FridgeSpin · Legal
Privacy policy
Last updated: 2 November 2026
FridgeSpin is built so you can use it without telling us who you are. This policy explains what the app does collect, why, who helps us process it, and how to delete it.
1. Who we are
FridgeSpin ("the app") is published by Lordubs Labs (Pty) Ltd (registration no. 2026/864753/07), a company in South Africa ("Lordubs Labs", "we", "us"). We are the responsible party for your personal information under the Protection of Personal Information Act, 2013 (POPIA).
Contact us, including our Information Officer, at support@lordubslabs.com.
2. The short version
- You can use FridgeSpin without an email address. The app gives you an anonymous account automatically.
- Photos you scan are sent for AI analysis and then discarded. We don't store them.
- We don't sell your personal information.
- The free plan shows ads from Google AdMob, which uses your device's advertising ID. Paid plans have no ads.
- You can delete your account at any time, in the app or on the web.
3. What we collect and why
Photos you scan
When you scan your fridge, pantry or a grocery slip, the photo goes through our server to Google's Gemini AI service, which lists the items it can see. We send the list back to your phone. Neither we nor our server keep the photo. Please don't photograph people or documents with other people's details on them.
Ingredients and meal requests
To suggest meals, the app sends the protein, carb and veg you spun plus your pantry item names to our server, which asks Groq's AI service to write meal ideas. No photos or account details are sent to Groq.
Your account
- Anonymous account (everyone): a random account ID created on first launch. It isn't linked to your name, email or phone number.
- If you create an account: your email address and password (stored only as a secure hash by our authentication provider, Supabase), or, if you use Google sign-in, your email address and Google account identifier.
- Plan and usage: your plan, how many scans and meal ideas you've used today and this month, and any bonus scans earned. We need these to apply plan limits.
Your pantry and staples
Your pantry and staples lists are stored on your phone. On paid plans that include sync, they're also stored in our database so they're backed up and available when you sign in on another device.
Service and usage records
Each time you scan or generate meals, our server records which feature was used, the AI model, its size and cost, your plan, whether it worked (and the error if not), the date and time, the app version, and a hashed (scrambled) form of your IP address. We use these records to apply limits, prevent abuse, fix problems and keep the service affordable. To stop automated abuse, our server also counts requests per hashed IP address for about a minute at a time.
Crash reports
If the app or our server hits an error, a crash report goes to Sentry, our error-monitoring service. It holds technical details: the error, your device model and Android version, the app version, and your random account ID. It does not include your email address, photos or what you typed.
Advertising (free plan)
On the free plan the app shows banner ads from Google AdMob. To choose, show and measure ads, and to prevent ad fraud, Google collects your device's advertising ID, IP address and information about your device and how you interact with ads.
Before the first ad, the app uses Google's consent tool to ask for your choice where the law requires it, for example in the European Economic Area, the UK, Switzerland and some US states. If you don't consent to personalised ads, you see non-personalised ads, which are chosen from context, such as the app you're using, instead of a profile of your interests. Elsewhere, including South Africa, ads may be personalised. If you were asked, you can change your choice at any time in the app under Settings → Account → Privacy and ad choices. You can also reset your advertising ID or opt out of personalised ads in your Android settings (Settings → Google → Ads, or Settings → Privacy → Ads, depending on your phone). See how Google uses information from apps that use its services. Paid plans show no ads, so AdMob isn't used.
Purchases
Paid plans are bought through Google Play. Google handles payment, and we never see your card details. We receive what we need to give you the plan: a purchase token, the product, and its status (active, renewed, cancelled).
Emails you send us
If you contact us, we use your email address and message to reply and to handle your request.
Why we're allowed to process this
We process this information to provide the service you ask for (performing our agreement with you), for our legitimate interests in running, securing and improving a sustainable service, to comply with the law, and, where needed, with your consent.
4. Who processes it for us
We use these service providers ("operators") to run FridgeSpin. They process personal information on our behalf and under their own security and privacy commitments:
| Provider | What for | Where |
|---|---|---|
| Supabase | Accounts, sign-in and our database | Cape Town, South Africa (af-south-1) |
| Cloudflare | Our server (API) and this website | Global network, nearest data centre |
| Google (Gemini API) | Reading the items in scanned photos | United States and other countries |
| Groq | Writing meal ideas from ingredient names | United States |
| Sentry (Functional Software, Inc.) | Crash and error reports | European Union (Germany) |
| Google (AdMob) | Ads on the free plan | United States and other countries |
| Google (Sign-In, Play) | Google sign-in, if you use it, and Google Play purchases | United States and other countries |
We don't sell your personal information or share it with anyone else, except where the law requires it (for example a valid court order), or to protect people's safety or our legal rights. If Lordubs Labs or FridgeSpin is ever sold or merged, your information would pass to the new owner under this policy, and we'd tell you first.
5. Processing outside South Africa
Our database is in South Africa, but some providers above process information in other countries, mainly the United States and the European Union. We only use providers that are bound by agreements or laws that give your information protection comparable to POPIA, as section 72 of POPIA requires.
6. How long we keep it
- Photos: not kept. They're discarded once the scan finishes.
- Account, plan, pantry and staples: until you delete your account.
- Usage counters: one row per day, deleted with your account.
- Service and usage records: kept for cost accounting and statistics. When you delete your account they are anonymised (see below).
- Hashed IP rate-limit counters: about one minute.
- Crash reports: kept for up to 90 days, then deleted automatically by Sentry.
- Emails: for as long as we need them to deal with your request.
If you use only an anonymous account and then sign in to an existing account on the same phone, the leftover anonymous account is deleted automatically.
7. Deleting your account
You can delete your account at any time, for any reason. Deletion is immediate and permanent:
- In the app: Settings → Account → Delete account. This works for anonymous and signed-in accounts.
- On the web: our account deletion page, where you sign in with your email and password.
- By email: write to support@lordubslabs.com from your account's email address. We'll delete the account within 30 days.
Deleted: your sign-in account (email address and linked Google identity), your profile and plan, any internal notes about your account, your synced pantry, staples and saved favourites, your usage counters and bonus-scan balance. The app also resets the lists stored on that phone.
Kept, anonymised: service and usage records (feature, model, size, cost, plan at the time, success or error code, date). We remove the link to your account, the device identifier, the hashed IP address and any error text, so they can no longer be tied to you. Daily cost totals contain no personal information. Records that an administrator changed an account's settings are kept without the account link or any notes.
Deleting your account doesn't cancel a Google Play subscription. Cancel it in Google Play first (Play Store → profile icon → Payments and subscriptions → Subscriptions).
8. Your rights
Under POPIA you have the right to:
- ask whether we hold personal information about you, and for a copy of it;
- ask us to correct, update or delete it;
- object to how we process it, including for direct marketing (we don't send any);
- withdraw consent where we rely on it;
- complain to the Information Regulator.
Email support@lordubslabs.com with the subject Privacy request. If you only use an anonymous account we may not be able to tell which data is yours. Deleting the account in the app always works.
9. Children
FridgeSpin is only for people aged 18 and over. It isn't meant for anyone under 18, and we don't knowingly collect personal information from anyone under 18. If you believe someone under 18 has given us personal information, contact us and we'll delete it.
10. Security
Everything between the app, our server and our database is encrypted in transit (HTTPS/TLS). AI service keys live only on our server, never in the app. Database rules let each account read and change only its own data, and IP addresses are hashed before we store them. No system is perfectly secure. If a breach affects your personal information we'll tell you and the Information Regulator as POPIA requires.
11. Changes to this policy
We'll update this page and the date at the top when the policy changes. If a change is significant, we'll also tell you in the app before it takes effect.
12. Contact us
Lordubs Labs (Pty) Ltd, registration no. 2026/864753/07, South Africa.
Email: support@lordubslabs.com