Privacy Policy
1. Data Controller
The data controller under the GDPR is:
This is a private offering without a registered company. There is no commercial register entry.
2. Scope
This privacy policy applies to the mobile app Alltagsfaden (iOS) and related features where personal data is processed. Alltagsfaden helps families organize daily life (shopping lists, pantry, tasks, calendar, recipes, meal plans, and dietary taboos).
3. Overview
- Family data is synced via the cloud so multiple devices share content.
- Optional AI features use your own OpenAI API key on the device.
- Pantry barcode scans fetch product data from Open Food Facts.
- Push notifications can remind you of tasks or calendar events.
4. Categories of Data
| Category | Examples | Purpose |
|---|---|---|
| Assignment / account | Family code, selected family member, push device token | Family area, sync |
| Content you enter | Recipes, shopping, tasks, calendar, pantry, taboos | Core app features |
| Technical data | Timestamps, sync errors, FCM token | Operation, push, troubleshooting |
| Barcode | EAN/barcode number | Product lookup via Open Food Facts |
| AI (optional) | Text, photos of recipes or dishes | AI features when enabled |
| Permissions | Camera, photos, microphone, calendar (if allowed) | Scan, dictation, events |
5. Legal Bases (GDPR)
- Art. 6(1)(b) — Providing app features you request.
- Art. 6(1)(a) — Consent (e.g. iOS permissions, enabling AI).
- Art. 6(1)(f) — Legitimate interests (secure, stable operation).
You may withdraw consent at any time (e.g. revoke permissions in iOS Settings).
6. Service Providers
6.1 Google Firebase
Family data and push notifications use Google Firebase (Cloud Firestore, Firebase Cloud Messaging).
- Provider: Google Ireland Limited, Dublin, Ireland (and affiliated Google entities).
- More info: Firebase Privacy
6.2 Open Food Facts (pantry barcode)
Scanning a barcode sends the EAN/barcode to Open Food Facts to display product name, brand, and ingredients. Only the barcode query is sent, not your full family profile.
- Website: world.openfoodfacts.org
- Data / license: world.openfoodfacts.org/data
6.3 OpenAI (optional)
If you enable AI features and enter your own OpenAI API key, required content is sent from your device to OpenAI. The key is stored locally on the device. Without enabling AI, no data is sent to OpenAI.
- Privacy: openai.com/policies/privacy-policy
7. Device Permissions
| Permission | Use |
|---|---|
| Camera | Recipe photos, family QR code, barcode scan |
| Photo library | Picking images |
| Microphone / speech | Dictation features |
| Calendar | Events (if used) |
| Notifications | Push reminders |
You can change permissions anytime in Settings → Alltagsfaden on iOS.
8. Retention
- Firebase family content: until deleted in the app or you stop using the family area; deletion requests are typically handled within one month.
- OpenAI: per OpenAI’s policies; AI requests are not stored on own servers.
- Open Food Facts: barcode query only.
Deletion requests: info@alltagsfaden.de.
9. Sharing
Data is shared mainly with the providers above, when legally required, or with your consent. Your data is not sold.
10. International Transfers
Providers may process data outside the EU/EEA (e.g. USA). See their privacy notices for safeguards (adequacy decisions, standard contractual clauses).
11. Your Rights
You may have the right to access, rectify, erase, restrict, port data, object, and withdraw consent. Contact: info@alltagsfaden.de.
12. Supervisory Authority
You may lodge a complaint with a data protection authority in your country of residence.
13. Children
The app is for family use. Parents or guardians should supervise children’s use and manage permissions.
14. Security
Reasonable technical and organizational measures are used. No method of transmission over the internet is 100% secure.
15. Changes
This policy may be updated. The current version is always available on this page.