Privacy Policy

Last updated: October 7, 2026

Dhruv Harvy Software LLC ("we," "us," or "our") operates the Spoilr mobile application (the "App"). This Privacy Policy explains what information we collect, how we use it, and the choices you have. It applies to all users of the App, wherever you are located.

1. Information We Collect

Account Information

When you register for Spoilr, we collect:

  • First and last name
  • Email address
  • Password (stored as a one-way hash, never stored in plain text)

We do not currently collect your phone number.

Pantry and Usage Data

To provide the App's core functionality, we collect information you enter or generate while using it, including:

  • Grocery item names, barcodes, quantities, units, storage locations, and expiration dates
  • Records of items marked as used or wasted
  • Aggregate statistics derived from the above (e.g., your personal waste-free rate)

Product Data

When you look up an uncached barcode, the barcode number is sent by our backend to the OpenFoodFacts open database to retrieve public product information (name, brand, image). This lookup does not include your name, email, or any other information that identifies you. OpenFoodFacts' own privacy practices govern that lookup; see their privacy policy for details.

Device and Technical Information

We automatically collect limited technical information necessary for the App to function, including:

  • Authentication tokens stored in secure device storage (or browser session storage when using the web version)
  • Your device time zone, used to calculate dates consistently
  • Request metadata, such as IP addresses and error logs, used for security, rate limiting, and troubleshooting by our backend and hosting providers

Camera access is used only to read barcodes. The App does not upload or store camera images. If you enable expiration reminders on a device, we collect its Expo push notification token, platform, and a device-specific notification revocation credential. We store reminder preferences such as your chosen intervals, time, and time zone. We do not use an analytics SDK.

Information We Do Not Collect

We do not currently collect your precise location, contacts, photos (other than product images retrieved from OpenFoodFacts), phone number, or browsing activity outside the App. We do not currently use third-party analytics or crash-reporting tools that track you across sessions or apps.

2. How We Use Your Information

We use the information collected to:

  • Create and maintain your account
  • Provide core App functionality (pantry tracking, upcoming-date displays, waste statistics)
  • Authenticate you and keep your account secure
  • Respond to support requests
  • Improve and maintain the App

Shared households

Joining a household lets its members see and edit the shared inventory, storage locations, and pantry statistics. Members see names and household roles; account emails and passwords are not shared. Bringing your personal items into a household makes them visible to members. Leaving or being removed ends your access while shared records stay with the household. Invitations are single-use and expire.

3. How We Share Information

We do not sell your identifiable personal information. We share it only as described below.

We may share information only in the following circumstances:

  • Service providers: with infrastructure providers who host and run the App on our behalf, including Render (application hosting) and Neon (database hosting). Their applicable terms, data-processing agreements, and privacy policies govern their processing.
  • Legal requirements: if required to do so by law, subpoena, or other legal process.
  • Notification delivery: if enabled, Expo and Apple/Google receive the device token and reminder payload needed to deliver your alerts.
  • Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this Privacy Policy continuing to apply to your information.
  • De-identified and aggregated data: We may share or sell de-identified and aggregated data — information that has been stripped of personal identifiers and cannot reasonably be used to re-identify you — with third parties, including for commercial purposes such as food-waste trend analysis. For example, we might license aggregated statistics like "15% of users in a given region waste dairy products weekly" to researchers, retailers, or sustainability organizations. This never includes information that identifies you individually.

If you are a California resident, see Section 7 for your right to opt out of this kind of sharing, even in de-identified/aggregated form.

4. Data Storage and Security

Your information is stored on secure, industry-standard cloud infrastructure (Render for application hosting, Neon for our database). We use reasonable technical and organizational measures — including password hashing, encrypted connections, and secure token-based authentication — to protect your information. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If we experience a data breach affecting your personal information, we will notify affected users through the App, email, or other reasonable means, and as required by applicable law.

5. Data Retention and Deletion

We retain your account and pantry information while your account is active. You may delete your account at any time from the App's Settings page. Once deletion succeeds, your account and personal pantry are removed from the active database. Shared pantry records remain with the household, with your creator attribution removed. A household owner with other members must transfer ownership before deleting their account. Removing an individual pantry item preserves usage or waste quantities you already recorded for your statistics.

Limited security logs and information required by law may be retained separately. Residual copies in provider-managed backups or recovery history expire according to the configured recovery window and the provider's retention practices. They are not used to restore a deleted account to ordinary service. A fixed backup retention period has not yet been confirmed for this release.

6. Notifications

Expiration reminders are optional and require notification permission on each enabled device. You may choose a daily summary, item alerts at selected intervals, or both, and change these choices in the App. When notification delivery is enabled, we use Expo’s push service and Apple’s or Google’s notification services to deliver alerts. Messages may include grocery names, expiration dates, and metadata that opens the relevant pantry. Depending on your device settings, message contents may appear on your lock screen. You can disable a device in the App or revoke notification permission in your phone settings. Delivery is not guaranteed or a determination of food safety.

We keep notification delivery records to prevent duplicate alerts and diagnose delivery failures. The current implementation removes these records 32 days after the referenced expiration date, or 32 days after a daily summary. Disabling a device prevents further sends from it once the request reaches the service. Shared-household reminders follow each member’s own preferences.

7. Your Rights and Choices

Depending on your location, you may have rights to access, correct, delete, or export your personal information, or to object to certain uses of it. You can exercise most of these rights directly within the App (editing account details, deleting your account). For any other requests, contact us at [support email placeholder].

If You Are in the European Economic Area or United Kingdom

We process your information on the following legal bases: performance of a contract (providing the App's core features), your consent where applicable, and our legitimate interests (e.g., app security and improvement). You have the rights available under the GDPR, including the right to access, rectify, erase, restrict, or port your data, and the right to lodge a complaint with your local data protection authority. If we transfer your data outside your region, we use appropriate safeguards (such as Standard Contractual Clauses) to protect it.

If You Are a California Resident

Under the CCPA/CPRA, you have the right to know what personal information we collect, request its deletion, and opt out of the "sale" or "sharing" of your personal information — a term that can include the aggregated trend-data sharing described in Section 3, depending on how it's structured. To opt out, contact us at [support email placeholder]. We do not discriminate against users who exercise these rights.

8. Children's Privacy

Spoilr is not directed to children under the age of 13 (or the relevant minimum age in your jurisdiction), and we do not knowingly collect personal information from children. If we learn we have collected such information, we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes — including changes to how we share or sell aggregated data — we will notify you through the App or by other reasonable means before the change takes effect. Continued use of the App after changes take effect constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy, contact us at:

[support email placeholder]