How Frostbyte collects, uses, and protects your personal data when you use the Frostbyte mobile app.
And we never use your freezer inventory to build advertising profiles.
Up to three expiring item names go to the recipe model — never your full inventory.
Payments are handled entirely by Apple, Google, and RevenueCat.
This Privacy Policy explains how Frostbyte ("we", "us", "our") collects, uses, and protects your personal data when you use the Frostbyte mobile application (the "App"). We are based in the United Kingdom and process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Questions about this policy or how we handle your data? Contact us at mcdangproductions@gmail.com.
Frostbyte is a freezer inventory management app that helps users track frozen food, monitor expiration dates, and generate AI-powered recipe suggestions.
When you create an account, we collect:
→ We never collect or store your password — authentication is handled by Firebase, and passwordless sign-in uses secure email magic links.
To provide the app's core functionality, we store the data you enter about your freezer contents:
When you use the AI Chef feature, the names of your top expiring ingredients (up to three items) are sent to Google's Gemini API to generate a recipe suggestion. We do not send your full inventory — only the specific ingredient names required to generate that recipe.
Generated recipes may be cached (linked to the ingredient combination, not to you personally) to improve performance and reduce processing costs. If you bookmark a recipe, it is stored against your account so you can access it later.
If you subscribe to Frostbyte Pro, subscription management is handled by RevenueCat and the app store you purchased through (Apple App Store or Google Play). We receive and store your subscription status (e.g. active, expired, tier) to unlock paid features, but we do not collect or store your payment card details — these are handled entirely by Apple, Google, or RevenueCat's payment processors.
We may automatically collect limited technical data necessary for the app to function and for basic diagnostics, such as device type, app version, and crash/error logs.
If you participate in beta testing via TestFlight (iOS) or Google Play Console closed testing (Android), your email address may be used to manage your access to the beta program, and we may collect feedback you voluntarily submit.
We use your data to:
→ We do not sell your personal data, and we do not use your freezer inventory data to build advertising profiles.
Under UK GDPR, we rely on the following legal bases:
Processing necessary to provide the app's core features (account, inventory tracking, AI Chef) under our Terms of Service.
For optional beta testing communications and, where applicable, marketing communications.
For app diagnostics, security, fraud prevention, and service improvement.
Where we must retain or disclose data to comply with the law.
We retain your account and inventory data for as long as your account remains active. If you delete your account, we will delete your personal data and inventory records within [INSERT TIMEFRAME, e.g. 30 days], except where we are required to retain certain data for legal, tax, or fraud-prevention purposes.
Cached recipe data (which is not linked to your identity) may be retained independently to serve other users efficiently.
Under UK GDPR, you have the right to:
See the personal data we hold about you.
Correct inaccurate or incomplete data.
Delete your data — the "right to be forgotten".
Limit how we process your data in certain circumstances.
Receive your data in a portable format.
At any time, where processing is based on consent.
You can exercise most of these rights directly in the app — editing or deleting inventory items, or deleting your account. For anything else, contact us at mcdangproductions@gmail.com. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been mishandled.
Frostbyte is not directed at children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.
We use industry-standard security measures to protect your data, including:
No system is 100% secure, but we take reasonable steps to protect your information from unauthorized access, loss, or misuse.
We may update this Privacy Policy from time to time. If we make material changes, we will notify you via the app or by email before the changes take effect. The "Last updated" date at the top of this policy reflects the most recent revision.
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact: