Fridge+
Privacy Policy
Last updated: [date of publishing]
Draft. Have this reviewed by a lawyer before launch. Highlighted text needs your details.
Fridge+ is a shared-life app for couples and households. It includes +together, a private space for the two of you. We built it so that as much as possible stays on your phone, and what goes to our servers is visible only to the people you share it with.
- No adverts, no tracking, no selling or renting your data. Ever.
- No analytics or advertising tools are built into the app.
- Photos live on your phone. Our server keeps a copy for 30 days so your household can save them, then deletes it.
- Your +together content is seen only by you and your partner. Some of it is seen only by you.
- You can export or delete your data in the app at any time: Settings → Privacy and data.
Who we are
Fridge+ is provided by [your legal name or company name and registered address] ("we", "us"). We are the data controller for the information described here. Contact: privacy@fridgeplus.ca.
What we hold, and why
| Information | Where it's kept | Why |
|---|---|---|
| Account: email address, display name | Our server | To sign you in with a one-time code and show your name to your partner and household. |
| Household (Fridge+): shopping lists, tasks, calendar events, meals, bills, pantry items, children's names and notes, routines, members | Our server, plus a copy on each member's phone | So everyone in the household sees the same lists and plans. |
| +together: notes and messages to your partner, answers, daily answers, quiz answers, Yes/No/Maybe votes, check-ins, your story's dates and milestones, the content level you choose | Our server, plus a copy on your phone | So you and your partner can play, answer and reveal together. |
| Photos you add to the family album | Your phone. A copy on our server for up to 30 days. | So other members can save the photo onto their own phones. |
| Settings: notification preferences, quiet hours, sharing permissions, and a log of when you turned each permission on or off (not what you shared) | Our server | To respect your choices and show that we did. |
| Reminders | Your phone only | Reminders are scheduled on your phone. Lock-screen text is generic and never shows private content. |
| Subscription status: plan, renewal date, whether it's active | Our server | One subscription unlocks the app for you, your partner and your household. We never see your card details; Apple handles payment. |
We don't collect your location, contacts, camera or microphone. The app opens your photo library only when you choose photos to add.
Intimate content
Parts of +together may reveal things about your sex life. We treat this as sensitive information and process it only because you, and your partner, explicitly choose to turn it on. Each of you picks a content level, and the app shows only the lower of the two. You can lower your level at any time, and anything shared at a higher level is hidden again. Your Yes/No/Maybe votes are never shown to anyone: your partner sees only ideas you both said yes or maybe to.
Legal bases (UK and EU)
We process your information to provide the service you signed up for (contract), with your explicit consent for intimate content and optional sharing permissions, and for our legitimate interest in keeping the service secure. You can withdraw consent at any time in the app.
Who can see what
- Your household sees household lists, tasks, shared events, the album and children's notes. Household membership never gives access to +together.
- Your partner sees what you send them and what you choose to share. Partnership never gives access to a household you haven't joined.
- Only you see your private answers, preferences, private events and votes.
These rules are enforced on our server, not just in the app, and are tested before every release.
Services we use
We use a small number of providers to run Fridge+. They process data only on our instructions.
- Supabase: database, sign-in and file storage, hosted in [region, e.g. London (eu-west-2)].
- [email provider, e.g. Postmark or Resend]: sends your sign-in codes.
- Apple: App Store payments and notifications.
- Cloudflare: hosts this website and stores the waitlist.
- [RevenueCat, if used]: confirms your subscription with Apple.
If data is transferred outside the UK or EU, we rely on the provider's standard contractual clauses or an equivalent safeguard.
The website waitlist
If you join the waitlist on this website, we store your email address (and the time you joined) with Cloudflare, and use it only to tell you when Fridge+ launches. We delete the list after launch. Email us any time to be removed sooner.
How long we keep it
- Album photos: deleted from our server 30 days after upload. They stay on phones that saved them.
- Everything else: until you delete it, leave the household or couple, or delete your account.
- Backups: deleted data may remain in encrypted backups for up to [7] days.
Leaving, unlinking and deleting
- Unlink your partner: the +together space ends for both of you. Your shared answers go back to being private.
- Leave a household: your private items there are deleted. Shared items you added stay with the household.
- Delete your account (Settings → Privacy and data → Delete account): you are unlinked, you leave every household, and your account and personal data are deleted.
- Sign out: removes the app's data from that phone.
Your rights
You can access, export, correct or delete your data, object to or restrict processing, and withdraw consent. Most of this is in the app: Settings → Privacy and data → Export your data, or Delete account. For anything else, email privacy@fridgeplus.ca and we'll reply within 30 days. If you're in the UK you can complain to the Information Commissioner's Office (ico.org.uk); in the EU, to your local data protection authority. Residents of California and other US states have similar rights and can use the same contact.
Security
Data is encrypted in transit. Access rules on our server decide who can read each record. On your phone, data is kept in the app's private storage, so protect your phone with a passcode. No system is perfectly secure; if a breach affects you, we'll tell you and the regulator as the law requires.
Age
Fridge+ is for adults aged 18 and over. Parents may add notes about their children for household planning, but children don't use the app and we don't knowingly collect data from anyone under 18.
Changes
If we change this policy in a way that matters, we'll tell you in the app before it takes effect.