Privacy policy

Last updated: November 2, 2026

Translation. This is an English translation of the politique de confidentialité. The French version prevails in case of any discrepancy.

kaidashi is for keeping a grocery list together. We only keep what’s needed for that.

Who is responsible?

kaidashi is published by Emmanuel Gorre, as an individual, who is the data controller for your data. Contact: support@kaidashi.app.

Legal notice

• Publisher: Emmanuel Gorre, as an individual. Contact: support@kaidashi.app.
• Director of publication: Emmanuel Gorre.
• Host: OVH SAS, 2 rue Kellermann, 59100 Roubaix, France, phone: +33 9 72 10 10 07.

The data we process

Photos

A photo taken in the app is resized and re-saved by the app before it’s sent: it contains no metadata (no location, no device). It’s stored on our server at a random address that can’t be guessed, visible to the members of the household; anyone who had that address could display it. The cut-out “sticker” is computed on your phone. The photo is erased from the server once no item uses it anymore (see “How long we keep it”); its address then leads nowhere.

Barcodes and Open Food Facts

When you scan a product, the app sends the barcode to our server, which asks Open Food Facts, an open database, for the product’s name and image. Our server only sends the barcode: neither your identity nor your IP address. The result is kept in a cache shared by all users. If you give a name to an unknown product, that name (without yours) is suggested for 30 days to other people who scan the same code. The barcode isn’t saved in the item.

The image of a known product is then displayed from Open Food Facts’ servers: your phone connects to them directly, so Open Food Facts sees your IP address (see their privacy policy).

Notifications

After you sign in, the app registers your phone with our server using the identifiers above. Notifications go through the manufacturers’ services: Apple Push Notification service (APNs) for iPhone and Firebase Cloud Messaging (FCM, Google) for Android. A sync wake-up only contains the household’s technical identifier; a “new items” notification also contains the household name, the author’s first name, and the names of the items added. On Android, Google’s service also creates a Firebase installation identifier (Firebase Installation ID) on the phone, sent to Google to deliver notifications. Apple and Google may process this data outside the European Union (see “Transfers outside the European Union”). “Sign out” removes your phone from our server; deleting your account erases all your devices. You can turn off “new items” notifications in the app, or all notifications in your phone’s Settings.

Grocery calendar

If you turn on the grocery calendar for a household, our server creates a personal, secret subscription address for you, which you add to your calendar (Apple Calendar, Google Calendar, Outlook…). The feed contains the household name and the planned dates, nothing else: one day per date, with a link to the app, without item names or counts. The calendar service you choose reads this address, regularly and under its own rules, and keeps those days on its side. Our server only keeps a fingerprint of the address and doesn’t write it to its logs. The address is revoked when you reset it in the app, when you leave the household (or are removed from it), when the household is deleted, and when you delete your account.

On your phone

• A copy of your households and lists, changes waiting to be sent, photos waiting to be sent, a cache of scanned products, and your preferences, so the app works offline. “Sign out” erases the list, the pending changes, and the pending photos.
• Sign-in tokens, in the keychain (iOS) or in storage encrypted by the system (Android).
• The app’s installation identifier and the notification token, to receive notifications.
• The camera is used only for the scanner and for product photos. The image is analyzed on the phone (Apple Vision on iPhone, Google ML Kit on Android); only the photo you choose to add is sent.

Why we’re allowed to process it

• Performing the service you use (Article 6(1)(b) GDPR): account, households, list, sync, notifications, invites, photos, product lookup.
• Our legitimate interest (Article 6(1)(f)): security of the service (request limits, error logs) and the shared product cache, measuring usage and deleting inactive accounts (last activity date), internal statistics (app version, how an item was added), audience measurement for the website and the app.
• Your consent (Article 6(1)(a)): the website’s waitlist and Android test request, and only those. You can withdraw it at any time (see “The website’s waitlist” and “Android test”).

No advertising, no profiling. Camera access is a system permission, which you can withdraw in your phone’s Settings.

The website’s waitlist

Before the app came out, you could leave your email address on kaidashi.app so we could let you know when it launched. Sign-ups are closed; for people already on the list, nothing changes:

• Data: your email address, the sign-up date, and which form on the page you used. Nothing else: no name, no link to an app account.
• Purpose: sending you an email when kaidashi arrives on the App Store and Google Play. No other use, and it’s never passed on to anyone. No email is sent when you sign up.
• Legal basis: your consent (Article 6(1)(a) GDPR), given by submitting the form.
• Retention: until you unsubscribe, and at most 6 months after the app launches; the list is then erased.
• Leaving it: with the unsubscribe link included in each of our emails, or by writing to support@kaidashi.app. Your sign-up is then deleted.
• Hosting: on our server at OVH, in France, like the rest of the service. The IP address the form is sent from is used only to limit abuse (5 tries per 10 minutes), in memory, without being stored.

Android test

Before its public release on Google Play, kaidashi for Android is in closed testing. On kaidashi.app, you can ask to join the test by giving your Google account email.

• Data: your Google account email address and the date of the request. Nothing else: no name, no link to an app account.
• Purpose: adding you to kaidashi’s list of testers in the Google Play Console (done by hand by the publisher), so that Google offers you the app. No email is sent to you.
• Recipients: the publisher, who reads the address in our database (they get a “New Android test request” alert on Telegram that contains neither the address nor any other data about you); Google, when the address is added to the list of testers (Google already knows your account).
• Legal basis: your consent (Article 6(1)(a) GDPR), given by submitting the form.
• Retention: until the closed test ends (public release of the app on Google Play); the request and the Console’s list of testers are then erased.
• Leaving it: write to support@kaidashi.app; we delete your request and remove you from the list of testers.
• Hosting: on our server at OVH, in France. The IP address the form is sent from is used only to limit abuse (5 tries per 10 minutes), in memory, without being stored.

Connected assistants (Claude, ChatGPT)

You can connect kaidashi to an artificial intelligence assistant, such as Claude (Anthropic) or ChatGPT (OpenAI), to ask it to read or change your list. Nothing is sent until you connect it yourself, with the code shown on the assistant’s sign-in page, which you enter in the app.

• Data sent, with each request from the assistant: your households (name, number of members), their stores and their items (name, quantity, unit, store, “When?”, in the cart or not), and who added each item, as “you” or “another member”: never the other members’ first names. What you write to the assistant stays between you and it.
• Recipient: the provider of the assistant you chose (Anthropic PBC or OpenAI, for example), in the United States. It’s an independent controller: it processes this data under its own terms and its own privacy policy (Anthropic, OpenAI), including for its transfers outside the European Union and its safeguards. kaidashi only sends it this data at your request, for the service you asked for.
• On our side: the authorization (assistant, connection date, last use) and sign-in tokens kept as fingerprints, until you remove it (tokens expire after 90 days without use). Our logs keep neither your items nor what the assistant asks for.
• Removing access: in the app, Profile › Connected assistants › Disconnect. It’s immediate. Deleting your account also removes all your assistants.

Transfers outside the European Union

Our servers are in France. Some recipients may process data outside the European Union, in particular in the United States:

• Apple (Sign in with Apple, APNs notifications, app distribution) and Google (Sign in with Google, Firebase Cloud Messaging notifications, profile photo, Google Play services): for certified US companies, the transfer relies on the European Commission’s adequacy decision of July 10, 2023 (Data Privacy Framework, Decision (EU) 2023/1795); otherwise on the European Commission’s standard contractual clauses, as each states in its terms. The official list of certified companies is public: dataprivacyframework.gov.
• Anthropic and OpenAI, only if you connect their assistant: each provider describes its own safeguards in its privacy policy (see “Connected assistants”).
• Product Hunt (United States), only if you open the website’s home page: see “Product Hunt badge”.

Product Hunt badge

The website’s home page shows a “Product Hunt” badge whose image is loaded from Product Hunt’s servers, in the United States (it shows the number of votes live). Your browser connects to them directly: Product Hunt receives your IP address and the page’s address, under its own privacy policy. kaidashi sets no Product Hunt cookie and our server passes nothing on.

Minors

kaidashi can be used by the whole household, teens included. Under 15, a parent’s consent is needed to use the app (a parent can also create the household and invite their teen to it). There are no ads and no profiling, for anyone, and the list is only visible to the household’s members. A parent can write to us at support@kaidashi.app to have their child’s account deleted.

Audience measurement

To know how many people visit this website and which pages interest them, we use Umami, a free and open-source audience measurement tool, installed on our own server at OVH in France. It sets no cookies, doesn’t store your IP address, and doesn’t follow you from one website to another: it only produces aggregate statistics (pages viewed, country, device type, the website you came from) that can’t be used to identify you. Page addresses are recorded without their parameters, and your browser’s “Do Not Track” and Global Privacy Control (GPC) settings are respected: the website doesn’t count you. No data is passed on to any third party. Statistics are kept for 25 months at most, then erased. Legal basis: our legitimate interest in knowing how the website is used (Article 6(1)(f) GDPR).

The app contains no audience measurement tool. It only sends a few anonymous usage events to our server (for example “rating prompt requested”), which passes them on to this same Umami: the event name, the platform (iPhone or Android) and the app version, nothing else. No account, household or device identifier, and not your IP address. Legal basis: our legitimate interest in knowing how the app is used (Article 6(1)(f) GDPR).

Who can see your data

• The members of your households: your first name, your Google profile photo if there is one, your role, the list, the photos, who added and who got each item. Their phones display your profile photo by loading it from Google’s servers.
• Host (processor): kaidashi’s server (database, photos, live updates) is rented from OVH SAS, 2 rue Kellermann, 59100 Roubaix, France, and administered by the publisher. Your data is stored in France; hosting involves no transfer outside the European Union. Exchanges go over HTTPS.
• Open Food Facts: scanned barcodes (sent by our server), and your IP address when your phone displays a product image.
• Apple and Google: to sign in, you identify yourself with them under their own rules; they therefore know you use kaidashi. They also distribute the app. If you agreed to share analytics with developers in your phone’s settings, they may send us anonymous crash reports. On Android, barcode reading and cut-outs go through Google Play services (ML Kit), which run on the phone: no image is sent; Google may receive technical diagnostic data from them, under its own terms.
• Apple Push Notification service and Firebase Cloud Messaging (service providers): they receive your phone’s notification token and the content of each notification (see “Notifications”), only to deliver it.
• Your assistant’s provider (Anthropic, OpenAI…), only if you connect one: your households, stores, and items (see “Connected assistants”).
• Product Hunt: your IP address, when your browser displays the badge on the website’s home page.

Transfers outside the European Union and their safeguards are described in “Transfers outside the European Union”.

We don’t sell or rent any data, and we don’t pass any on to anyone else, unless required by law.

How long we keep it

• Account, first name, profile photo link, and sign-in identity: as long as your account exists; erased when you delete it (see “Deleting your account”).
• Connected assistants: until you disconnect them or delete your account.
• Households, items, stores: a deleted item or store (or a cleared cart) disappears from the phones, but a trace (name, quantity, dates) stays in the server’s database, which sync needs; after 90 days, this trace loses its content (name, quantity, link): only an identifier and dates remain. When a household is deleted (its last member leaves it or deletes their account), its items, stores, and invites are erased from the server; only a trace of the household (name, dates) remains, with no content, and it’s erased in turn after 90 days. The identifiers of the changes sent by your devices (which keep them from being applied twice) are erased after 90 days. After your account is deleted, none of this is linked to your first name or your identity anymore.
• Photos: erased from the server about an hour after their item is deleted (time enough to undo it), right away when you replace them or remove them from the item, and right away when their household is deleted (last member gone or account deleted). A photo that was sent but never attached to an item is erased after 24 hours. A photo still used by another item is kept.
• Invites: usable for 7 days, then erased 30 days after they expire; the ones you created that weren’t used are erased with your account.
• Refresh tokens: valid for 60 days, revoked when you sign out, erased 30 days after they expire or are revoked, and with your account. The Apple token is kept as long as your account exists, then revoked with Apple and erased. Revoked calendar addresses and assistant access are erased 30 days after they’re revoked.
• Device identifiers for notifications: as long as your phone is signed in; erased when you sign out, when Apple or Google reports the token as invalid, and with your account.
• App version: erased with the device (sign-out, invalid token, deleted account). How an item was added: erased with the item.
• Last activity date: replaced with each activity, erased with your account. An account with no activity for 2 years is deleted, after a notification on your devices 30 days before. If no device is registered for notifications, it’s deleted the same way, without a notification. The deletion is the same as in “Deleting your account”.
• Server error logs: limited in size (5 files of 10 MB per service); the oldest are overwritten.
• Product cache: no limit for names coming from Open Food Facts, 30 days of validity for a name entered by a user, 7 days for a product that wasn’t found.
• Waitlist: until you unsubscribe, at most 6 months after the app launches.
• Android test request: until the closed test ends, then erased.
• Audience measurement: statistics kept for 25 months at most.

Your rights

You can access your data, have it corrected (you can change your first name in the app), have it erased, restrict its processing, object to it, or ask for a copy (portability, in a readable JSON file). Write to support@kaidashi.app from the address of your Apple or Google account; we may ask you for some information to check that the account is really yours. We reply within one month.

Deleting your account

In the app: profile › Delete my account, then “Delete” (internet connection required). It’s immediate and permanent:

• you leave all your households; the ones where you were the only member are deleted along with their list, and their photos are erased;
• your account, your first name, the link to your Google profile photo, your Apple or Google sign-in identities, your sign-in tokens, your devices registered for notifications, your connected assistants, and your unused invites are erased;
• if you signed in with Apple, we ask Apple to revoke kaidashi’s access to your Apple ID;
• the items and stores you created in a shared household stay there for the other members (they’re part of their list), without your first name: the app shows “Someone”;
• the kaidashi data on your phone is erased.

The simplest and safest way is to delete your account in the app. Without the app, write to support@kaidashi.app from the address of your Apple or Google account (see also the support page): we’ll do the same deletion and confirm it with you. You can also remove kaidashi’s access to your account in your Apple settings (Apple ID › Sign in with Apple) or Google settings (Security › Third-party apps with account access).

If you believe your rights aren’t being respected, you can file a complaint with the CNIL, the French data protection authority (cnil.fr).

Security

Encrypted connections (HTTPS), refresh tokens kept as fingerprints, a database with no access from the internet, tokens stored in the phones’ secure storage.

Changes

If this policy changes, the date at the top of the page is updated. In case of a significant change (a new service provider, a new kind of data), we’ll point it out in the app or on this website.