Privacy Policy — Vittle
⚠️ Review before publishing. This policy accurately describes how the Vittle app is built, but it is a template, not legal advice. We recommend having it reviewed by qualified legal counsel before publishing. (In‑app account deletion — an App Store requirement — is implemented: Account → Delete account.)
Vittle ("Vittle", "we", "us", or "our") provides a home food‑inventory and shopping‑list app for iPhone and iPad. This Privacy Policy explains what information the app handles, how it is used, and the choices you have.
The app is operated by Lior Cohen, Haifa, Israel. If you have any questions, contact us at marketinglior@gmail.com.
Privacy at a glance
- Free = on your device. If you use Vittle without signing in, everything you add — your fridges, items and shopping list — stays on your device and is never sent to us or anyone else.
- Cloud sync is opt‑in. Real‑time household sync (a Premium feature) requires you to sign in. Only then is your inventory stored in the cloud so your household can share it.
- No ads, no tracking, no data sales. We don't use advertising or third‑party analytics SDKs, we don't track you across apps or websites, and we never sell your personal information.
- Barcode scans send only the barcode number to the Open Food Facts database to look up a product name. No personal data is attached, and camera images are processed on your device and never uploaded.
1. Information we collect
1.1 Information you provide
- Account information (only if you sign in): when you use Sign in with Apple, we receive a user identifier and, if you choose to share them, your name and email address. You may also sign in anonymously (an identifier only, no name/email).
- Household information: the household name, the members of your household, and the email addresses you enter to invite people.
- Content you create: the storage locations, items, quantities, categories, expiry dates and shopping‑list entries you add. On the free/local tier this stays on your device; with cloud sync it is stored in your household's cloud records.
1.2 Information collected automatically
- Vittle does not include third‑party analytics or advertising SDKs and does not build a behavioral profile of you. Apple may provide us with aggregated, anonymized App Store statistics and, if you opt in through iOS, crash diagnostics — this data is not used to identify you.
1.3 Camera and barcode scanning
- With your permission, Vittle uses the camera to scan product barcodes. Scanning happens on your device; camera images are not stored or transmitted. The recognized barcode number is sent to Open Food Facts (openfoodfacts.org) to retrieve a product name and category. No account or personal information is sent with that request.
1.4 Purchases
- Subscriptions are processed by Apple through the App Store. We receive your subscription status (active/expired) to unlock Premium features. We do not receive or store your payment card details.
1.5 Information we do not collect
- We do not collect your precise location, contacts, health data, photos library, or an advertising identifier, and we do not integrate with Apple Health or similar services.
2. How we use information
We use the information above only to:
- provide and operate the app (store and sync your inventory and shopping list);
- enable household sharing and process invites;
- authenticate you and keep your account secure;
- provide the barcode look‑up feature;
- provide customer support and respond to your requests;
- maintain the security and integrity of the service; and
- comply with legal obligations.
We do not use your personal information for advertising or sell it.
3. Legal bases for processing (EEA/UK users)
Where the GDPR/UK GDPR applies, we rely on: performance of a contract (to provide the app and cloud sync you request), consent (e.g., camera access — which you can withdraw in iOS Settings), legitimate interests (to keep the service secure and functioning), and compliance with legal obligations.
4. How your information is stored and shared
We do not sell personal information. We share information only with service providers who process it on our behalf, and only as needed to run the app:
| Provider | Purpose | Notes |
|---|---|---|
| Apple | Sign in with Apple; App Store subscriptions | Governed by Apple's Privacy Policy |
| Google Firebase (Authentication, Cloud Firestore) | Account sign‑in and cloud storage/real‑time sync of household data — only when you use cloud sync | Data hosted on Google Cloud infrastructure |
| Open Food Facts | Barcode → product‑name lookups | Receives only the barcode number |
We may also disclose information if required by law, to enforce our terms, or to protect the rights, safety, and security of our users or the public.
5. Data retention
- Local data remains on your device until you delete it or uninstall the app.
- Cloud data is retained while your account is active. When you delete your account (see §9), we delete the personal data associated with it, except where we must retain limited information to comply with legal obligations.
- Anonymized or aggregated data that cannot identify you may be retained to improve the service.
6. Security
Data transmitted to the cloud is encrypted in transit using TLS and encrypted at rest by our cloud provider. Access to household data is restricted to members of that household. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
7. Your choices
- Camera: grant or revoke camera access anytime in iOS Settings → Vittle.
- Cloud sync: it is optional. Don't sign in and your data stays only on your device.
- Sign out at any time from Account → Sign out.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict processing, and to withdraw consent. To exercise these rights, contact us at marketinglior@gmail.com. We will respond as required by applicable law.
9. Deleting your account and data
You can delete the local data on your device by removing items or uninstalling the app. To delete your account and cloud data, use the in‑app option under Account → Delete account (this removes your cloud household data, your on‑device data, and your account), or contact us at marketinglior@gmail.com and we will delete your account and associated personal data.
10. California privacy rights (CCPA/CPRA)
We do not sell or "share" (for cross‑context behavioral advertising) the personal information of California residents, and we have not done so in the preceding 12 months. California residents may request access to, or deletion of, their personal information, and will not be discriminated against for exercising these rights. Submit requests to marketinglior@gmail.com.
11. International data transfers
If you use cloud sync, your information may be processed on servers located in the United States or other countries where our providers (e.g., Google Firebase) operate. We rely on appropriate safeguards (such as Standard Contractual Clauses) where required by law.
12. Children's privacy
Vittle is a general‑audience household utility and is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.
13. Third‑party services
The app relies on third‑party services (Apple, Google Firebase, Open Food Facts) that have their own privacy policies. We encourage you to review them. We are not responsible for the practices of third parties.
14. Changes to this policy
We may update this policy from time to time. We will update the "Last updated" date and, for material changes, provide a more prominent notice. Your continued use of the app after changes take effect constitutes acceptance.
15. Contact us
By using Vittle, you acknowledge that you have read and understood this Privacy Policy.