Privacy policy

Who is responsible for your data

FoodyStock is an independent project based in Belgium. It is the controller of the data described here.

For any question about your data: contact@foodystock.com.

On this website

The website sets no tracking cookies and uses no analytics or advertising tools.

It only keeps your theme choice (light or dark) in your browser. This is never sent to us.

The website is served by Netlify, Inc. Like any host, Netlify technically processes visitors’ IP addresses to deliver pages and protect the service. This may happen outside the European Union, under the safeguards provided by the GDPR (standard contractual clauses).

On the testers’ page, your browser also contacts our server (Supabase, in the European Union) to check your personal link; like any web server, it receives your IP address.

In the app

To work, the app processes:

• your account: email address and sign-in credentials;
• your profile: first name and, if you choose one, a profile picture, both visible to the members of your households;
• your stock: products, quantities, dates, storage places and, if you set one, a product’s minimum stock;
• your household’s shopping list: items, quantities, origin (added by a member, running low…), who added or ticked them, and who is shopping right now; all of it is visible to the household’s members;
• a copy of your stock and of the shopping list on your phone, so the app works offline; it is erased when you sign out;
• if you choose to, the product names you suggest to other households;
• your household: the members you invite and shared activity (product added, finished, thrown out);
• your household’s recipes: name, ingredients, amounts, steps and times, written by its members and visible to them only;
• if you turn on calorie tracking: your calorie goal, your measures if you ask for it to be computed, and your food diary (see “Health data and food diary”);
• your preferences: daily reminder time, language, household shopping notifications;
• if you turn on shopping notifications: a notification token (Expo) for each of your phones;
• how you use the app: date it was last opened and days of use;
• if you accept it (audience measurement): type of device (iPhone, Android) and app and system versions.

Why, and on what basis

This data is used only to provide the service you ask for: keeping your stock and the shopping list, sharing them with your household and sending the reminders and notifications you chose. The legal basis is the performance of a contract (Article 6(1)(b) GDPR).

Some technical data (error logs, sign-in security, dates of app use) is processed on the basis of our legitimate interest in keeping the service reliable and safe and in helping users (Article 6(1)(f)).

The device type and versions are only read on your phone and sent with your consent (Article 6(1)(a) GDPR and the rules on access to device information). The app asks you once; you can change your mind at any time in Settings, Audience measurement. Refusing erases the information already recorded.

Your data is never sold, rented or used for advertising.

Health data and food diary

Calorie tracking is optional. If you turn it on, FoodyStock processes data concerning your health: your daily calorie goal; if you ask for it to be computed, your age (recorded as a year of birth), sex, height, weight and activity level; and your food diary: what you ate, the day, the meal, the amount and the estimated calories.

The legal basis is your explicit consent (Article 9(2)(a) GDPR, with Article 6(1)(a)). Each person is asked, for their own account, before anything is recorded: one household member’s consent does not count for the others. Without consent, nothing is recorded.

This data is yours alone. The other members of your households do not see it, and do not even know whether you turned tracking on. The FoodyStock team cannot access it from its support tools. It is never sold, shared or used for advertising or profiling, and it is not kept on your phone: the app reads it from our server when it shows it.

When you log a food “from my stock” or say “I cooked it” for a recipe, the amount leaves the household’s stock like any other consumption: members see that the product was eaten, never your diary or your calories.

You can withdraw your consent at any time in Settings, Health data. Your goal, your measures and your whole diary are then erased immediately and for good. They are also erased with your account. While tracking stays on, the diary is kept; the app shows its last 7 days (more with the upcoming FoodyStock Plus), and you can delete each entry.

FoodyStock is not a medical device. The calories and the goal (Mifflin-St Jeor equation, for adults) are estimates and do not replace the advice of a doctor or a dietitian.

Household recipes

The members of a household can write their own recipes. A household recipe (name, ingredients, amounts, steps, times) is visible to the members of that household only: neither other households nor the FoodyStock team see it, and it is not moderated. It has no picture and, like names, it cannot contain a link or an email address.

We keep which member wrote it. A recipe is erased when a member deletes it or when the household is deleted; if its author deletes their account, it stays with the household without their name. The legal basis is the performance of a contract (Article 6(1)(b) GDPR).

The recipes of the FoodyStock catalogue are written by our team and contain no data about you.

Open Food Facts

When you scan a product FoodyStock does not know yet, our server asks Open Food Facts for its name, brand, size, category and nutrition facts. Only the barcode is sent, from our server: neither your IP address nor any account data goes with this request. The answer is kept for all users, with no link to the person who scanned it.

The camera image stays on your phone: only the code it reads is used. Fresh-counter codes (weighed in store) are never sent to Open Food Facts.

The nutrition facts of common foods (fruit, vegetables, eggs…) come from the Ciqual table: Anses. Table de composition nutritionnelle des aliments Ciqual (Etalab Open Licence 2.0). The table is built into FoodyStock: no data about you is sent to Anses.

Names shared between households

When Open Food Facts does not know a product, you can suggest the name you give it to the other households who scan it. The “Suggest this name to other households” switch can be turned off each time. Only the barcode and this name are shared: other households see neither who suggested it, nor your household, nor your stock.

We keep the link between a suggestion and your account to limit abuse (at most 50 suggestions a day) and to moderate: a name reported by several households is removed, and our team can remove an inappropriate name without seeing who suggested it. Your suggestions are erased with your account.

The legal basis is our legitimate interest in helping households recognise their products and keeping these names reliable (Article 6(1)(f) GDPR).

Household shopping notifications

These notifications are off by default. If you turn on “Tell me about the household shopping” in Settings, the app asks for your phone’s permission, then saves an Expo notification token specific to that phone. Our server uses it to tell you when another member of your household adds items to the list or finishes the shopping. This processing happens at your request, to provide the service you chose (Article 6(1)(b) GDPR).

The content of the notification (household name, the member’s first name, names of the items added or number of items bought) and the token are sent to Expo’s notification service (650 Industries, Inc., United States), which hands them to Google Firebase Cloud Messaging on Android or to Apple’s notification service on iPhone, to show them on your phone. These transfers outside the European Union are covered by the safeguards provided by the GDPR (standard contractual clauses).

To stop them, turn the switch off in Settings, Household shopping (this applies to all your phones), or refuse FoodyStock’s notifications in your phone’s settings. A phone’s token is erased when you turn these notifications off or sign out, when the app is uninstalled (as soon as Expo tells us), after 60 days without the app being opened, and with your account. Notifications waiting to be sent are erased at the latest 7 days after they were created.

Protection against bots (Cloudflare Turnstile)

When you sign up, sign in or ask for a code, the app uses Cloudflare Turnstile to check that the request comes from a person and not from an automated program. The check is invisible: you are never asked to solve a test.

To do this, Cloudflare, Inc. processes technical signals from your device (IP address, secure connection fingerprint, browser or device type), only to tell people from bots. This data is not used for advertising or tracking. It may be processed outside the European Union, under the safeguards provided by the GDPR (standard contractual clauses). The legal basis is our legitimate interest in protecting the service against abuse (article 6.1.f of the GDPR).

This processing is described in the Turnstile Privacy Addendum: https://www.cloudflare.com/turnstile-privacy-policy/

Testers of the Android version

If the team invites you to test the app, it records your name, email address and language to send you a personal link. The link itself is not kept, only a fingerprint used to check it. Each download is noted (date and version) to limit the downloads per link.

This data is only used to give you access to the test version, at your request (article 6.1.b GDPR). It is erased 90 days after the link expired or was revoked.

The app file is hosted on GitHub (GitHub, Inc., United States, standard contractual clauses): downloading it sends your IP address to GitHub. The download link GitHub provides is only valid for a few minutes.

Where data is kept, and by whom

App data is hosted in the European Union (Frankfurt). Our processors, bound by GDPR-compliant agreements, are:

• Supabase, Inc.: database, accounts and server functions, hosted in the European Union;
• Brevo (Sendinblue SAS, France): sending emails (codes, invitations, security alerts);
• Netlify, Inc.: hosting of the website (outside the EU, standard contractual clauses);
• Cloudflare, Inc.: protection against bots, see above (outside the EU, standard contractual clauses);
• Expo (650 Industries, Inc.): sending shopping notifications, only if you turn them on (outside the EU, standard contractual clauses);
• Google (Firebase Cloud Messaging) and Apple (Apple Push Notification service): delivering these notifications to your phone, only if you turn them on;
• Google (Google Ireland Ltd): only if you choose “Continue with Google”;
• GitHub, Inc.: only for testers, see above.

Leaked passwords

When you choose a password, the app checks that it does not appear in known data leaks, with the Have I Been Pwned service. Your password never leaves your phone: only the first 5 characters of its fingerprint (SHA-1) are sent, which reveals neither the password nor who you are.

How long

Data is kept as long as your account exists. When you delete your account from the app, it is erased along with everything in it. Technical backup copies then expire through their normal rotation.

Days of app use are erased after 400 days. Notices about your households (for example “you were removed from a household”) are erased 180 days after they were shown. Shopping list items that were bought or removed are erased after 30 days. Health data and the food diary are erased as soon as you withdraw your consent. The log of the team’s actions on an account (a suspension, for example) is kept for the security of the service, without the content of your stock and with a masked email address once the account is deleted.

Your rights

You can access, correct, export or erase your data, restrict its processing or object to it at any time. Most of this can be done directly in the app; for the rest, write to contact@foodystock.com.

If you believe your rights are not respected, you can lodge a complaint with the Belgian Data Protection Authority (www.dataprotectionauthority.be).

Children

The app is not intended for children under 13. A younger child can only be part of a household through an adult’s account.

Computing the calorie goal is for adults only (18 and over).

Security

Connections are encrypted (HTTPS) and access to data is limited to what is strictly necessary. If a data breach put you at risk, you would be informed within the time limits set by the GDPR.

Only a few members of the FoodyStock team, protected by two-step verification, can look at accounts and households, for support and security. They never see the content of your stock, your household’s recipes or your health data, and each of their actions is recorded.

Changes

This policy will evolve with the app. The date of the last update is shown at the top of the page; for any significant change, you will be notified in the app.