Privacy Policy
This policy explains what personal data Friio collects, on what legal basis, how it is used, with whom it is shared, how long it is kept and what your rights are. It applies to the Friio mobile app and to the friio.io website.
Last updated: 18 June 2026
1. Data controller
The controller of your data is the company FRIIO, a SASU with share capital of 250 €, registered with the Rouen Trade and Companies Register (RCS Rouen 105 203 152), whose registered office is located at 72 Quai Cavelier de la Salle, 76100 Rouen, France.
For any question relating to your personal data or to exercise your rights: friio.iocontact@gmail.com.
Given its size, FRIIO is not required to appoint a Data Protection Officer (DPO). The contact point above handles all requests relating to data.
2. What data we collect
2.1 Identity data (required to use the app)
- Email address
- First name and last name
- Apple ID (Sign in with Apple) or Google ID (Sign in with Google), depending on the sign-in method chosen
- Password (only for email sign-in; stored in hashed form, never in plain text)
2.2 Profile data (optional)
- Date of birth, gender
- Country, language, time zone, preferred currency
- Profile picture (if you add one)
2.3 Usage data (generated during use)
- Items added to your fridges (name, quantity, expiry date, photo, scanned barcode)
- Fridges created, shares, invited members, fridge photos
- Shopping lists
- Recipes viewed and favorited
- Answers to the onboarding questionnaire (goals, challenges, cooking level, equipment, dietary preferences, shopping days)
- Fridge customization (name, emoji, color)
2.4 Technical data
- Push notification token (to send you reminders)
- Subscription status (via RevenueCat)
- Authentication and security logs (IP address, sign-in timestamp)
Friio does not collect your GPS location, your address book, your contacts, or your browsing history. Friio does not include any advertising tool, advertising tracking or behavioral analytics (no Google Analytics, no advertising SDK, no third-party trackers). Access to your photo gallery only takes place if you voluntarily choose to add an image.
3. Purposes and legal bases
In accordance with Article 6 of the GDPR, each processing operation relies on a legal basis:
| Purpose | Legal basis |
|---|---|
| Creation and management of your account, operation of the app (fridges, items, lists, sharing) | Performance of the contract (Terms) |
| Management of premium subscriptions and verification of your status | Performance of the contract |
| Expiry notifications and shopping reminders | Performance of the contract / your consent (notification permission) |
| Personalization (recipes and suggestions tailored to your preferences) | Performance of the contract / legitimate interest |
| Security, fraud and misuse prevention | Legitimate interest |
| Compliance with our legal obligations (accounting, tax) | Legal obligation |
Friio does not sell your data and does not use it for advertising purposes.
4. Recipients and processors
Friio relies on technical processors to provide the service. Each one only accesses data to the extent necessary for its task, under a data processing agreement (DPA):
| Processor | Role | Location |
|---|---|---|
| Supabase, Inc. | Database, authentication, file storage | United States |
| RevenueCat, Inc. | Subscription management | United States |
| Expo (Expo Application Services) | Push notifications | United States |
| Google (Firebase Cloud Messaging) | Push notification delivery | United States |
| Apple / Google | Authentication (Sign in with Apple / Google) and subscription billing | United States |
| Open Food Facts | Information about scanned products (open data database) | EU / Open data |
| Vercel, Inc. | Hosting of the friio.io website | United States |
5. Transfers outside the European Union
Since some processors are established in the United States, your data may be hosted and processed there. These transfers are framed by appropriate safeguards within the meaning of Articles 44 et seq. of the GDPR: Standard Contractual Clauses (SCCs) of the European Commission and, where applicable, certification under the Data Privacy Framework EU-US. You can obtain a copy of the applicable safeguards by writing to us.
6. Retention periods
- Active account: as long as your account exists
- After account deletion: immediate deletion or anonymization of personal data (see Delete my account)
- Technical logs and backups: 30 days maximum
- Billing data: kept in accordance with legal accounting and tax obligations (up to 10 years)
7. Your rights (GDPR)
In accordance with the GDPR, you have the following rights:
- Access: obtain a copy of the data concerning you
- Rectification: correct inaccurate data
- Erasure: delete your account and your data (details here)
- Portability: retrieve your data in a structured format
- Objection and restriction: object to or restrict certain processing
- Withdrawal of consent at any time, where the processing relies on it (e.g. notifications)
To exercise these rights: friio.iocontact@gmail.com. We respond within a maximum period of one month. You also have the right to lodge a complaint with the French data protection authority (CNIL): cnil.fr.
8. Security
All communications between the app and our servers are encrypted (HTTPS / TLS). Passwords are never stored in plain text (hashing). Access to the database is restricted by Row Level Security policies ensuring that each user only accesses their own data.
9. Cookies and trackers
The Friio app does not use advertising cookies or third-party trackers. The friio.io website is a static site that does not place audience measurement cookies or advertising cookies; only elements strictly necessary for its display may be used.
10. Minors
Friio is not intended for people under 15 years of age. If you are under 15, use of the service requires the authorization of the holder of parental authority. If you are a parent and find that a minor has created an account without authorization, contact us to delete it.
11. Changes
We may update this policy. The "last updated" date at the top of the page reflects the most recent change. Significant changes will be notified to you in the app.
12. Contact
For any question: friio.iocontact@gmail.com