Privacy Policy
FridgeGenius ("we," "us," or "our") provides an AI-powered recipe generation service. This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, and the rights you have under data-protection laws including the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and the Children's Online Privacy Protection Act (COPPA).
Lawful Basis for Processing
We process personal data under one or more of the following legal bases recognized by GDPR Article 6: (a) your explicit consent, which you may withdraw at any time; (b) performance of a contract when you sign up for or use a paid Premium subscription; (c) our legitimate interest in operating, securing, and improving the service in a way that does not override your fundamental rights; and (d) compliance with legal obligations such as tax and accounting requirements for paid subscriptions.
Information We Collect
We collect: (1) Account data — your email address (and optionally a display name and avatar) when you sign up through Supabase Auth; (2) Recipe inputs — ingredient lists you type, optional photos you upload of your fridge or pantry, and the cuisine, diet, and serving filters you select; (3) Generated content — the recipes and food images we produce for you, stored in our database so you can revisit them; (4) Subscription metadata — when you upgrade to Premium, our payment processor Stripe handles your card details directly and shares only a customer ID, billing email, and subscription status with us; (5) Usage data — anonymized request counts and timing for rate limiting and reliability monitoring; (6) Local-storage and cookie data described below.
Information We Do Not Collect
We do not collect: government-issued IDs, Social Security numbers, biometric data, precise geolocation, full credit-card numbers (Stripe handles all card data), browsing history outside FridgeGenius, contacts, or content from other apps. We do not sell your personal information to third parties under any circumstances.
How We Use Your Information
We use your information to: generate recipes and food images based on your inputs; maintain your account and saved recipes; process Premium subscription payments via Stripe; communicate essential service updates and respond to support requests; monitor service reliability and detect abuse; comply with legal obligations. We do not use your data for behavioral advertising. If we ever enable third-party advertising via Google AdSense, that use is explained in the Cookies section below and is contingent on your consent where required.
Third-Party Services and Data Processors
We rely on the following processors to operate the service. Each has its own privacy policy that governs their handling of your data: (1) Google Cloud (Gemini text generation and Nano Banana image generation) — processes the ingredient list and recipe metadata you submit, in order to return recipes and food images; (2) Supabase — provides authentication, database, and file storage hosted in the United States; (3) Vercel — hosts the website and runs the serverless functions that serve every page and API request; (4) Stripe — processes Premium subscription payments and stores payment-method data on its own infrastructure; (5) Google AdSense — when and if we enable advertising, AdSense may set its own cookies for ad measurement and frequency capping (you can opt out via your account or browser controls).
Cookies and Local Storage
We use a small number of cookies and browser local-storage entries: (1) Essential cookies maintain your authenticated session and CSRF protection; these cannot be disabled while you are signed in; (2) Preference local-storage saves your selected locale, theme, and recently generated recipes for offline reading; (3) Consent cookies record your choices on the privacy banner; (4) Optional analytics or advertising cookies are only set if you accept them via the banner. You can clear local storage and cookies at any time through your browser settings, and can manage your consent on the Cookie Settings page linked from the privacy banner.
Data Retention
Account data is retained for as long as your account remains active. If you delete your account, we remove your profile, saved recipes, and recipe inputs within 30 days of the request, except where retention is required by law (for example, financial records related to Premium subscriptions are retained for the period mandated by tax authorities, typically 7 years). Anonymized and aggregated usage statistics may be retained indefinitely because they no longer identify any individual.
International Data Transfers
Our processors host data in the United States. If you access FridgeGenius from the European Economic Area, the United Kingdom, Switzerland, or another jurisdiction outside the U.S., your personal data will be transferred to and processed in the United States. For these transfers we rely on the European Commission's Standard Contractual Clauses (SCCs) and the EU-U.S. Data Privacy Framework where applicable, supplemented by encryption in transit and at rest.
Your Rights
Subject to your jurisdiction's law, you have the right to: (1) access the personal data we hold about you; (2) request correction of inaccurate data; (3) request erasure of your data (the "right to be forgotten"); (4) request portability of your data in a machine-readable format; (5) restrict or object to certain processing; (6) withdraw any consent you previously gave; (7) lodge a complaint with your local data-protection supervisory authority; (8) for California residents, the right to know, delete, correct, and opt out of any sale or sharing of personal information (we do not sell). To exercise any of these rights, email us at the address in the Contact section. We respond within 30 days and never charge a fee for first requests.
Children's Privacy
FridgeGenius is not directed to children under 13 years of age (or under 16 in jurisdictions where that is the relevant minimum age, such as parts of the European Economic Area). We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us and we will delete the data promptly upon verification.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our service, our processors, or applicable law. When we make material changes, we will update the "Last Updated" date below and, where required by law, notify you via email or an in-app banner. Your continued use of FridgeGenius after the updated policy takes effect constitutes acceptance of the changes.
Contact Us
If you have questions about this Privacy Policy or want to exercise any of your data-protection rights, please email us at support@fridgegenius.ai. For data subject access requests, please include enough information for us to verify your identity and locate your account. We will respond within 30 days.