Family Fridge Privacy Policy

1. Local and shared data

Local-only fridge records, unfinished Quick Add drafts, and preferences stay in app-owned containers on the iPhone; iOS may include local app data in an iCloud Backup or computer backup. If the user enables sharing, the household’s fridge name, member display names, food records, shopping choices and claims, derived Pulse activity, and synchronization metadata are stored in the owner’s private iCloud database and made available through Apple’s CloudKit service only after a specified recipient accepts the owner’s private read/write invitation. Drafts, raw receipt images, the full OCR transcript, and device preferences are not added to the shared household. The shared app group contains the item-level cache needed by the widget, and a separate widget access record may be refreshed from the App Store.

2. Camera and receipt scanning

Receipt scanning is a personal Pro feature, and camera access is used only when you choose it. Document capture and text recognition happen on the device. Raw receipt images and the full OCR transcript are not saved. Normalized grocery item suggestions can remain in an unfinished local Quick Add draft until the user adds or discards them, clears fridge data, or removes the app. Manual entry remains available with personal Pro and to an accepted read/write participant collaborating in the shared Fridge and Shop.

3. Collection and sharing

Family Fridge does not send fridge data to Synap1e-operated servers and does not sell or rent grocery data. The organizer alone invites people and administers sharing. At the owner’s direction, Apple’s iCloud service makes shared household records available only to specified recipients who accept the private read/write invitation. Accepted participants can update Fridge and Shop without personal Pro; Pulse is read-only history derived from those changes. Receipt scanning and widgets remain personal Pro, and local-only editing requires Pro. This is not App Store Family Sharing. CloudKit delivery may take time and is not promised to be instantaneous. Family Fridge does not use analytics, advertising, or tracking SDKs.

4. Retention and deletion

Local-only fridge records remain until the user changes or deletes them, uses Clear Fridge Data, or removes the app. A participant’s Leave Family Fridge action removes only that participant and keeps the last synchronized fridge as a private local copy; the organizer’s share continues. The owner’s Stop Sharing action revokes invitees while retaining the owner’s local copy and underlying records in the owner’s private iCloud custom record zone. The owner can separately choose Delete Shared Fridge from iCloud to permanently delete that zone and shared history while keeping the latest private local copy. Copies already synchronized to other devices, iCloud Backup, and computer backups are not erased. Clear Fridge Data is unavailable until the user leaves or stops sharing, and it then removes only the private local copy. Synap1e cannot view or delete private CloudKit records on the user’s behalf. Clear Fridge Data does not cancel Family Fridge Pro or erase the separate widget access record.

5. App-specific addendum

6. Contact and policy links

For help with app issues, visit Family Fridge Support. You can also review Terms of Service.