Privacy Policy

This policy covers the official instance of Garde-manger. The data controller is the service publisher, identified in the legal notice (French): Florian Leroux, Rouen, France.

It does not cover self-hosted instances: see “Self-hosted instances” below.

When you create an account

• Email address, name and optional profile picture;
• Password (stored in a non-readable form) or the identifier of the social login used;
• Household membership, role and invitation code.

When you use the service

• Pantry products (names, quantities, expiry dates, prices), shopping lists and recipes;
• Scanned receipts: store, date, amount, number of items and, where applicable, the receipt image;
• Fridge or receipt photos submitted for AI analysis;
• Barcodes scanned to identify a product;
• Household AI usage (number of uses);
• If you connect a Home Assistant server: its address and the access token you provide;
• Your device notification token, if you enable expiry reminders;
• Technical connection and diagnostic data (IP address, logs, app and operating system versions, mobile app performance and errors, session identifier).

For billing

• Household subscription status and reference, provided by the payment provider.
• The publisher does not store any payment card data.

• Providing the service (account, shared household, inventory, scanning, recipes): performance of a contract.
• Managing subscriptions and billing: performance of a contract and legal obligations.
• Securing the service and preventing abuse: legitimate interest.

Account and household data

Until account deletion, then no more than 30 days

Receipt images

Until they or the account are deleted

Billing data

10 years (accounting obligation)

Technical logs

No more than 12 months

Mobile app diagnostics (performance, errors)

No more than 30 days

Data is accessible to the publisher and, within your household, to other members for the shared pantry. It may be processed by the following providers:

Hosting

The instance is hosted in Rouen, France, on the publisher’s infrastructure: no third-party hosting provider is involved.

Payment provider

Subscriptions are processed by Stripe, which receives household and user identifiers to associate the subscription, as well as the email address and payment details entered on its secure page. The publisher neither receives nor stores any payment card data.

AI provider

AI features (reading receipt and fridge photos, generating recipes) currently use Google’s Gemini API. Photos and text submitted to AI are sent to it for processing; this provider may be located outside the European Union. This choice may change (a local Ollama model on the publisher’s infrastructure, or another provider): the current provider is the one indicated here.

Notifications

Expiry reminders pass through Expo’s notification service (exp.host), which forwards them to Apple (APNs) or Google (FCM) depending on your device. The notification token and reminder content (for example, a product name) pass through this service.

Open Food Facts

When you scan a barcode, it is sent to the collaborative Open Food Facts database to identify the product.

Sign-in

Social sign-in uses Google and PocketID, which receive the information needed for authentication. You can also sign in with a passkey, which does not transmit any biometric data to the service.

The publisher does not itself transfer data outside the European Union. The currently configured AI provider (Gemini, Google) and the notification service (Expo) may do so as part of their own processing. Sign-in and payment providers are also governed by their own privacy policies.

You have the following rights regarding your personal data:

• Access, rectification and erasure;
• Restriction of and objection to processing;
• Portability of the data you provided;
• Withdrawal of consent where processing is based on consent;
• Instructions on what happens to your data after your death.

You may also lodge a complaint with the CNIL (cnil.fr).

To exercise your rights or ask a question about your data, email garde-manger@floriaaan.fr (no data protection officer has been appointed). You will receive a response within the one-month period provided for by the GDPR. Proof of identity may be requested if there is doubt about your identity.

To delete your account, see also the account deletion page (French).

The service is intended for people aged 15 and over. Below that age, a parent’s or guardian’s consent is required.

This website’s code does not set cookies or include audience measurement or advertising tools. To display homepage statistics, your browser queries the official instance and GitHub’s public API: these services receive your IP address as with any web request.

The service does not use advertising or audience measurement cookies or trackers. Signing in sets a session cookie (website) or an equivalent token stored in the device keychain (mobile app): it is strictly necessary to stay signed in and is not used for other purposes.

The software source code is public: view the repository. To learn how your data is processed on a third-party instance, contact its administrator.