Who we are
Frigomi (the iPhone app and the website frigo-app.org) is published by Antoine Vaessen. We are the data controller for the personal data described in this policy.
Questions about your data, or want to use your rights? Email antoinevaessen@icloud.com. A human reads every message.
This policy explains what we collect, why, who helps us, how long we keep it and what you can do about it. It applies to the Frigomi app and to this website. The words "we", "us" and "Frigomi" mean the publisher above; "you" means you.
What we collect
When you use the app
- Account. You create an account with Sign in with Apple or with your email address (we send you a one-time code). We store that email address, or the identifier Apple gives us (which can be a private relay address). You can add a first name (optional).
- Taste profile. The answers you give in the quiz and in Settings: how many people you cook for, whether kids are at the table, your diet (for example vegetarian or halal), allergies, foods you dislike, cooking level, time on weeknights, kitchen equipment, favourite cuisines, pantry basics, units, currency, time zone and your notification preference.
- People you cook for (Frigomi Plus). The first name, allergies and dislikes of people you add, which you confirm they agree to. Their allergies are kept out of every recipe.
- Fridge photos and scans. The photos you take or pick to scan your fridge, freezer or pantry, and what Frigomi finds in them (ingredients, rough quantities, freshness estimates).
- Your kitchen. Your fridge list, shopping list, saved recipes and collections, the recipes Frigomi writes for you, what you cook, your ratings, the plate photos you choose to add, servings, ingredients rescued and money saved (estimates), the questions you ask Ask Frigomi and its answers, and the recipe problems you report.
- Subscription. Whether you have Frigomi Plus, which plan, and when it renews or ends. Payments are handled by Apple: we never see your card details.
- Service records. Which AI feature you used, when, how many AI tokens it needed and what it cost us, to keep the service affordable, apply the free and fair-use limits and stop abuse. For the free allowance, we also keep a keyed one-way fingerprint of your email address with the number of free scans and free rolls of freshly invented ideas it has used (see section 7).
- Technical data. Like any online service, our servers process your IP address, device and system type, app version and timestamps, in logs used for security and to fix bugs.
Cooking timers and reminders are local notifications scheduled on your phone. We don't collect a push token. We don't use advertising identifiers and we don't track you across other apps or websites.
When you visit this website
- Newsletter. If you subscribe: your email address, the date and time you subscribed and confirmed, the wording you agreed to and where you signed up. To stop the form being used to email people who didn't ask, we also keep a keyed one-way fingerprint of the IP address each sign-up came from, for 48 hours.
- Audience measurement. We use Vercel Web Analytics to count visits. It sets no cookies and only gives us aggregated figures (pages viewed, countries, device types). It can't identify you.
- Emails you send us. Your address and whatever you write.
The website does not use cookies, advertising pixels or social media trackers, and our fonts are served from our own domain.
Why we use it, and on what legal basis
| What we do | Data used | Legal basis (GDPR) |
|---|---|---|
| Run the app: scans, recipes, your fridge, cookbook, cook mode, stats, badges | Account, taste profile, scans, your kitchen | Performance of our contract with you (art. 6(1)(b)) |
| Send your data to our AI provider to read your photos and write recipes, swaps and answers | Fridge photos, fridge list, allergies, diet, dislikes, the questions you ask | Your consent, asked in the app before the first AI feature you use (art. 6(1)(a); for allergies and diet, art. 9(2)(a)) |
| Keep your allergies and diet, and those of the people you cook for, out of every recipe, swap and answer | Allergies and diet, which may reveal information about your health or your religious beliefs | Your explicit consent, given with a checkbox when you enter them (art. 9(2)(a)); for people you add, you confirm they agree |
| Manage Frigomi Plus | Subscription status | Performance of our contract (art. 6(1)(b)) |
| Keep Frigomi secure, prevent abuse and fix bugs | Technical data, logs, newsletter sign-up IP fingerprints | Our legitimate interest in a safe, working service (art. 6(1)(f)) |
| Keep AI costs in check and apply usage limits, including one free allowance per person | Service records, email fingerprint | Our legitimate interest in an affordable, fair service (art. 6(1)(f)) |
| Make recipes and answers better and safer | Ratings, reports on recipes and Ask Frigomi answers (a daily summary is emailed to us) | Our legitimate interest in improving Frigomi (art. 6(1)(f)) |
| Send the newsletter | Email address, consent record | Your consent (art. 6(1)(a)) |
| Measure website audience | Aggregated, cookieless statistics | Our legitimate interest in understanding what works (art. 6(1)(f)) |
| Answer your messages | Email address, your message | Our legitimate interest in helping you (art. 6(1)(f)) |
You can withdraw your consent at any time, without affecting what was done before: turn off Frigomi's AI in Me › Settings › Privacy & data, delete your photos, remove your allergies and diet in Me › Diet & allergies, or unsubscribe from the newsletter with the link in every email.
How Frigomi uses AI
Frigomi uses the OpenAI API to read your fridge photos and to write recipes, swaps and Ask Frigomi answers. Everything Frigomi suggests is generated by AI.
- What we send: the photo(s) of your scan, your fridge list, the cooking preferences needed for the answer (including allergies, diet and dislikes, so recipes respect them), the questions you ask Ask Frigomi, and a pseudonymous identifier (a one-way hash of your account ID) that OpenAI uses to detect abuse. We don't send your name or email address.
- What OpenAI does with it: under OpenAI's API terms, data sent through the API is not used to train their models. We ask OpenAI not to store the responses. OpenAI may keep API data for up to 30 days to monitor abuse, then deletes it.
- Only after you agree: nothing is sent to OpenAI before you accept the in-app notice that lists all of the above, shown before the first AI feature you use. You can turn Frigomi's AI off at any time in Me › Settings › Privacy & data (scans, new ideas and Ask Frigomi then stop).
- Pictures of the dishes AI invents: when the AI writes a brand-new recipe for you, we ask Higgsfield to draw a picture of that dish. All they receive is a sentence describing the dish — its title and up to four of its ingredients. None of your photos, your fridge list, your allergies or anything that identifies you is sent, and the picture is of food only.
- No decisions about you: Frigomi's AI suggests recipes. It doesn't make decisions that have legal or similarly significant effects on you.
AI can make mistakes, including about allergens. Always check product labels. See our Terms of Use.
Who helps us
We don't sell or rent your personal data. We share it only with the service providers that run Frigomi for us, under contracts that require them to protect it and use it only on our instructions:
| Provider | What they do for us | Where |
|---|---|---|
| Supabase | Database, sign-in, photo storage and server functions | EU region (Paris, France) |
| OpenAI | AI analysis of photos, recipes and answers | United States |
| Higgsfield | Drawing a picture of a dish the AI invented, from its title and ingredients | United States |
| RevenueCat | Managing Frigomi Plus subscriptions | United States |
| Vercel | Hosting this website and its cookieless statistics | Global, EU and United States |
| Resend | Sending sign-in codes, newsletter and confirmation emails, and the daily summary of reports we receive | United States |
Apple processes your data as an independent controller when you use Sign in with Apple or buy Frigomi Plus through the App Store, under Apple's own privacy policy.
We may also disclose data if the law requires it, to protect our rights or the safety of others, or to a successor if Frigomi is ever sold (in which case this policy will keep applying to your data).
Transfers outside the European Union
Some providers are based in, or process data in, the United States. When that happens, the transfer is protected by the European Commission's Standard Contractual Clauses and, where the provider is certified, by the EU–US Data Privacy Framework. You can ask us for a copy of these safeguards.
How long we keep it
- Your account and everything in it: until you delete your account.
- Fridge photos: deleted as soon as you save the scan, and in any case within a day (a scan you closed without saving, or one that didn't work). You can also delete them any time in Me › Settings › Privacy & data. Your fridge list stays.
- Plate photos: until you remove them or delete your account.
- Technical logs: a few days to a few weeks, as set by our hosting provider.
- Service records: the record of AI features you used, 60 days, except the free scans and free rolls of ideas you used, kept for as long as your account exists so the free allowance stays counted.
- Newsletter: until you unsubscribe. After that we keep only what's needed to prove your consent and respect your choice. A sign-up that's never confirmed is deleted after 30 days; the IP fingerprints after 48 hours.
- Emails you send us: up to two years after our last exchange.
When you delete your account, we delete your photos and your data immediately, including your customer record at RevenueCat. We keep only two things, neither of which identifies you: the service record of AI features used, with no link to you anymore, so our costs still add up; and the keyed fingerprint of your email address with the number of free scans and free rolls of ideas used, so the free allowance can't be claimed again by creating a new account. That fingerprint can't be turned back into your address. Copies in our providers' encrypted backups are overwritten within 30 days, and OpenAI may keep API data for up to 30 days (see section 4).
Your rights
You have the right to:
- access your data and get a copy of it,
- correct it if it's wrong,
- delete it,
- restrict or object to how we use it,
- take it with you in a portable format,
- withdraw your consent at any time.
Most of this you can do yourself in the app: edit your profile in Me, export your data in Me › Settings › Privacy & data › Export my data, and delete your account in Me › Settings › Delete account. For anything else, email antoinevaessen@icloud.com. We answer within one month. We may ask you to confirm it's really you.
If you think we've got something wrong, please tell us first. You can also complain to the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit), Rue de la Presse 35, 1000 Brussels, dataprotectionauthority.be, or to the authority in the EU country where you live.
Children
Frigomi is not meant for children under 13, and we don't knowingly collect their data. If you're a parent and think your child has given us personal data, email us and we'll delete it. When you set up your household, we only ask whether kids are at the table, never anything about them.
How we protect your data
Everything travels over encrypted connections (HTTPS). Each account can only reach its own data, enforced by the database itself. Photos live in private storage that only you can access. Our secret keys, including the AI provider's, stay on our servers and are never built into the app. No system is perfectly secure, but we take this seriously and will tell you and the authorities if a breach puts your data at risk.
Changes to this policy
If we change this policy, we'll update the date at the top. If the change is important, we'll tell you in the app or by email before it applies.
Contact
Antoine Vaessen. Email: antoinevaessen@icloud.com.