Privacy Policy

Last updated: March 29, 2026

Overview

Eatvora ("we", "our", or "the app") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile application.

Data Storage

Eatvora stores most of your data locally on your device using AsyncStorage. This means:

Your pantry items, shopping lists, meal plans, and chore data stay on your device
No account creation is required to use core features
Your personal data is not sent to our servers unless you explicitly use features that require it (such as AI recipe generation)

Information We Collect

We may collect the following information when you use certain features:

Camera Data: Used for barcode scanning, receipt scanning, and expiration date OCR. Images are processed and not stored permanently.
Location Data: Used only when you choose to find nearby stores. Location is not tracked or stored on our servers.
AI Interactions: When you use AI-powered features (recipe suggestions, shopping tips), your pantry data may be sent to Google Gemini AI for processing. No personal identification information is included.
Notification Preferences: Your notification settings are stored locally to deliver expiration alerts and reminders.

Third-Party Services

Eatvora integrates with the following third-party services:

Google Gemini AI: For recipe generation, shopping tips, and OCR processing. Subject to Google's Privacy Policy.
Open Food Facts: For barcode product lookups. This is a public, open-source database.
RevenueCat: For subscription management. Subject to RevenueCat's Privacy Policy.
Google Maps: For store location search (opens externally). No API key is used; links open in the Google Maps app.

Data Sharing

We do not sell, trade, or rent your personal information to third parties. Data is only shared with third-party services as described above and only when you actively use those features.

Household Sharing

If you use the Household Sharing feature (Plus tier), shared data (pantry items, shopping lists, chores) is synchronized between household members. All members of a household can view and modify shared data.

Data Deletion

You can delete all your data at any time by:

Using the "Clear All Data" option in the app's Profile settings
Uninstalling the app from your device (removes all locally stored data)
Submitting a data deletion request for any server-side data

Your Rights (GDPR — EU & UK Users)

If you are located in the European Union or United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR) and UK GDPR:

Right of Access: You may request a copy of all personal data we hold about you. Use the "Export My Data" feature in the app or email us.
Right to Erasure ("Right to be Forgotten"): You may request deletion of all server-side data associated with your account. We will process requests within 30 days. Submit a request at our data deletion page.
Right to Rectification: You may correct inaccurate personal data at any time from within the app settings.
Right to Data Portability: You may export your pantry data in a machine-readable format using the "Export My Data" feature in Profile settings.
Right to Restrict Processing: You may limit how we use your data by disabling AI features and optional analytics in the app settings.
Right to Object: You may opt out of analytics tracking at any time in the app's Privacy Settings.

Our lawful basis for processing personal data is: legitimate interests (app functionality, crash reporting) and consent (AI features, analytics, push notifications — each requires explicit opt-in).

To exercise any of these rights, contact us at privacy@eatvora.app. We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority (ICO in the UK; your national DPA in the EU).

Your Rights (CCPA — California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the following rights:

Right to Know: You have the right to request information about the categories and specific pieces of personal information we collect, use, and disclose.
Right to Delete: You have the right to request deletion of personal information we hold. Submit a request at our data deletion page. We will confirm and complete the deletion within 45 days.
Right to Opt-Out of Sale: Eatvora does not sell, trade, or rent personal information. There is nothing to opt out of.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To submit a CCPA request, email privacy@eatvora.app with the subject line "CCPA Request" or use the data deletion form linked above.

Data Retention

We retain server-side data (account info, household data, usage analytics) for as long as your account is active. After account deletion:

Personal identifiers are deleted within 30 days.
Anonymized, aggregated analytics data may be retained indefinitely as it cannot be linked back to any individual.
Local device data (AsyncStorage) is deleted immediately when you clear app data or uninstall the app.

Children's Privacy

Eatvora is not directed at children under 13 (or under 16 in the EU/UK). We do not knowingly collect personal information from children under these ages. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new Privacy Policy in the app and on this page, with an updated "Last updated" date. For significant changes, we will provide additional notice (e.g., a push notification or in-app prompt) where required by law.

Contact Us

For privacy questions, data requests, or to exercise your rights:

Email: privacy@eatvora.app

General support: support@eatvora.app