Privacy Policy

Effective 13 October 2026

1. Who we are

Fridgelight (fridgelight.app) is an independent service based in Scotland, UK, operating under the trading name Fridgelight. The operator of Fridgelight is the controller of your personal data under the UK GDPR. Contact for anything in this policy, including your rights requests: hello@fridgelight.app.

2. The short version

  • Fridge photos are deleted automatically within 24 hours.
  • We do not sell your data.
  • We use no advertising trackers.
  • You do not need an account to get your first dinner.

3. What we collect

  • Fridge photos. Uploaded so the AI can recognise ingredients. Deleted within 24 hours.
  • Recognised ingredient names and dish history. Kept to improve your suggestions.
  • Preferences. Allergies, dislikes and portion size, kept so suggestions suit you.
  • Anonymous session cookie. Identifies your device before you have an account.
  • Payment details. If you subscribe, Stripe handles your card. We receive only limited information such as subscription status and your email address. We never see your card number.
  • Messages. If you email us, we keep your message and our reply.

Allergy information may count as health information. We use it only to adjust your suggestions, and you provide it by choice.

4. Why we use it and our lawful bases

  • Contract: to recognise ingredients, suggest dinners, run your free dinners and subscription, and give support.
  • Legitimate interests: to keep the service secure, prevent abuse through the daily scan limit, fix faults and improve suggestions. We balance this against your rights and keep the data to a minimum.
  • Consent: for any optional cookies. We currently use none beyond the essential session cookie, so there is nothing to opt in to.
  • Legal obligation: to keep payment and tax records.

For allergy information we rely on your explicit consent, which you can withdraw at any time by removing it in the app or emailing us.

5. Cookies

We use one essential session cookie. It lets the app recognise your device so your dinners and preferences are there when you come back. It is needed for the service to work, so it does not need your consent. We do not use advertising, analytics or tracking cookies.

6. Who we share data with

These sub-processors help us run Fridgelight:

  • Cloudflare: hosting, storage and database, in an EU or UK region.
  • Anthropic: ingredient recognition and recipe generation. Receives your photos and ingredient list.
  • Google (Gemini): generates an illustrative dish image from the dish name only. It is never sent your photos.
  • Stripe: payments.

We only share what each provider needs and they may only use it on our instructions. We do not sell your data and we do not share it for advertising. We may disclose data if the law requires it.

7. International transfers

Some providers may process data outside the UK. Where they do, we rely on approved safeguards such as the UK International Data Transfer Agreement or addendum, or a UK adequacy decision.

8. How long we keep it

  • Fridge photos: automatically deleted within 24 hours.
  • Account and usage data, including ingredients, dish history and preferences: kept while your account or session is active, and for 12 months after you last use Fridgelight. Then deleted.
  • Payment and tax records: kept as long as the law requires.
  • Support emails: kept for as long as needed to deal with your query.

9. Your rights

Under the UK GDPR you have the right to:

  • access your data and get a copy,
  • correct data that is wrong,
  • ask us to erase your data,
  • restrict or object to our use of it,
  • receive your data in a portable format,
  • withdraw consent at any time.

To use any of these rights, email hello@fridgelight.app. We will reply within one month. We may need to check it is really you, which can be hard with an anonymous session, so please tell us what you can about your device and use.

10. Complaints

Please contact us first and we will try to put things right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

11. Children

Fridgelight is for people aged 16 and over. We do not knowingly collect data from anyone younger. If you think a child has used the service, email us and we will delete their data.

12. Security

Data is encrypted in transit and held with trusted providers. No system is perfectly secure, but we take sensible steps to protect your data and will tell you and the ICO where the law requires us to after a breach.

13. Changes to this policy

We may update this policy. The effective date at the top shows the latest version. If a change matters, we will tell you in the app or by email.

Back to Fridgelight