1. Who is responsible for your data
I am. I am an individual based in Prague, Czech Republic, and I run FrigoTime.
Contact for anything privacy related, including deletion requests: frigotimeapp@gmail.com
2. What I collect, why, and on what basis
| What | Why | Legal basis (Article 6 GDPR) |
|---|---|---|
| Application: your email address and the answers you give on the sign-up form | To review your application and tell you whether you were accepted | Consent, given when you submit the form |
| Account: your email address, and a record that you are on the approved list | To let you log in during the beta | Performance of the beta agreement (Art. 6(1)(b)) |
| Login activity: when you last logged in and how many times | To see whether the beta is being used and to fix problems | Legitimate interest in running and improving the beta (Art. 6(1)(f)) |
| Your food items: item name, category, where you store it, dates added and used, quantity, and price if you enter it | This is the core function of the app | Performance of the beta agreement |
| Your settings: alert email address, time zone, currency, country, and your email digest and alert preferences | To send you the emails you choose and show the right formats | Performance of the beta agreement |
| Receipt scans: the items you confirm on the review screen (name, category, storage location, dates, price), stored as your food items. A record of each scan attempt (date, success or failure, error code, item count, processing size, cost) is kept separately and does not include item names. | To turn a receipt into items, to enforce the monthly scan limit, and to understand what the feature costs to run | Performance of the beta agreement (scanning) and legitimate interest (cost and error records) |
| Feedback: if you use the in-app feedback link, your response and the email address it is linked to | To read and act on what you tell me about the beta | Consent, given when you choose to open the feedback form and submit it |
Receipt images are not stored by FrigoTime. A photo is used only to extract the items and is not kept in my database. Receipts can contain personal details such as a name, a loyalty card number, or part of a card number. Please crop or avoid including these. The image is sent to Anthropic for reading (see section 3), and Anthropic deletes it within 30 days under its own terms.
Incidental technical logging. When a receipt scan fails, a short fragment of the extracted text can appear in my hosting provider's error logs while I debug the failure. This never happens on a successful scan. If sending an alert email fails, the attempt is logged with your email address and the number of items in that alert. These are automatic error records, not something I read routinely, and they follow the retention periods in section 5.
I do not make decisions about you by automated means. I approve or decline applications myself, by hand.
The app uses only what it needs to keep you logged in. No advertising or analytics tools.
Cookies. FrigoTime sets two cookies, both required to keep you signed in:
| Cookie | Stores | Lifetime |
|---|---|---|
| Login session | Your access token and basic account info, including your email | Up to 400 days |
| Sign-in code verifier | A one-time code used only during login | Deleted after login completes |
These are strictly necessary for the app to work, so no cookie consent banner is required for them under EU rules.
3. Who else handles your data
I use these providers to run the beta. They act on my instructions.
| Provider | What they do | Where |
|---|---|---|
| Tally | Hosts the beta sign-up form and stores applications. Also hosts the in-app feedback form, which links your feedback to the email address you signed up with. | EU servers |
| Supabase | Hosts the app database and login. Your data is stored on servers in Ireland, but the company itself, Supabase Pte. Ltd., is registered in Singapore. | Ireland (storage), Singapore (company) |
| Vercel | Hosts the app itself. Every request to FrigoTime passes through Vercel's infrastructure, including brief error logs (see "Incidental technical logging" above). | United States (account and control data); functions may run in other regions |
| Anthropic (Claude API) | Reads receipt scans and turns them into items. Anthropic does not train its models on API data by default. | United States |
| Resend | Sends login codes and email alerts, which include the food item names and days remaining relevant to that alert. Resend keeps a copy of sent emails for up to 30 days. | United States |
4. Transfers outside the EU
Anthropic and Resend process data in the United States, Vercel's account and control-plane data is handled in the United States, and Supabase's contracting entity is in Singapore. Anthropic, Resend, and Supabase have signed data processing terms with me covering these transfers, using the EU Standard Contractual Clauses. Resend is also certified under the EU-U.S. Data Privacy Framework. Vercel hosts the app under its standard terms; Vercel's formal data processing addendum is available only on paid plans, which this beta does not currently use. Tally keeps data in the EU.
5. How long I keep it
- Declined or unanswered applications: deleted 30 days after I answer.
- Accounts and food data: kept while you are actively using the app. If you leave the beta, or if your account has no login for 90 days, I treat that as you having stopped, and delete your account and food data 90 days after that point.
- Scan and login records: kept on the same schedule as your account. Once deleted, I may keep an anonymized, aggregate summary that cannot be traced back to you, for example a general pattern across all testers.
- Feedback: kept in Tally for 90 days.
- Hosting error logs (Vercel): kept for roughly 1 hour, then gone.
- Email provider logs: Resend keeps email logs for up to 30 days.
- Anthropic: deletes receipt scan inputs and outputs within 30 days, unless flagged for misuse, in which case it can be kept up to 2 years.
6. Your rights
You can ask me at any time to: see the data I hold about you, correct it, delete it, restrict how I use it, export it, or object to a use based on legitimate interest. If you gave consent, you can withdraw it at any time, which does not affect what happened before. Email frigotimeapp@gmail.com. I will answer within one month.
You can also complain to the Czech data protection authority, the Úřad pro ochranu osobních údajů (uoou.gov.cz), or to the authority in the country where you live.
7. Security
Your data is stored in access-controlled databases, and logins use a one-time code sent by email. No system is perfectly secure. If a breach puts your data at risk, I will tell you.
8. Changes
If I change how I handle data, I will update this page and change the date at the top. For anything significant I will email active testers.