Privacy Policy

1. Who we are

FridgeFirst (“we”, “us”) is an AI-powered meal planning service operated at www.fridgefirstrecipe.com. You can reach us at hello@fridgefirstrecipe.com.

2. What we collect

• Account info: name, email, password hash, profile picture (if provided).
• Family & health profile: household members, dietary preferences, allergies, health conditions you voluntarily enter to personalise recipes.
• Content you create: saved recipes, meal plans, grocery lists, photos of meals or fridge contents you upload.
• Usage data: pages visited, features used, approximate device type, and crash logs — used to keep the app working.
• Billing data: handled by Stripe. We never see or store your card number.

3. How we use it

• Generate personalised recipes and meal plans for you.
• Send transactional emails (verification, receipts, trial reminders).
• Improve features and fix bugs based on aggregated usage.
• Comply with legal obligations and prevent abuse.

We do not sell your personal data, and we do not use it to train third-party advertising models.

4. Service providers we share data with

We share the minimum data necessary with vetted vendors who process it on our behalf:

• Supabase — authentication, database, file storage.
• Vercel — application hosting and CDN.
• Anthropic (Claude)— AI recipe and meal-plan generation. Prompts may include your dietary preferences and fridge contents but are not used to train Anthropic's models under our enterprise terms.
• Stripe — subscription billing.
• Resend — transactional email delivery.
• Google— only when you choose “Sign in with Google”, Google receives the standard OAuth login request and returns your name, email, and profile picture.

5. Photos and AI processing

Photos you take of your fridge or finished meals are stored in your private Supabase storage bucket and sent to our AI provider only for the request you made (e.g. “what can I cook with this?”). They are never published, shared with other users, or used for advertising.

6. Cookies

We use a small number of essential cookies for authentication (Supabase session) and to remember your preferences. We do not use third-party advertising cookies.

7. Data retention

We keep your account data for as long as your account is active. When you delete your account from Settings, we erase your personal data within 30 days, except where we are required to retain it (for example, billing records for tax purposes).

8. Your rights

Depending on where you live (GDPR, UK GDPR, CCPA, etc.) you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. Email hello@fridgefirstrecipe.com and we will respond within 30 days.

9. Children

FridgeFirst is not directed to children under 13. If you believe a child has created an account, please contact us and we will remove it.

10. Security

All traffic is served over HTTPS. Passwords are hashed by Supabase. Database rows are protected by row-level security so users can only access their own data. We follow industry best practices but no online service can guarantee absolute security.

11. International transfers

Our service providers are based in the United States and the European Union. By using FridgeFirst you consent to your data being processed in those jurisdictions, under the data protection terms in our agreements with each provider.

12. Changes to this policy

We may update this policy from time to time. Material changes will be announced by email or in-app at least 7 days before they take effect. The “Last updated” date at the top of this page always reflects the current version.

13. Contact

Questions about this policy? Email hello@fridgefirstrecipe.com.