Privacy policy

Without an Account

You can use the mobile app as a Guest. Your Items stay on your phone and are never sent to our servers. If product analytics is on (see below), the app sends the same anonymous usage events as for Accounts, under a random identifier.

What we collect with an Account

• Account details: the email address and name from the sign-in you choose (Google, Apple or an email link), and a random user id. Other Members of a Household you share see your name.
• Your kitchen: the Items you add (name, category, where it's kept, amounts, purchase and use-by dates, price, store, nutrition, notes, barcode), what you used or wasted, and your Households, their Members and invites. This is what the app is for: we use it only to run BiteBy for you and your Household.
• Your Plan: whether you're on the Free Plan or BiteBy Pro. Payments are handled by Google Play in the app, or by Stripe on our website, through RevenueCat; we never see your card details.
• Reminders: if you turn on the daily reminder, your phone's push token, its time zone and the time you chose, so we can send the reminder at the right moment.
• Barcode scans: the camera reads the barcode on your phone; no picture leaves the device. The barcode number is looked up on our server and, if we don't know it yet, in Open Food Facts, a public food database. The lookup carries no personal information.
• Receipt scans: your phone reads the text on the photo itself (Apple's or Google's built-in text recognition); the photo never leaves your device and is not stored. You review what was read, and only the Items you add are saved.
• Recipe ideas: when you ask for ideas, the names, amounts and days left of the food in your Household are sent to Google Gemini to suggest recipes. Prices, notes and who added the food are not sent. Recipes you save stay in your Household.
• Crash reports: when the app or our server fails, an error report with technical details (device or browser type, app version, what went wrong) and your user id, so we can fix it.
• Product analytics: a handful of events with your user id: signing up, adding an Item (its category and whether it was scanned), recording that food was used or wasted, opening the subscription screen, subscribing, adding a scanned receipt (how many lines), getting recipe ideas (the meal and how many), and saving a recipe. They never include Item names, prices, notes, your email or your name. We don't record your screen, track you across other apps or websites, or use advertising identifiers. The website doesn't set cookies for this.

We don't sell your data, show ads, or use your data to train AI models.

Who processes it

We use these services to run BiteBy. Each processes data only on our behalf:

• Google Firebase: sign-in, database, server functions and website hosting.
• RevenueCat, Google Play and Stripe: subscriptions (Stripe processes card payments made on our website).
• Expo: delivering push notifications.
• Sentry: crash reports.
• PostHog: product analytics.
• Open Food Facts: barcode lookups (barcode numbers only).
• Google Gemini: suggesting recipes. It doesn't use this data to train its models.

These services may process data outside your country, including in the United States.

How long we keep it

We keep your Account and kitchen data until you delete them. Deleting your Account removes your Account, the Households you own with all their Items and history, your memberships in other Households, and your phones' reminder registrations. Encrypted backups of the database are kept for up to 14 days, so deleted data disappears from them within that time. Crash reports and analytics events are kept for at most 1 year. Google Play and Stripe keep their own records of purchases.

Your choices and rights

• See and change your data in the app at any time.
• Delete your Account in the app, or ask us to: see Delete your Account.
• Turn reminders off in the app, or turn off notifications for BiteBy in your phone's settings.
• Ask us for a copy of your data, to correct it, or to stop a use of it, by emailing rbktgldr@gmail.com. We answer within 30 days.

Children

BiteBy isn't directed at children under 13, and we don't knowingly collect their data.

Security

Data is encrypted in transit and at rest. Access is limited by sign-in and by database rules that let you see only the Households you belong to.

Changes

If this policy changes, we'll update the date above, and tell you in the app before a change that affects how your data is used.