Privacy Policy

Published: September 7, 2026

This Policy is drawn up in accordance with Russian Federal Law No. 152-FZ of 27 July 2006 “On Personal Data” and sets out how personal data of Cook My Fridge users is processed.

The data controller is Individual entrepreneur Alexey Nikolaevich Bystritsky, OGRNIP 320508100228680, INN 500506911869 (the “Operator”).

1. What data we process

1.1. The Operator keeps data to a minimum: the Service has no accounts and no sign-up, and does not ask for your name, gender, age, phone number or address.

1.2. The Operator processes:

• an anonymous installation identifier — generated on the device and not linked to your identity;
• an email address — only if you take out a subscription or contact support;
• payment information: payment identifier, amount, currency, plan, status, date, subscription identifier at the payment provider;
• photos of products and dishes, and your text and voice requests — for recognition and recipe selection;
• technical data: app version, platform, request date, anonymised usage statistics;
• the content of support enquiries.

1.3. The Operator does not store full bank card details. Payment details are processed by the payment provider and the acquiring bank.

1.4. The Operator does not request special categories of personal data — health, racial or ethnic origin, political opinions, religious beliefs or sex life. Users must not submit such information to the Service.

2. Why we process data

• recognising products and dishes from photos, suggesting recipes, calculating calories;
• providing paid access, processing payments, renewals, cancellations and refunds;
• restoring access to a subscription on another device using an email address;
• supporting users and handling enquiries;
• keeping the Service working and secure;
• analysing app quality and usability from anonymised usage statistics;
• measuring advertising performance — which campaigns bring users and which of them subscribe;
• complying with legal obligations.

3. Legal basis

3.1. Processing is based on the User’s consent, on performance of the contract (the public offer), and on the Operator’s legal obligations.

3.2. Consent to processing is given when the User starts using the Service; consent to sharing materials with artificial intelligence providers is given by a separate action in the app.

4. Storage and sharing

4.1. Photos of products and dishes are stored on the User’s device. They reach the Operator’s servers only for the duration of a request and are not retained afterwards.

4.2. For recognition and recipe selection, materials are shared with artificial intelligence providers. The list of providers and the data shared is set out on a separate page: https://cookmyfridge.app/en/ai.

4.3. Part of the Operator’s infrastructure is located in the Kingdom of the Netherlands, a country providing adequate protection of data subjects’ rights. Cross-border transfer is carried out under Article 12 of Federal Law No. 152-FZ.

4.4. Data may be shared with payment providers (including CloudPayments) and app stores to the extent needed for payment and for confirming a subscription.

4.5. Anonymised usage statistics and purchase events are shared with analytics and advertising attribution providers: AppMetrica (YANDEX LLC) — usage statistics, crashes and revenue; Meta Platforms Ireland Limited — purchase events used to measure advertising performance. These providers receive data only to the extent needed for those purposes and do not receive photos, the food diary or the contents of requests sent to the models.

4.6. The device advertising identifier (IDFA on iOS, AAID on Android) is shared for advertising measurement only with the User’s consent, requested in a separate system prompt. Declining does not affect how the app works; consent can be withdrawn in the device settings.

4.7. The Operator does not sell personal data and does not share it with third parties for their own advertising.

5. Retention

5.1. Payment and subscription records are kept for the period required by accounting and tax legislation.

5.2. An email address is kept while the subscription is active and while it is needed to restore access.

5.3. Materials submitted for recognition are not retained by the Operator after the request is processed.

5.4. Once the purposes of processing are achieved, data is deleted or anonymised.

6. Your rights

6.1. You may obtain information about the processing of your personal data, request that it be corrected, blocked or deleted, and withdraw your consent.

6.2. Send your request to alexey.bystritsky@gmail.com. We reply within 30 calendar days.

6.3. Withdrawing consent to share materials with artificial intelligence providers means the recognition features can no longer be used.

6.4. Local app data can be removed by deleting the app from the device.

7. Security

7.1. Connections to the Operator’s servers are encrypted and access to data is restricted.

7.2. The Operator takes legal, organisational and technical measures to protect personal data against unlawful access, destruction, alteration, blocking, copying and disclosure.

8. Children

8.1. The Service is rated 12+. The Operator does not knowingly collect data from children below that age.

9. Changes

9.1. The Operator may amend this Policy. A new version takes effect when published on the Website.

10. Contact

Individual entrepreneur Alexey Nikolaevich Bystritsky

OGRNIP: 320508100228680, INN: 500506911869

Email: alexey.bystritsky@gmail.com