1. Data controller
The data controller responsible for your personal data is Friveo (operated from Denmark).
Contact: contact@friveo.com
We have not appointed a Data Protection Officer. For privacy matters, use the email above.
2. Personal data we process
| Category | Examples | Source |
|---|---|---|
| Account data | Email, display name, authentication identifiers (Firebase, Google, Apple) | You / your identity provider |
| Profile & preferences | Allergies, dietary choices, cooking skill, household size, equipment | You (onboarding & profile) |
| Household data | Fridge ingredients, shopping list, favourites, star ratings | You & your household |
| Invite data | Emails you invite, invite tokens, inviter identity | You |
| Technical data | Device metadata, IP address, security and error logs | Automatic when you use the service |
We do not collect precise location, payment card details, advertising IDs, or health records. Allergy information is optional preference data you choose to provide.
3. Purposes and legal bases (GDPR Art. 6)
| Purpose | Legal basis |
|---|---|
| Creating and managing your account; syncing household data | Contract — necessary to provide the service (Art. 6(1)(b)) |
| Generating AI recipe suggestions from your fridge and preferences | Contract (Art. 6(1)(b)) |
| Sending household invitation emails you request | Contract / steps at your request (Art. 6(1)(b)) |
| Security, fraud prevention, and service reliability | Legitimate interests (Art. 6(1)(f)) |
| Improving features and fixing issues | Legitimate interests (Art. 6(1)(f)) |
Where we rely on legitimate interests, you may object (see Section 10). We do not use your data for automated decisions with legal or similarly significant effects (GDPR Art. 22).
4. Processors and recipients
Google Firebase
Authentication, database, cloud functions, hosting. Privacy
Groq
AI recipes — ingredient lists and preferences only, not your email. Privacy
Resend
Transactional invite emails from noreply@friveo.com. Privacy
Google / Apple
Optional sign-in methods, subject to their own terms.
Household members you invite can see shared fridge and shopping data. We do not sell personal data. We may disclose data when required by law.
5. International transfers
Some providers may process data outside the EU/EEA (including the United States). Transfers are safeguarded by adequacy decisions, Standard Contractual Clauses, and/or the EU–US Data Privacy Framework where applicable. Email contact@friveo.com for more detail.
6. Retention
- Account data: while your account is active.
- After deletion: 30-day grace period, then permanent removal. Delete account
- Pending invites: expire after 7 days.
- Server logs: up to 90 days.
- Backups: up to 30 additional days.
- Anonymised recipe cache: may be kept without personal identifiers.
7. Account deletion
Exercise your right to erasure at app.friveo.com/delete-account — sign in with Google, Apple, or email/password. Cannot access your account? Email contact@friveo.com from your registered address.
8. Security
Data is encrypted in transit (HTTPS/TLS). Household data access requires authentication and server-side security rules. No method is 100% secure; we use appropriate technical and organisational measures.
9. Cookies and local storage
Our website uses strictly necessary browser storage for sign-in and security. No advertising or analytics cookies. The mobile app does not use third-party ad tracking.
10. Your rights under GDPR
- Access — receive a copy of your data
- Rectify — correct inaccurate data in the app or by email
- Erase — delete your account
- Restrict processing in certain circumstances
- Portability — receive your data in a structured format
- Object to legitimate-interest processing
- Withdraw consent where processing is consent-based
Contact contact@friveo.com. We respond within one month. Lodge a complaint with Datatilsynet (Denmark).
11. Children
Not directed at children under 13. Intended for users aged 18 and over. Contact us if a child has provided data.
12. Providing data
Account data is required for core features. Optional fields (such as allergies) improve suggestions but are not mandatory.
13. Changes
We may update this policy. The date above will change. Material changes will be communicated in the app or by email where appropriate.