Table of Contents
1. Who We Are
FreshTrack is developed and operated by Bilal USLU ("we", "us", "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the FreshTrack mobile application (iOS and Android) and this website.
Contact: bilalmanisa@gmail.com
2. Data We Collect
We collect the minimum data necessary to provide the service.
| Category | Examples | Source |
|---|---|---|
| Account data | Email address, display name, and profile photo URL when provided | You provide via Google or Apple Sign-In |
| Inventory data | Item names, quantities, expiry dates, storage area (fridge / freezer / pantry), notes | You enter in the app |
| Shopping list data | Item names, quantities, checked state | You enter in the app |
| Recipe data | Recipe links or pasted/shared text, titles, ingredients, instructions, servings, and saved recipes | You provide or import in the app |
| Waste insights data | Item-added, used, and wasted events, item names, categories, quantities, and timestamps | Created from your inventory actions |
| Subscription data | Pro status flag, subscription product ID | Apple App Store / Google Play receipt validation |
| Usage & diagnostics | App events (item added, screen viewed), crash reports | Firebase Analytics & Crashlytics (anonymous device ID) |
| Ad identifiers | Advertising ID (IDFA / GAID) used by AdMob for ads where permitted by your consent and device settings (free users only) | Google AdMob SDK |
| Barcode lookups (Pro) | When you scan a product, the barcode number is sent to the OpenFoodFacts database to look up its name and category. The camera image is processed on your device and never uploaded. | You scan via the in-app camera (camera permission required) |
| Device info | OS version, device model, language/locale | Collected automatically by Firebase |
We do not collect: payment card details, precise GPS location, contacts, or camera/microphone data.
3. How We Use Your Data
- Provide the service — sync your inventory, shopping list, recipes, and household waste insights across devices.
- Recipe import — retrieve a public recipe webpage or process recipe text you provide. When structured recipe data is unavailable, relevant page or pasted text is sent to Anthropic to extract the recipe.
- Authentication — verify your identity via Firebase Authentication and Google or Apple Sign-In.
- Subscription management — validate purchase receipts and grant or revoke Pro access.
- Advertising — show banner and interstitial ads to free-tier users via Google AdMob. Pro subscribers see no ads.
- Product improvement — aggregate, anonymized analytics to understand feature usage and fix bugs.
- Legal compliance — retain records as required by applicable law.
We do not sell, rent, or trade your personal data to third parties for their own marketing purposes.
4. Third-Party Services
FreshTrack uses the following third-party services. Each has its own Privacy Policy.
| Service | Purpose | Privacy Policy |
|---|---|---|
| Firebase Authentication | User sign-in (Google or Apple identity) | firebase.google.com/support/privacy |
| Cloud Firestore | Store & sync account, household, inventory, shopping, recipe, and waste-insight data | firebase.google.com/support/privacy |
| Firebase Cloud Functions | Server-side subscription receipt validation | firebase.google.com/support/privacy |
| Firebase Analytics | Anonymous usage analytics | firebase.google.com/support/privacy |
| Firebase Crashlytics | Crash reporting | firebase.google.com/support/privacy |
| Google AdMob | Advertising for free users | policies.google.com/privacy |
| OpenFoodFacts | Product name/category lookup for scanned barcodes (Pro) | world.openfoodfacts.org/privacy |
| Anthropic | Extract recipe fields from webpage or recipe text when automatic structured-data extraction is unavailable | anthropic.com/legal/privacy |
| Apple App Store (StoreKit) | In-app purchase & subscription (iOS) | apple.com/legal/privacy |
| Google Play Billing | In-app purchase & subscription (Android) | policies.google.com/privacy |
Firebase services process data on Google Cloud infrastructure. Google is certified under the EU–US Data Privacy Framework and provides GDPR-compliant Data Processing Agreements.
5. Data Retention
We retain your data for as long as your account is active. If you delete your account:
- Your Firebase Authentication record and account-scoped Firestore data are deleted when the in-app deletion request completes.
- Saved recipes, import-usage records, entitlements, and your memberships are also deleted.
- A household that has no other members is deleted. If other members remain, its shared inventory, shopping list, and waste history are retained for those members and ownership is transferred to one of them.
- Aggregated, anonymized analytics data (no personal identifier) may be retained for up to 14 months as required by Firebase Analytics.
Service-provider backups and security logs may remain for a limited period under the provider's standard retention schedule. You can request deletion at any time via the Delete Account page or by emailing us.
6. Children's Privacy (COPPA)
FreshTrack is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at bilalmanisa@gmail.com and we will delete the information promptly.
Our AdMob integration is configured with child-directed treatment disabled, and we do not target ads to children.
7. Your Rights — GDPR / EEA
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR):
- Right of access — request a copy of your personal data.
- Right to rectification — correct inaccurate data.
- Right to erasure ("right to be forgotten") — delete your account and all associated data.
- Right to restriction — limit how we process your data.
- Right to data portability — receive your data in a structured, machine-readable format.
- Right to object — object to processing based on legitimate interest.
- Right to withdraw consent — where processing is based on consent, you may withdraw at any time.
Our legal basis for processing is: contract performance (providing the service you signed up for), legitimate interest (analytics, security), and consent (personalised advertising). To exercise your rights, contact bilalmanisa@gmail.com. We will respond within 30 days.
8. Your Rights — CCPA / California
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):
- Right to know — what personal information we collect, use, and disclose.
- Right to delete — request deletion of personal information we have collected.
- Right to opt-out of sale — we do not sell your personal information.
- Right to non-discrimination — we will not discriminate against you for exercising your CCPA rights.
To submit a verifiable consumer request, email bilalmanisa@gmail.com from the email address associated with your account.
9. Security
We implement the following security measures:
- All data is transmitted over HTTPS / TLS.
- Firebase Authentication manages credentials; we never store passwords.
- Firestore Security Rules restrict account data to its owner and household data to active Pro household members.
- Subscription entitlements are written server-side only (Firebase Cloud Functions), not by the client.
- Firebase App Check signals, authentication, input limits, and server-side rate limits help protect backend APIs from abuse.
No transmission or storage method is 100% secure. If you discover a security vulnerability, please report it responsibly to bilalmanisa@gmail.com.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect changes. For material changes, we will notify you via in-app notice or email at least 14 days before the new policy takes effect. Continued use of FreshTrack after the effective date constitutes acceptance of the updated policy.
11. Contact Us
For any privacy-related questions, requests, or complaints:
- Email: bilalmanisa@gmail.com
- Support page: freshtrack-app.web.app/support
We aim to respond to all privacy inquiries within 5 business days and to complete data subject requests within 30 days.