Privacy Policy

FreshBoard (“we,” “our,” or “us”) operates the FreshBoard mobile application (the “App”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App. By using FreshBoard, you consent to the practices described in this policy. We are committed to protecting your privacy and ensuring that your personal information is handled responsibly and in compliance with the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

2.1 Personal Information

• Account Details: Name, email address, and password when you register.
• Profile Data: Household size, dietary preferences, allergies, and buying priorities.
• Photos: Images captured via the in-app camera for AI product analysis.

2.2 Kitchen Data

• Products: Names, brands, categories, quantities, expiry dates, and storage locations.
• Recipes: Saved recipes, custom recipes, and recipe preferences.
• Waste Logs: Food waste tracking data including quantities and reasons for disposal.
• Shopping Lists: Items you add to your shopping lists.

2.3 Device Information

• Device Data: Device type, operating system version, app version, and unique device identifiers.
• Location Data: Approximate location only when using the Nearby Stores feature (with your explicit permission).

2.4 Usage Analytics

• Usage Patterns: Features used, screens visited, and interaction patterns (collected in anonymized form).
• Error Data: Crash reports and error logs collected via Sentry (no personal data included).

We use the information we collect for the following purposes:

• Service Delivery: Provide and maintain core features including inventory tracking, meal planning, and shopping list management.
• AI Features: Power product analysis via camera, generate personalized recipe suggestions, create meal plans, and enable price comparison across stores.
• Personalization: Tailor recommendations based on your dietary preferences, household size, and usage patterns.
• Notifications: Send expiry alerts, weekly reports, and feature updates (only with your consent).
• Service Improvement: Analyze anonymized usage data to improve app performance, fix bugs, and develop new features.
• Subscription Management: Process and manage your subscription status via Google Play Billing.
• Advertising: Display relevant advertisements to free-tier users via Google AdMob.

FreshBoard leverages artificial intelligence to enhance your kitchen management experience. The following services are used to process your data:

• Groq AI: Used for product analysis (camera-based recognition), recipe generation based on your available ingredients, and meal planning suggestions. Only product names, categories, and quantities are sent to Groq — no personal identifiers.
• USDA FoodData Central: Provides nutritional data enrichment for products in your inventory. This is a public API; no personal data is transmitted.
• Open Price Engine: Enables grocery price comparison across nearby stores. Only product names are shared — no personal data is transmitted.

We integrate with the following third-party services to operate the App. Each service receives only the minimum data necessary to perform its function:

• Free-tier users may see advertisements served by Google AdMob. These ads help us sustain the free version of FreshBoard.
• Brand partnership advertisements may occasionally appear within the App, clearly labeled as sponsored content.
• Premium subscribers do not see any advertisements.
• Google AdMob may use your device's Advertising ID to serve personalized ads based on your interests and activity.
• You can opt out of personalized advertising at any time through your device settings (on Android: Settings → Google → Ads → Opt out of Ads Personalization).

We take the security of your data seriously and implement industry-standard measures to protect it:

• Infrastructure: All data is stored in Supabase, hosted on Amazon Web Services (AWS) in the US-East-1 region.
• Encryption: Data is encrypted at rest and in transit using TLS/HTTPS protocols.
• Row-Level Security: Supabase RLS policies ensure that each user can only access their own data. No user can view, modify, or delete another user's records.
• Authentication: Passwords are never stored in plaintext. We use industry-standard hashing algorithms provided by Supabase Auth.
• Monitoring: We implement rate limiting, abuse detection, and structured logging to protect against unauthorized access attempts.

Depending on your location, you may have the following rights regarding your personal data under GDPR (Articles 15–22) and CCPA:

• Right of Access: Request a copy of the personal data we hold about you. You can also export your data in JSON format directly from the App (Settings → Export Data).
• Right to Rectification: Correct any inaccurate or incomplete personal data by updating your profile in the App at any time.
• Right to Erasure: Request deletion of your personal data. You can delete your account via Settings → Delete Account, or visit our account deletion page.
• Right to Data Portability: Receive your data in a structured, commonly used, machine-readable format (JSON export).
• Right to Opt-Out: Opt out of marketing communications, push notifications, location services, and personalized advertising at any time.
• Right to Restrict Processing: Request that we limit the processing of your personal data under certain circumstances.

To exercise any of these rights, contact us at thawndev@gmail.com. We will respond to your request within 30 days.

• Active Accounts: We retain your personal data and kitchen data for as long as your account remains active and the service is in use.
• Account Deletion: When you request account deletion, all associated data — including products, shopping lists, waste logs, recipes, meal plans, nutrition data, notifications, profiles, and subscription records — is permanently deleted within 30 days.
• Anonymized Data: Waste tracking and usage analytics data may be anonymized and retained in aggregate form after account deletion for the purpose of improving the service. This anonymized data cannot be linked back to you.

FreshBoard is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected data from a child under 13, we will take steps to delete such information promptly. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at thawndev@gmail.com and we will delete it immediately.

Your data may be transferred to and processed on servers located in the United States. If you are accessing FreshBoard from outside the United States, please be aware that your data may be transferred to, stored, and processed in a country where data protection laws may differ from those in your jurisdiction. For users in the European Union, we ensure that appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, to protect your personal data during international transfers.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you via in-app notification or email at the address associated with your account. The “Effective Date” at the top of this policy indicates when the latest revision took effect. Your continued use of the App after any changes constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please don't hesitate to reach out: