Contents
✅ Short version: We collect only what's needed to run the app. We never sell your data. You can delete your account and all associated data at any time.
1. Who we are
Expiry is a mobile application developed by KYY Technologies Inc and TebCal Corp ("we," "our," or "us"). Our service helps users track expiration dates of food, medications, and personal care products.
You can reach us at [email protected].
2. What information we collect
We collect the following information when you use Expiry:
Account information
- Email address — used to create your account, send notifications, and allow password recovery
- Name (optional) — used to personalize your experience within the app
- Password — stored as a one-way cryptographic hash; we cannot read your password
Pantry data
- Product names, brands, and expiration dates you enter or scan
- Barcodes you scan — transmitted to Open Food Facts, Open Beauty Facts, and Open Products Facts to look up product name and details. These are open, community-maintained databases. Only the barcode number is sent; no account information is included.
- Food ingredient names from your pantry — transmitted to Spoonacular when you request recipe suggestions. Only the names of food items you have marked as expiring soon are sent; no personal identifiers are included.
- Product categories (food, medicine, personal care)
Device information
- Push notification token — a device identifier provided by Expo's notification service, used solely to deliver expiry alerts to your device
Usage information
- We do not currently collect analytics or usage tracking. We may add anonymous, aggregate usage metrics in the future and will update this policy accordingly.
What we do NOT collect
- We do not collect your location
- We do not access your photo library or contacts
- We do not use third-party advertising or tracking SDKs
- We do not build behavioral profiles or sell data to advertisers
3. How we use your information
We use the information we collect for the following purposes:
- Providing the service — creating and managing your account, storing your pantry inventory, and displaying expiration information
- Sending notifications — alerting you via push notification and/or email when products in your pantry are approaching their expiration date, based on your preferences
- Security — detecting and preventing unauthorized access to your account
- Customer support — responding to your questions and requests
- Product improvement — understanding how people use Expiry so we can make it better (using only anonymous, aggregated data)
We will not use your information for any purpose not listed here without first obtaining your consent.
4. How we share information
We do not sell, rent, or trade your personal information. We share information only in the following limited circumstances:
- Expo (push notifications) — your push notification token is transmitted to Expo's push notification service (expo.dev) solely to deliver alerts to your device. Expo's privacy policy applies to their handling of this data.
- Email delivery — we use an SMTP email provider to deliver verification and notification emails. Your email address is transmitted to this provider solely for delivery purposes.
- Open Food Facts / Open Beauty Facts / Open Products Facts — when you scan a barcode, the barcode number is sent to these open databases to retrieve product information. No personal data is transmitted. These databases are operated under the Open Database License (ODbL). See openfoodfacts.org.
- Spoonacular — when you request recipe suggestions, the names of your expiring food items are sent to Spoonacular's API to retrieve matching recipes. No personal identifiers are included in these requests. See Spoonacular's Terms.
- Legal requirements — we may disclose your information if required to do so by law or in response to valid legal process.
- Business transfer — if Expiry is acquired or merged, your data may transfer to the new entity. We will notify you before this occurs and give you the opportunity to delete your account.
5. Third-party services
Expiry integrates with the following third-party services to provide its features. We encourage you to review their privacy policies:
Open Food Facts, Open Beauty Facts, Open Products Facts
These are open, community-contributed databases used to retrieve product information when you scan a barcode. When you scan a product, the barcode number is sent to these services. No personal data is transmitted. The databases are available under the Open Database License (ODbL).
Spoonacular
When you request recipe suggestions in the app, the names of your expiring food items are sent to Spoonacular's API. No personal identifiers, account information, or barcode data are included in these requests. Recipe data is provided by Spoonacular and subject to their terms.
Expo (push notifications)
Push notification delivery is handled through Expo's notification infrastructure. Your device push token is transmitted to Expo solely to route alerts to your device. See Expo's Privacy Policy.
We do not share your personal account information (email, name, or password) with any of the above services.
6. Data storage and security
Your data is stored on servers we operate and control. We implement industry-standard security measures including:
- Encrypted connections (HTTPS/TLS) for all data in transit
- Bcrypt hashing with a cost factor of 12 for all passwords
- JWT tokens with a 30-day expiration for session management
- Server-side access controls and firewalls
No method of data transmission or storage is 100% secure. If you believe your account has been compromised, please contact us immediately.
We retain your account and pantry data for as long as your account is active. When you delete your account, all associated data is permanently deleted from our systems within 30 days.
Used item history
When you mark a product as "used" in the app, it moves to your History tab. These records are automatically and permanently deleted from our servers after 60 days from the date you marked the item as used. You may also delete any used item from your History manually at any time.
7. Push and email notifications
Expiry sends notifications to remind you about expiring products. You control these notifications:
- Push notifications — you can enable or disable them in the app's Notifications settings, or through your device's system settings at any time
- Email notifications — you can enable or disable them in the app's Notifications settings; you can also set the frequency (daily or weekly) and how many days in advance you'd like to be alerted
We will never send marketing emails without your explicit consent. Transactional emails (account verification, password reset) are sent regardless of notification preferences.
8. Your rights and choices
Regardless of where you live, you have the following rights regarding your personal information:
- Access — you can view all the data stored in your account through the app at any time
- Correction — you can update your name, email preferences, and pantry data directly in the app
- Deletion — you can delete individual products from your pantry, or request full account deletion by contacting us at [email protected]
- Portability — you can request a copy of your data in a machine-readable format
- Opt-out of notifications — you can disable all notifications at any time through the app settings or your device settings
California residents may have additional rights under the California Consumer Privacy Act (CCPA). To exercise any of these rights, please contact us.
9. Children's privacy
Expiry is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately and we will delete the information.
10. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will notify you through the app or via email before the changes take effect.
Your continued use of Expiry after any changes constitutes your acceptance of the updated policy.
11. Contact us
If you have questions about this Privacy Policy or how we handle your data, please reach out:
We aim to respond to all privacy-related requests within 5 business days.