Privacy Policy

Effective March 29, 2026

Fridge Regrets is a grocery list app for Android, built and operated by a solo developer. This policy explains what data the app and website collect, how it’s used, and how you can control it.

Data I collect

Account information

When you sign in with Google, I receive your name, email address, and profile photo URL from your Google account. Your email is stored on the server but is never shown to other users or stored on your device. Your name and profile photo are visible to members of your household.

Content you create

Grocery lists, items, categories, stores, and action history are stored on your device and synced to the server when you sign in. If you share a household, this content is visible to all household members.

Analytics

I use Firebase Analytics to understand how the app is used. This includes usage events (items added, lists created, features used), performance metrics (load times, latency), and device properties (app version, device tier, OS version). Analytics data does not include the content of your grocery items or personal information.

Crash reports

Firebase Crashlytics collects crash reports in release builds. These include stack traces, device model, OS version, and app state at the time of the crash. No personal information is included in crash reports.

Push notifications

If you enable push notifications, a device token from Firebase Cloud Messaging is stored on the server and associated with your account. Notification content may include your first name and the names of grocery items or lists. You can disable notifications in the app settings.

Website waitlist

If you sign up for the waitlist on this website, I collect your email address, IP address, user agent, and referrer URL. Cloudflare Turnstile is used for bot detection. Your email is used only to notify you when the app launches.

Data I don’t collect

The app does not access your location, contacts, camera, microphone, photos, or any other sensitive device data. The only permissions requested are internet access, network state (for offline detection), and notifications (optional).

How I use your data

• Sync and sharing — your grocery data is synced across devices and shared with your household members.
• Push notifications — to notify you of changes made by household members.
• Analytics and crash reports — to fix bugs and improve the app.
• Authentication — to identify your account and associate it with your household.

Household sharing

When you join a household, all grocery lists, items, categories, stores, and action history are shared with every member. Other members can see your name and profile photo but not your email address. If you leave a household, you lose access to its shared data and a new personal household is created for you.

Third-party services

The app uses the following third-party services:

• Google Sign-In — authentication. Subject to Google’s Privacy Policy.
• Firebase Analytics and Crashlytics — usage analytics and crash reporting. Subject to Firebase’s Privacy Policy.
• Firebase Cloud Messaging — push notifications.
• Cloudflare — hosting, API infrastructure, and security. Subject to Cloudflare’s Privacy Policy.

Your data is never sold, rented, or shared with third parties for advertising or marketing purposes.

Data security

Authentication tokens are stored in encrypted storage on your device. All communication with the server uses HTTPS. The app does not back up data to Android cloud backup. Server data is stored in Cloudflare’s infrastructure with access restricted to authenticated requests.

Data retention

• Account and grocery data — retained until you delete your account.
• Push notification tokens — automatically removed when you sign out, leave a household, or when a token becomes invalid.
• Waitlist email — deleted after launch notification is sent. You can request earlier removal at any time.
• IP addresses — used only for real-time rate limiting and not persisted to any database.

Deleting your data

You can delete your account and all associated data from within the app under Settings. Account deletion removes your profile, grocery data, action history, and push notification tokens from the server. If you were the sole member of a household, all household data is also deleted.

You can also request deletion by emailing [email protected].

Children’s privacy

Fridge Regrets is not directed at children under 13. I do not knowingly collect personal information from children. If you believe a child has provided personal information, please contact me so I can remove it.

Changes to this policy

I may update this policy from time to time. Changes will be posted on this page with an updated effective date.

Contact

Questions about this policy? Email [email protected].