1 Who we are

ExpiryDate ("we", "us", "our") helps you use up the food you buy, at expirydate.app and in our app. It's run by Plexo Logic Ltd, a company registered in England and Wales (Company No. 16940619), registered office 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. Plexo Logic Ltd is the data controller under UK GDPR and the Data Protection Act 2018.

2 What we collect

• Your account: when you sign in with Google or Apple, your name, email address and profile picture from them.
• Your profile: the display name and picture you choose, and a phone number if you add one.
• Your kitchen: the food you add (from a receipt, a barcode or by typing it in), with its price, dates, where it's kept, and what happened to it: used, frozen or binned.
• Receipts: when you scan a receipt, we keep what was read from it: the shop, the date, the items, their prices and the total. We don't keep the photo.
• Your preferences: dietary needs and allergies, your reminder settings and your theme.
• Your lists and plans: your shopping list, saved recipes and dinner plans.
• Your progress: XP, levels, streaks and badges.
• Your devices: if you turn on notifications, a notification address for each device (a token from Google's Firebase), so reminders can reach you.
• Premium: if you buy it, your plan, its status and dates, and the reference numbers Stripe, Google Play or the App Store give us. We never see or keep your card details.
• Fair-use records: how many receipts you've scanned and how many AI recipe batches you've used, so the free plan's limits work.

We don't use analytics, advertising or tracking tools, and we don't follow you around other websites or apps.

3 How we use it

• To run ExpiryDate: your kitchen and its dates, reminders, recipe ideas, a kitchen you share, and Premium.
• To send the reminders and dinner ideas you've turned on.
• To read your receipts and write new recipes for your kitchen, using Google's Gemini (see section 6).
• To keep ExpiryDate safe and fair, for example the free plan's limits and protecting accounts.
• To improve what the app knows about food, such as how a shop's receipt names a product or how long a food keeps. This knowledge is shared by everyone and isn't linked to you.
• To answer you when you get in touch.
• To produce anonymised, aggregated statistics (for example how much food ExpiryDate users save in a year), which we may share with partners or researchers. These can never identify you.

We never sell your personal data, and we don't share it with anyone for advertising.

4 Sharing a kitchen

You can share a kitchen with family or housemates using its invite code. Everyone in a kitchen sees each other's display name and picture, the kitchen's food, receipts, shopping list, dinner plan and money figures, and who pays for Premium. The kitchen's owner can remove people, and anyone can leave. When someone leaves or is removed, the food stays with the kitchen.

5 Our legal basis (UK GDPR)

• Contract: to provide the service you signed up for.
• Consent: for notifications and the camera. You can withdraw it at any time in Settings or on your device.
• Legitimate interests: keeping ExpiryDate secure and fair, improving it, and anonymised statistics.
• Legal obligation: payment records that the law requires, which Stripe and the app stores keep.

6 Services that help us run ExpiryDate

• Our own servers: our database and sign-in run on servers we rent from Hetzner Online in Finland (in the EU). The website's pages are served by Namecheap.
• Google Gemini: reads receipt photos and writes new recipes. For a receipt, it gets the photo. For a recipe, it gets the food in your kitchen (what it is and how long it keeps), your allergies and dietary needs. It never gets your name or email. We use Google's paid Gemini service, under which Google doesn't use what we send to improve its products; Google may keep it for a short time to prevent abuse.
• Google Firebase Cloud Messaging: delivers notifications to your devices. It receives your device's notification token and the notification's text.
• Google and Apple sign-in: we receive only what you agree to share.
• Stripe: takes payment for Premium on the website. Your card details go straight to Stripe, not to us.
• RevenueCat, Google Play and the App Store: handle Premium bought in the app. RevenueCat receives your ExpiryDate account ID (a random code) and what you bought.
• Open Food Facts: when you scan a barcode we don't know yet, we look the number up in this free product database. Only the barcode number is sent.
• DiceBear and Google Fonts: cartoon profile pictures and our fonts load from these services, which see your device's internet address, as any website does.

Some of these companies process data outside the UK and EU, mainly in the United States. They do so under safeguards that UK law recognises, such as the UK International Data Transfer Addendum and standard contractual clauses.

7 How long we keep it

• Your account, kitchen, lists and settings: for as long as you have an account.
• Receipts: what was read from them stays in your kitchen until you wipe your data or delete your account. The photo isn't kept at all.
• Fair-use records: for as long as you have an account.
• Premium: we keep your plan's details while you have an account. Stripe and the app stores keep payment records for as long as the law requires.
• Shared food knowledge and recipes in our library: these aren't linked to anyone, so they stay.

8 Deleting your account or your data

In the app or on the website

1. Open Settings.
2. On a phone, scroll down to Data Management and tap Manage my data. On a computer, choose Your data, then Wipe or delete.
3. Type DELETE and choose Delete everything & my account, or Wipe data, keep account for a fresh start.

By email

If you can't sign in, email privacy@expirydate.app from the address on your account and ask us to delete it. We'll do it within 30 days and tell you when it's done.

What happens

• Deleting your account removes your profile, preferences, progress, devices, saved recipes and fair-use records straight away. If the kitchen is just yours, its food, receipts, shopping list and dinner plans go too. If you share it, you leave, and the food you added stays with the others without your name.
• Premium on the website is cancelled straight away when you delete your account, so you won't be charged again.
• Premium bought in the app can only be cancelled by you, in Google Play or the App Store. Please cancel it there before deleting your account.
• Wiping your data keeps your account and any Premium you pay for, and gives you a fresh, empty kitchen.

9 Your rights

Under UK GDPR you can ask to see the data we hold about you, correct it, delete it, restrict or object to how we use it, and take a copy with you. You can download your kitchen from Settings (Export my data), or email privacy@expirydate.app for anything else. We'll reply within one month.

If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk. We'd like the chance to put it right first, so please get in touch with us too.

10 Cookies and storage on your device

We keep you signed in, and remember settings such as your theme, using your browser's own storage. We don't use advertising or tracking cookies. Stripe's checkout page sets its own cookies to process payments safely.

11 Children

ExpiryDate is for adults running a home. It isn't meant for children under 13, and we don't knowingly collect their data.

12 Changes to this policy

We'll update this policy when the way ExpiryDate works changes, and we'll tell you about important changes in the app or by email.

13 Contact

For anything about your privacy: privacy@expirydate.app