Privacy policy

This policy explains how Whatever's In handles information when you use the app.

Information we handle

• Account information from Firebase Authentication, such as your account identifier, email address, and sign-in provider.
• Information you add to Whatever's In, including pantry items, recipes, meal plans, preferences, feedback, and subscription status.
• Device tokens when you enable notifications, and basic app and device diagnostics needed to operate and troubleshoot the service.

Photos, AI, and voice input

When you scan food or a receipt, the selected image is sent securely to our backend and Google's Gemini service to identify items. The returned information is added to your account only when you choose to save it. A recipe photo you explicitly upload is stored with that recipe until you remove it. Do not include people or unrelated sensitive information in scan photos.

Recipe, meal-plan, and other AI requests send the text and relevant larder or preference details needed to answer your request to Google's Gemini service. Google processes this information to provide the requested feature.

Voice input is push-to-talk and starts only after you tap the microphone. Whatever's In does not send microphone audio to its backend; the device's operating-system speech recognizer produces text for the feature. If you submit that text in an AI request, the text is sent as described above. The device platform's own speech-recognition privacy terms also apply.

Optional training-data consent

This setting is off by default. If you opt in, selected recipe photos, corrections, and certain AI-generation inputs may be retained for service and model-quality improvements. You can change your consent in Settings. AI-generation replay data associated with this consent is retained for up to 180 days. Sharing scan photos is a separate, optional setting, off by default, and is also offered in context when you confirm a scan correction or report a missed or empty scan. Only screened scan photos are uploaded; photos with detected faces or payment details are skipped, and image metadata is removed.

Scan photos are kept in private storage. Photos not promoted to the evaluation set, including reviewed candidates, are deleted after 90 days. Promoted photos may be retained without that time limit while photo consent remains active. Turning off scan-photo consent deletes staged and promoted scan-photo objects; deleting your account also removes them. Photos are cropped around corrected or removed items when a bounding box is available. Full-frame photos are used only for scans that missed an item or returned no items.

Analytics, crash reports, and subscriptions

Firebase Analytics records app interaction events. Firebase Crashlytics receives crash reports and diagnostic details such as stack traces and app/device information. Both collection settings follow your in-app analytics consent.

RevenueCat processes subscription and entitlement information using your app account identifier to support purchases and subscription status. Payments are completed by Apple or Google; Whatever's In does not receive your full payment-card details.

Storage, sharing, and deletion

Account and app data is stored using Firebase services. We share only the information needed with the providers described above to operate the feature you use. We do not sell personal information.

You can request account deletion in the app or on our account deletion page. Deletion is scheduled with a 30-day grace period; the app explains how to cancel a pending request. Some information may remain in backups or records we must keep for legitimate operational or legal purposes.

Changes

We may update this policy as Whatever's In changes. The current version will always be available at this address.