Back to EATRR
Privacy Policy
Last updated: [publication date]
1. Who is responsible for your data
Antwann Thomas
Knobelsdorffstraße 29, 14059 Berlin, Germany
contact@gastriot.com
This is the "controller" under GDPR for data collected through EATRR.
2. What we collect
- Account data: your email address and password (stored as a secure hash, never in plain text).
- Household inventory data: items you scan or add, plus receipt data (store name, prices, purchase date) and barcode scans.
- Photos you choose to upload: receipt and dish photos, processed to extract inventory and nutrition information.
- Location (postal code only): used for regional context, not your precise location.
- Consent preferences: your analytics and partner-sharing choices, see Section 5.
- Community content: recipes, comments, and photos you choose to publish.
- Push notification details, only if you opt in.
3. Why we process it, and on what legal basis
Core app functionality — necessary to provide the service you've signed up for (GDPR Art. 6(1)(b)).
Anonymized usage analytics — only if you opt in (Art. 6(1)(a), consent). Never tied to your name or email.
Aggregate data shared with grocery retail partners — only if you opt in (Art. 6(1)(a), consent). As of this policy's publication, this consent is captured but the underlying pipeline is still in development — no sharing is actively happening yet.
Your core use of EATRR is identical whether or not you opt into analytics or partner sharing.
4. Who we share data with
| Service | Used for | Receives |
|---|---|---|
| Anthropic (Claude) | Reading photos, generating recipes | Photos, inventory names, dietary preferences — never your name/email |
| Spoonacular | Recipe search | Ingredient names, dietary filters |
| TheMealDB | Recipe search | No personal data |
| recipeapi.io | Recipe search | Ingredient names |
| Neon | Database hosting | All persistent app data |
| Railway | Backend hosting | Data in transit through the API |
| Vercel | Web app hosting | Standard web request data |
Some providers are based outside the EU; transfers rely on appropriate safeguards (such as EU Standard Contractual Clauses) — we are in the process of confirming and documenting each vendor's specific safeguard. We do not sell your personal data to anyone, under any circumstance.
5. Your choices
In Settings, you can independently toggle anonymized usage analytics and aggregate partner-data sharing — both off by default, both changeable any time, neither affecting your access to any feature.
6. How long we keep your data
We retain your data for as long as your account is active. Deleting your account permanently removes your personal data, except data belonging to a shared household fridge, which stays intact for other members. We do not currently have a fixed automatic deletion schedule for inactive accounts that are never deleted.
7. Your rights
Access, correction, deletion (available directly in Settings), objection/restriction, data portability (export available in Settings), and the right to lodge a complaint with a supervisory authority — in Berlin, the Berliner Beauftragte für Datenschutz und Informationsfreiheit.
8. Local storage
The app caches some non-sensitive data (like recipe suggestions) in your browser's local storage. This stays on your device and clears if you clear your browser's site data.
9. Children's privacy
EATRR is not directed at children under 16.
10. Changes to this policy
We'll update this policy as the app evolves — particularly once the grocery-partner pipeline in Section 3 goes live. Material changes will be communicated in-app.
11. Contact
Questions about this policy or your data: contact@gastriot.com