Proposed Privacy Policy Update

1. Who We Are

FreshTrack is developed and operated by Bilal USLU ("we", "us", "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the FreshTrack mobile application (iOS and Android) and this website.

Contact: bilalmanisa@gmail.com

2. Data We Collect

The categories below support FreshTrack’s features, security, diagnostics, and optional advertising measurement, subject to the choices described in this policy.

We do not collect: payment card details, precise GPS location, contacts, raw barcode-camera images, selected recipe screenshot images, scanned recipe-page images, or Siri audio recordings. Selected recipe screenshots and scanned recipe pages are read on your device; only their recognized text may be submitted for recipe extraction.

3. How We Use Your Data

• Provide the service — store inventory, shopping, recipe notes, reminder preferences, and waste history locally; with Pro, sync account inventory, shopping, private recipes and notes across your devices, identify household members, and sync shared inventory, shopping, kitchen activity, and waste history within a household. A Pro household owner can invite up to five other signed-in people. Invited Free members can sync the shared inventory and shopping list and view existing inventory groups; this does not give them personal Pro features or access to another account’s saved recipes, notes, or subscription records.
• Recipe import — retrieve a public recipe webpage or process recipe text you provide. Screenshots and pages captured with “Scan a recipe page” are converted to text on your device; the images are not uploaded for recipe extraction. When structured recipe data is unavailable, a limited portion of readable webpage text, text you paste or share, or text recognized from screenshots or scanned pages is sent to Anthropic to extract recipe fields.
• Siri and Shortcuts (iOS) — make supported shortcuts discoverable, help Siri select the intended inventory item, receive the command information interpreted by Apple on your device, and apply the requested use or restock action through FreshTrack's normal access and safety checks. We do not send voice-command utterances, item names, or storage locations to FreshTrack analytics.
• Free Siri allowance — keep a per-account usage counter on your device so ordinary sign-out does not restart the 5-command sampler. The account key is one-way hashed. This counter does not contain microphone audio, item names, or raw voice utterances, and is not sent to FreshTrack analytics.
• Authentication — verify your identity via Firebase Authentication and Google or Apple Sign-In.
• Subscription management — validate purchase receipts and grant or revoke Pro access.
• Advertising — show banner and interstitial ads to free-tier users via Google AdMob. Pro subscribers see no ads.
• Product improvement — aggregated or pseudonymous analytics and diagnostics to understand feature usage and fix bugs.
• Campaign measurement — understand which Facebook and Instagram campaigns lead to app use and subscriptions, subject to your privacy choices. This measurement can apply to both Free and Pro users; Pro removes in-app ads but does not by itself disable campaign measurement.
• Legal compliance — retain records as required by applicable law.

We do not sell personal information for money. Depending on applicable law and the processing involved, sharing events and identifiers with advertising partners may qualify as sale or sharing, including for cross-context behavioral advertising. The controls below let you opt out of Meta campaign measurement and revisit applicable regional choices.

4. Third-Party Services

FreshTrack uses the following third-party services. Each has its own Privacy Policy.

Meta measurement and your choices

In versions that include Meta App Events, our custom event parameters contain only a recognized subscription product identifier where applicable. Our event code does not send Meta your account email, Firebase account ID, inventory or recipe content, household information, purchase receipts, transaction IDs, or payment-card details. SDK-generated identifiers and device/network information mean these events are not anonymous. Meta’s automatic purchase logging is disabled; restoring an existing purchase is not recorded by our event code as a new subscription conversion.

Turn off Settings → Privacy & legal → Campaign measurement at any time to block new Meta event submissions by FreshTrack from this installation. This setting is available without signing in and applies to both Free and Pro users. It does not change Firebase analytics or crash reporting. Turning measurement on does not override a regional rejection or iPhone tracking denial. On iOS, FreshTrack also requires Apple’s tracking permission and disables Meta advertising-ID collection when permission or consent is withdrawn.

Where available, open Settings → Privacy & legal → Ad privacy options to revisit regional choices. In applicable US regions, FreshTrack blocks Meta measurement when the supported privacy signals indicate an opt-out of sale, sharing, or targeted advertising, or Global Privacy Control. Campaign measurement is off by default. Before starting it, FreshTrack explains the data shared with Meta and asks you to choose “Allow measurement” or “Not now.” Dismissing that question does not allow measurement. The choice applies even where no regional privacy form is required. You can change it in Settings. The in-app setting and iOS tracking permission still apply. Missing, unresolved, or unsupported required consent information does not authorize measurement.

Turning measurement off blocks new Meta event submissions by FreshTrack. Events already submitted to the SDK may still be delivered; turning measurement off does not delete events already sent. These controls apply to versions that include the Meta integration; older versions do not gain this integration because the policy is updated.

Our providers, including Google and Meta, may process information in countries other than where you live. Their privacy policies describe their international processing and applicable transfer arrangements. You can contact us with questions about these transfers or to exercise your privacy rights.

Firebase services process data on Google Cloud infrastructure. Google is certified under the EU–US Data Privacy Framework and provides GDPR-compliant Data Processing Agreements.

5. Data Retention

When you join a household, FreshTrack keeps a separate, account-specific copy of your personal inventory and shopping lists on that device. Leaving restores those personal lists and stops access to the household’s shared lists. This local copy is not a cloud backup and may be lost if you uninstall the app or clear its data. If the owner’s Pro access ends, sponsored sharing pauses without deleting household data; invited members can still leave.

We retain your data for as long as your account is active. If you delete your account:

• Your Firebase Authentication record and ordinary account-scoped Firestore data are deleted when the in-app deletion request completes, subject to the narrow safeguards below.
• Saved recipes and their general and ingredient notes, import-usage records, entitlements, and your memberships are also deleted.
• The free Siri sampler counter for the deleted account is removed locally as part of in-app account deletion. A completed in-app deletion also clears the app's local waste-insights cache on that installation. Ordinary sign-out preserves the counter and any free device-local data retained by the app; it is not an account-deletion request. Free inventory and unowned activity history are installation-scoped, so they may remain visible to someone who opens FreshTrack on the same device after sign-out and may be adopted into a later signed-in account's household if Pro cloud sync is enabled there; account-scoped saved recipes remain hidden. On both Free and Pro, signing out or switching accounts retains saved recipes and notes locally until you sign back into their owning account, including after Pro ends. Completed in-app account deletion removes the deleted account's local recipes and notes.
• A household that has no other members is deleted. If other members remain, its shared inventory, shopping list, and waste history are retained for those members and ownership is transferred to one of them.
• A completed account-deletion safety marker containing the deleted Firebase user ID and deletion timestamps is retained for up to 30 days. It prevents delayed sync or subscription processing from recreating deleted account data and allows safe cleanup retries.
• For Google Play only, a released subscription-ownership record may retain the store type and one-way hashed purchase and FreshTrack account-binding identifiers after account deletion. It does not retain the deleted account's email, name, raw purchase token, or Firebase user ID. We retain it while the associated store purchase may need secure ownership validation or restoration.
• Pseudonymous analytics, campaign-measurement, and crash-diagnostic records may remain under applicable Firebase, Meta, and other service-provider retention schedules. Because these records use app-instance or installation identifiers rather than the active FreshTrack account record, account deletion may not remove them immediately.

Service-provider backups and security logs may remain for a limited period under the provider's standard retention schedule. You can request deletion at any time via the Delete Account page or by emailing us.

6. Children's Privacy (COPPA)

FreshTrack is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at bilalmanisa@gmail.com and we will delete the information promptly.

7. Your Rights — GDPR / EEA

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR):

• Right of access — request a copy of your personal data.
• Right to rectification — correct inaccurate data.
• Right to erasure ("right to be forgotten") — delete your account and associated data, subject to the limited security, legal, and service-provider retention described above.
• Right to restriction — limit how we process your data.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interest.
• Right to withdraw consent — where processing is based on consent, you may withdraw at any time.

Our legal basis for processing is: contract performance (providing the service you signed up for), legitimate interest (analytics, security), and consent (Meta campaign measurement, and personalised advertising where required). To exercise your rights, contact bilalmanisa@gmail.com. We will respond within 30 days.

8. Your Rights — CCPA / California

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to know — what personal information we collect, use, and disclose.
• Right to delete — request deletion of personal information we have collected.
• Right to opt out of sale or sharing — we do not sell personal information for money. Depending on your consent, device settings, and region, AdMob advertising and Meta campaign measurement may involve sale or sharing under applicable privacy laws, including sharing for cross-context behavioral advertising under California law.
• Right to non-discrimination — we will not discriminate against you for exercising your CCPA rights.

You can turn off Meta campaign measurement from FreshTrack Settings → Privacy & legal → Campaign measurement. Where available, you can also revisit regional ad consent from Settings → Privacy & legal → Ad privacy options, use your device's privacy controls, or email bilalmanisa@gmail.com from the address associated with your account to submit a verifiable request.

9. Security

We implement the following security measures:

• All data is transmitted over HTTPS / TLS.
• Firebase Authentication manages credentials; we never store passwords.
• Firestore Security Rules restrict private account data to its owner. Shared inventory and shopping require household membership and either personal Pro or valid sponsorship from the household owner; other cloud features retain their own access checks.
• Subscription entitlements are written server-side only (Firebase Cloud Functions), not by the client.
• Firebase App Check signals, authentication, input limits, and server-side rate limits help protect backend APIs from abuse.

No transmission or storage method is 100% secure. If you discover a security vulnerability, please report it responsibly to bilalmanisa@gmail.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect changes. For material changes, we will notify you via in-app notice or email at least 14 days before the new policy takes effect. Where processing requires your consent, we will ask for it separately. Continuing to use FreshTrack does not by itself give that consent.

11. Contact Us

For any privacy-related questions, requests, or complaints:

• Email: bilalmanisa@gmail.com
• Support page: fresh-track-inventory.web.app/support

We aim to respond to all privacy inquiries within 5 business days and to complete data subject requests within 30 days.