Privacy Policy

Published: September 7, 2026

This Policy is drawn up in accordance with Russian Federal Law No. 152-FZ of 27 July 2006 “On Personal Data” and sets out how personal data of Cook My Fridge users is processed.

The data controller is Individual entrepreneur Alexey Nikolaevich Bystritsky, OGRNIP 320508100228680, INN 500506911869 (the “Operator”).

1. What data we process

1.1. The Operator keeps data to a minimum: the Service has no accounts and no sign-up, and does not ask for your name, gender, age, phone number or address.

1.2. The Operator processes:

• an anonymous installation identifier — generated on the device and not linked to your identity;
• an email address — only if you take out a subscription or contact support;
• payment information: payment identifier, amount, currency, plan, status, date, subscription identifier at the payment provider;
• photos of products and dishes, and your text and voice requests — for recognition and recipe selection;
• technical data: app version, platform, request date, anonymised usage statistics;
• the content of support enquiries.

1.3. The Operator does not store full bank card details. Payment details are processed by the payment provider and the acquiring bank.

1.4. The Operator does not request special categories of personal data — health, racial or ethnic origin, political opinions, religious beliefs or sex life. Users must not submit such information to the Service.

2. Why we process data

• recognising products and dishes from photos, suggesting recipes, calculating calories;
• providing paid access, processing payments, renewals, cancellations and refunds;
• restoring access to a subscription on another device using an email address;
• supporting users and handling enquiries;
• keeping the Service working and secure;
• complying with legal obligations.

3. Legal basis

3.1. Processing is based on the User’s consent, on performance of the contract (the public offer), and on the Operator’s legal obligations.

3.2. Consent to processing is given when the User starts using the Service; consent to sharing materials with artificial intelligence providers is given by a separate action in the app.

4. Storage and sharing

4.1. Photos of products and dishes are stored on the User’s device. They reach the Operator’s servers only for the duration of a request and are not retained afterwards.

4.2. For recognition and recipe selection, materials are shared with artificial intelligence providers. The list of providers and the data shared is set out on a separate page: https://cookmyfridge.app/en/ai.

4.3. Part of the Operator’s infrastructure is located in the Kingdom of the Netherlands, a country providing adequate protection of data subjects’ rights. Cross-border transfer is carried out under Article 12 of Federal Law No. 152-FZ.

4.4. Data may be shared with payment providers (including CloudPayments), app stores and analytics services to the extent needed for payments, for the app to work and for its improvement.

4.5. The Operator does not sell personal data and does not share it for third-party advertising.

5. Retention

5.1. Payment and subscription records are kept for the period required by accounting and tax legislation.

5.2. An email address is kept while the subscription is active and while it is needed to restore access.

5.3. Materials submitted for recognition are not retained by the Operator after the request is processed.

5.4. Once the purposes of processing are achieved, data is deleted or anonymised.

6. Your rights

6.1. You may obtain information about the processing of your personal data, request that it be corrected, blocked or deleted, and withdraw your consent.

6.2. Send your request to alexey.bystritsky@gmail.com. We reply within 30 calendar days.

6.3. Withdrawing consent to share materials with artificial intelligence providers means the recognition features can no longer be used.

6.4. Local app data can be removed by deleting the app from the device.

7. Security

7.1. Connections to the Operator’s servers are encrypted and access to data is restricted.

7.2. The Operator takes legal, organisational and technical measures to protect personal data against unlawful access, destruction, alteration, blocking, copying and disclosure.

8. Children

8.1. The Service is rated 12+. The Operator does not knowingly collect data from children below that age.

9. Changes

9.1. The Operator may amend this Policy. A new version takes effect when published on the Website.

10. Contact

Individual entrepreneur Alexey Nikolaevich Bystritsky

OGRNIP: 320508100228680, INN: 500506911869

Email: alexey.bystritsky@gmail.com