Who is responsible and why data is used
Fready is operated by HREBELNYK KYRYLO in Ukraine. For privacy questions or requests, contact support@getfready.app.
Depending on the data and applicable law, processing is based on providing the service or performing the agreement you request, your consent for an AI image, legitimate interests in security, diagnostics, abuse prevention and privacy-safe community rankings, or a legal obligation.
Information stored on your device
Your pantry, shopping list, meal plan, cooking history, preferences, own recipes, recipe-ratings cache and AI-consent choices are stored locally on your device. Photographs attached to your own recipes are kept in the app's local browser database. This information is not uploaded merely because you use the ordinary catalogue or recipe features.
Optional AI scanning
Fridge-photo and receipt scanning are Fready PRO features. Fready shows a separate disclosure before each purpose is first used. Only after you agree and select a photo or receipt is the complete selected image sent through Fready's scan service to Google Gemini for recognition. The Fready server forwards it in memory and does not intentionally write the image to its database or object storage.
Google processes the image and technical connection information according to Fready's production Gemini configuration and Google's applicable terms. Do not submit images containing people, payment details or other sensitive information. You can instead use manual product entry without AI or barcode lookup; neither sends a photo or receipt to Google Gemini. You can withdraw consent for future scans in the app.
To return the same result after a safe retry without another provider call, Fready stores the readable scan-response JSON, but not the image, under a one-way HMAC subscriber reference and an idempotency key. A completed response remains eligible for replay for up to 24 hours. Expiry ends replay eligibility; the physical row is deleted opportunistically during later scan-service activity rather than necessarily at the exact expiry time.
To enforce quotas, rate limits and concurrency controls, Fready stores counters keyed by one-way HMAC references derived from the RevenueCat subscriber identifier and IP address. Counter rows not updated for 45 days are cleaned up during later service activity. Concurrency leases normally release after a scan and otherwise expire after one minute; expired lease rows are removed during later service activity.
Community ratings and popular products
When you rate a recipe, Fready may store the recipe identifier, rating value, update time and a random device identifier so a later vote replaces the earlier one. An account is not required for this feature.
When you actually add a catalog product, Fready sends its identifier and the country selected in the app with the same random device identifier. This powers the country-specific ‘Frequently added’ shelf and does not use GPS or precise location. For this feature, the server stores only a one-way device hash, counts one installation at most once per product and country, and shows a product only after at least three installations contributed it. Rankings use the most recent 90 days; rows older than 180 days are removed during subsequent service activity.
When you complete a catalog recipe, Fready sends its recipe identifier, a stable completion identifier and the country selected in the app with that random device identifier. The server stores one-way hashes of the device and completion identifiers, ignores duplicate offline retries, caps one installation’s influence and shows a recipe only after at least three installations cooked it. A young country receives privacy-safe global leaders and then the built-in editorial monthly selection. Own recipes, ingredients, quantities, substitutions, ratings and exact local cooking times are not sent for this feature. Cook-event rows older than 180 days are removed during subsequent service activity.
A successful app-data reset deletes ratings, country-product contributions and monthly recipe-cook contributions linked to that identifier before removing it locally. A one-way SHA-256 hash of the random identifier and deletion time may remain to stop an in-progress request from recreating deleted data. It does not contain a recipe, rating value, country or product.
Subscriptions and service providers
Fready offers monthly and annual auto-renewing PRO subscriptions through Apple's App Store. Apple processes payment and account information. RevenueCat receives a pseudonymous App User ID, products and offerings, subscription and entitlement status, and purchase or restore information needed to unlock PRO. Fready does not require an account and does not receive your payment-card details.
Expo may process technical connection, launch and update information to deliver app updates. When production crash reporting is enabled, Sentry receives minimized crash or error type, sanitized stack frames, release and update identifiers, and limited app, operating-system and device-model facts. Fready disables session replay, screenshots and performance tracing and removes user identifiers, requests, breadcrumbs, pantry content, photographs, receipt text and raw error messages before sending.
Barcode lookup sends the barcode query and ordinary connection data to Open Food Facts; its community data can be incomplete. Cloudflare delivers and protects the public website and Fready server endpoints and may process IP addresses, request headers, security cookies and technical logs needed for delivery, abuse prevention and security.
Support messages
When you choose Report a problem, Fready prepares an email addressed to Fready Support. It may include the app version and build, platform, device model, operating-system version, app language, theme and current screen. It does not automatically include pantry contents, shopping lists, recipes, history, photographs, receipt text or app identifiers.
Nothing is sent until you review and send the message in your email app. We receive the sender address and information you choose to include, use them to respond and investigate, and keep the correspondence only as long as reasonably needed for support, security and legal obligations. Support replies are available in English, Ukrainian and Russian.
Retention, deletion and international processing
Local information remains until you edit it, remove it or reset the app. Community ratings remain until replaced or successfully deleted. Country-product and monthly recipe-cook rows become stale after 180 days and are removed during subsequent service activity; because cleanup is activity-driven, physical deletion can occur after that threshold. A successful app-data reset also deletes linked rows.
Apple, RevenueCat, Google, Expo, Sentry, Cloudflare and Open Food Facts retain and process information under their own applicable policies, service configuration and legal obligations, which may involve processing outside your country. Fready does not state a shorter provider retention period than the one that actually applies.
Your choices and rights
Subject to applicable law, you may request access, correction, deletion, restriction, objection or portability, withdraw consent for future processing, and complain to your local data-protection authority. Withdrawal does not affect processing that already occurred lawfully.
- Use the manual catalogue instead of AI scanning.
- Withdraw future AI-photo consent in Profile → Help & data.
- Export or import local app data from Profile → Help & data.
- Reset app data to remove local data and request deletion of linked community contributions.
- Send a privacy request to support@getfready.app.
Changes to this policy
We will update this page when a production processor, subscription service or material data flow changes. The date at the top identifies the current version.