processing serves contract performance (Art. 6(1)(b) GDPR). Since processing may also take place on servers in the USA, EU Standard Contractual Clauses between me and Google serve as a safeguard for this third-country transfer.

7. Transactional emails (Resend)

I use the Resend service to send necessary transactional emails. This includes, in particular, confirming your registration and, if you invite people to your household, sending household invitations. The relevant email address is processed to deliver that email (Art. 6(1)(b) GDPR). No marketing emails are sent through this service.

8. Camera access (scan feature)

If you want to add food items to your fridge contents by scanning them, the app first asks for your explicit permission to access your device's camera (Art. 6(1)(a) GDPR). Without your permission, this feature is unavailable; the rest of the app's features remain unaffected. Captured images are processed solely to recognize the scanned food items.

9. Household feature and invitations

Within a household, you can invite other people, e.g. by email address or via an invitation link. To do so, I process the email address you enter for the invited person in order to deliver the invitation to them, even if that person does not yet have a SmartFridge account (Art. 6(1)(b), (f) GDPR). If the invited person accepts the invitation, they are assigned to your household; from that point on, that household's fridge contents, meal plans and shopping lists are shared with all household members (Art. 6(1)(a), (b) GDPR). Please note that your stored data becomes visible to other household members as a result. If you invite someone who does not yet have their own account, please inform them about this privacy policy yourself where possible.

10. Purchases and subscriptions (SmartFridge Premium)

SmartFridge Premium is offered as a subscription and can be purchased either through the Apple App Store or through Google Play. In both cases, payment processing is handled entirely by the respective store operator (Apple or Google); I do not receive or process any payment data myself. To manage and synchronize your subscription status across platforms, I use RevenueCat as a processor. This involves processing a pseudonymous app user ID, purchase and transaction data from Apple or Google, and your subscription status.

In addition to individual subscriptions, there are family/multi-person subscriptions, where one subscription applies to several members of the same household. In this case, I additionally process information about which household members are covered by an existing subscription. RevenueCat may transfer data to the USA; EU Standard Contractual Clauses serve as a safeguard for this third-country transfer.

11. Minimum age

SmartFridge is not directed at children. Using the app requires a minimum age of 16. Individuals under 16 may only use the app with the consent of a parent or legal guardian.

12. Cookies and web analytics on this website

This website itself does not use tracking cookies. Should a privacy-friendly, cookie-less analytics tool (e.g. Cloudflare Web Analytics) be used in the future for anonymized traffic measurement, no personal profiles will be created; this policy will be updated accordingly in that case.

13. Retention period

I only store personal data for as long as necessary for the purposes stated above or as required by statutory retention obligations. Account-related data is deleted when you delete your account, unless statutory retention obligations require otherwise. For instructions on how to delete your account directly in the app, and exactly what data is removed, see Delete Account.

14. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and objection to processing (Art. 21 GDPR). You may withdraw any consent given at any time with effect for the future. Please contact the address given above.

15. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data. This is generally the authority in your place of habitual residence, or the authority responsible for Baden-Württemberg, the "Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg".

16. Changes to this privacy policy

I will update this privacy policy as the app's features or the services used change.