Durat — Privacy Policy
Last updated: 6 October 2026 Published at https://durat.app/privacy
Summary
Durat works fully without an account, and then your food data never leaves your device. If you choose to create an account, your fridge, history and shopping list are saved to your account on our server so they follow you to another phone, and we use that data to understand how the app is used and improve it. We show no ads, use no analytics SDKs, and never sell or share your data with advertisers.
Accounts (optional)
Durat works fully in guest mode — no account, no email, nothing sent to our server.
If you choose to sign in, you can do so with an email address and password, or with Sign in with Apple. Authentication is operated for us by Supabase (supabase.com), which stores your email address, a hashed password, and an account identifier. With Sign in with Apple you may choose Apple's private relay address, in which case we never see your real address.
Signing in saves your fridge, history and shopping list to your account (see below), plus your personal scan history and contributions to the shared product database.
Data we process
Stored only on your device:
- In guest mode: everything — food items, history, statistics, shopping list
- Always: app settings (language, theme, notifications, category icons, calendar)
You can export this data (backup/CSV) and delete it at any time by deleting items or uninstalling the app. Uninstalling removes all locally stored data.
Stored on our server (only while you are signed in):
- Your fridge, history and shopping list: every item with its name, expiry, added/opened/thawed dates, quantity, price, category, storage place, barcode, brand, package size, emoji, product photo link, nutrition and any notes you write; every item you marked as eaten or thrown away, with its date, quantity, price, category, storage place, expiry and nutrition; and your shopping list (names, quantities, ticked state). Stored by Supabase and linked to your account identifier so they sync between your devices. We also analyse this data to improve Durat — for example which foods are most often thrown away. Signing out removes it from the phone; it stays in your account until you delete the account.
- Scan log: when you scan a barcode, we store the barcode, product name, category, brand, package size, and nutrition values, linked to your account identifier. This lets you see what you have scanned before. Guest sessions have no account identifier and these records are rejected — nothing is stored.
- Shared product database: confirmed product details (barcode, name, category, brand, package size, nutrition) are added to a community product catalogue so other users get faster lookups. These entries describe the *product*, not you, and are not linked to your account identifier.
- Nutrition submissions: when you confirm a product's nutrition from a photographed label, we store the barcode and the four macro values, linked to your account identifier. This lets us cross-check readings for the same product against other users' submissions to improve accuracy.
Processed transiently for features you trigger:
- Label photos (OCR): expiry dates and nutrition labels are read on your device first. If on-device recognition cannot make sense of them, the text it read — or, only when nothing could be read at all, the photo itself — is sent to our own service running on Cloudflare Workers AI for interpretation. Photos and text are used only to return the result and are not stored by us. See Cloudflare's privacy policy for their processing terms.
- Barcodes: product barcodes you scan are sent to Open Food Facts (openfoodfacts.org) and to UPC Item DB (upcitemdb.com) to fetch the product name and nutrition data. Both requests are made, because UPC Item DB fills in names Open Food Facts does not have. Barcodes sent to either service are not linked to your identity.
- Product photos: where Open Food Facts has a photograph of a product you scanned, your device fetches that image from their image servers to show on the item. This is an ordinary image request and carries no identifier of you beyond your IP address, which every web request carries.
- Recipe search: names of expiring ingredients are sent to TheMealDB (themealdb.com) to fetch matching recipes.
Third-party processors
- Supabase — authentication, synced fridge data, scan log, shared product database
- Cloudflare — runs our label-reading service (Workers AI)
- Open Food Facts — product lookup
- UPC Item DB — product-name lookup where Open Food Facts has no entry
- TheMealDB — recipe lookup
- Apple — Sign in with Apple, app distribution
What we do NOT do
- No advertising, no ad tracking, no analytics SDKs
- No sale or sharing of personal data
- No marketing emails (we have no email list)
Notifications
Expiry reminders and the daily digest are scheduled locally on your device. Disable them anytime in the app's Settings or in iOS Settings → Notifications → Durat.
Your rights (EU/GDPR)
In guest mode, all your data lives on your device, so you exercise most rights directly: access and portability via the in-app backup export, erasure by deleting items or uninstalling. If you are signed in, your fridge, history and shopping list also live on our server — see below for how to delete them.
You can delete your account from inside the app: Settings → Account → Delete account. This removes your account, your synced fridge, history and shopping list, your scan log, and your nutrition submissions from our server immediately, and also erases everything Durat stores on the device itself. It cannot be undone. Entries you contributed to the shared product catalogue remain, because they describe products and are not linked to you.
For access, correction, or export of that data, contact us at [email protected]; we will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.
Legal bases: performance of contract (providing your account, syncing your data and your scan history), legitimate interest (improving Durat by analysing signed-in users' data, fulfilling the OCR, product-lookup, and recipe features you trigger, and maintaining the shared product catalogue). You can object to the analysis by writing to [email protected] or by deleting your account.
Children
Durat is not directed at children under 13 and does not knowingly process their data.
Changes
We will update this policy here and change the date above. Material changes will be noted in the App Store release notes.