Privacy Policy

1. Information We Collect

a) Camera Access

The App requests access to the device camera only when the user chooses to scan:

• Groceries
• Grocery receipts
• Supermarket loyalty card barcodes

The camera is never used in the background.

Camera access is optional and only activated when the user chooses to scan a barcode or receipt. Images captured during scanning are processed in real time to extract product information.

For AI-powered features (such as receipt understanding or grocery recognition), images or extracted text may be temporarily transmitted to third-party AI service providers solely to perform the requested functionality.

Images and related data are not stored by the App after processing and are not used for advertising, profiling, or tracking.

b) Voice Access

The App may request access to the device microphone when the user chooses to interact with Dino, the in-app assistant, via voice. Voice input is processed in real time to understand user requests (such as adding items or asking for recipe suggestions).

Voice data may be temporarily transmitted to third-party AI service providers solely to perform the requested functionality. Voice recordings are not stored by the App after processing and are not used for advertising, profiling, or tracking. Microphone access is optional and only activated when the user explicitly initiates a voice interaction.

c) Account Information

When users create an account, we may collect:

• Email address
• Authentication data managed securely via Firebase Authentication

d) App Usage Data

We may collect limited technical and usage data such as:

• App interactions
• Crash reports
• Device type and operating system version

This data helps us improve app performance and reliability.

The App does not collect biometric data, health data, precise location data, contact lists, or other sensitive personal information.

2. How We Use Information

We use collected information to:

• Provide core app features (inventory, shopping list, receipt scanning, voice assistant)
• Improve functionality and user experience
• Fix bugs and maintain security

We do not sell personal data to third parties.

3. Legal Basis for Processing (GDPR)

We process personal data based on one or more of the following legal grounds:

• User consent (for example, when creating an account or using camera-based scanning)
• Performance of the service requested by the user
• Legitimate interest in improving app functionality, security, and reliability

4. AI and Automated Processing

The App uses artificial intelligence (AI) technologies provided by third-party service providers to enable certain features, including:

• Receipt text extraction and interpretation
• Grocery recognition from images
• Recipe suggestions based on available ingredients
• Voice-based interactions with the in-app assistant (Dino)

AI processing is performed only when explicitly initiated by the user.

The App does not use AI for automated decision-making with legal or significant effects on users, nor for advertising or user profiling.

5. Image Processing

Images used for barcode, grocery recognition, and receipt scanning:

• Are processed temporarily
• Are not stored on our servers
• Are not used for profiling or marketing
• Are automatically discarded after processing

6. Data Retention

We retain personal data only for as long as necessary to provide the service. Account data is deleted when the user deletes their account. Technical and analytics data may be retained for a limited period for security, fraud prevention, and performance monitoring purposes.

7. Third-Party Services

The App uses third-party service providers to support core functionality, including:

Google Firebase, which may process limited technical data to provide:

• Authentication
• Cloud database storage
• Analytics
• Crash reporting

Third-party AI service providers, which process images, text, or voice data solely to enable AI-powered features requested by the user (such as receipt scanning, recipe suggestions, or voice interactions).

These service providers act as data processors and are contractually required to process data only for the purposes defined by the App and in accordance with applicable data protection laws.

8. International Data Transfers

Some data may be processed on servers located outside your country of residence through our service provider Google Firebase. These transfers are protected by appropriate safeguards in accordance with applicable data protection laws.

9. Data Security

We take reasonable measures to protect user data using industry-standard security practices provided through Firebase infrastructure.

10. User Rights

Users can delete their account and associated data directly within the app, or they may submit a deletion request by contacting:

founders@foodinoapp.com

11. Children's Privacy

The App is not intended for children under 13. We do not knowingly collect personal data from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected with a new "Last updated" date.

13. Data Controller

The data controller responsible for processing personal data is:

Foodino

founders@foodinoapp.com

14. Contact

For any privacy-related questions, contact:

founders@foodinoapp.com