Legal

Privacy Policy

Last updated: October 2026

This policy explains what data emptea studios (“emptea”, “we”, “us”) collects when you use our mobile applications and websites, why we collect it, and what control you have over it. It applies to every app we publish on the Apple App Store and Google Play unless that app presents its own policy in-app.

Who is responsible

The data controller is emptea studios, operated by Maruthan Thanabalasingam, Switzerland. You can reach us at emptea.studios@gmail.com for any privacy question or request.

Data we collect

  • —Account data — email address and authentication identifiers, if the app offers accounts.
  • —Content you create — the entries, files, photos, or settings you save in the app.
  • —Device and usage data — device model, operating system version, app version, language, install identifiers, and anonymous usage events.
  • —Diagnostics — crash reports and performance traces.
  • —Support correspondence — anything you send us by email or through in-app feedback.

We do not collect precise location, contacts, health data, or payment card numbers unless an app explicitly asks for that permission and explains why at the moment it asks.

Why we use it

  • —To provide the app and the features you ask for.
  • —To keep your data in sync across your devices where the app offers that.
  • —To diagnose crashes, measure performance, and improve stability.
  • —To prevent abuse, fraud, and unauthorised access to accounts.
  • —To answer support requests and send service messages such as security notices.
  • —To meet legal obligations such as tax, accounting, and lawful requests from authorities.

Where the GDPR applies, we rely on the performance of our contract with you (providing the app), our legitimate interest (security, stability, and improvement), your consent (optional analytics, marketing, and permission-gated features), and legal obligation, as applicable to each purpose above.

Service providers

We use a small number of processors to run our apps: cloud hosting and database providers, authentication providers, analytics and crash-reporting services, push notification services, and email delivery. They process data only on our instructions and under contract. Purchases are handled entirely by Apple and Google — we never see or store your payment details.

We do not sell your personal data and we do not share it with advertising networks or data brokers.

International transfers

Our providers may process data outside Switzerland or the European Economic Area, including in the United States. Where that happens, transfers are covered by Standard Contractual Clauses or another recognised safeguard.

How long we keep it

Account and content data is kept while your account is active and deleted within 30 days of you deleting your account, except where we must keep records longer to satisfy a legal obligation. Diagnostics and aggregated usage data are retained for up to 24 months.

Your rights

Depending on where you live, you have the right to access, correct, export, restrict, or delete your personal data, to object to certain processing, and to withdraw consent at any time. Where an app has accounts, you can delete your account and all associated data from within the app's settings. You can also email emptea.studios@gmail.com and we will respond within 30 days. If you are in the EEA, Switzerland, or the UK, you may lodge a complaint with your local data protection authority.

Security

Data is encrypted in transit with TLS and at rest by our hosting providers. Access to production systems is restricted and authenticated. No system is perfectly secure, so please keep your device and credentials protected.

Children

Our apps are not directed at children under 13 (or under the equivalent age of digital consent in your country), and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, contact us and we will delete it.

friggy

friggy turns a photo of your fridge into recipe ideas. On top of everything above, this is the data friggy handles and who processes it.

  • —Sign in with Apple — your name, if you choose to share it, and the user identifier Apple issues for friggy. friggy does not ask Apple for your email address. Accounts run on Google Firebase.
  • —Fridge photos — sent to Mistral AI (France, EU) to recognise the ingredients, then discarded. We do not store your fridge photos.
  • —Recipes — the ingredient list is sent to Mistral AI, which writes the recipe text. The dish pictures are generated by Black Forest Labs (Germany, FLUX, EU servers) from the recipe text only; no photo or personal data is sent to them. The pictures are illustrations, not photos of real food. Your recipes are saved to your account.
  • —Plate photos — the photo you take of a finished dish is stored in Google Firebase together with the recipe name and date, as your private log. Only you can see your log.
  • —cooked today. — only if you tap “Share to cooked today.”, that plate photo, your first name, the recipe name and the cooking time become visible to other friggy users for about a day. Before others see a shared photo, it is checked automatically: OpenAI's moderation service receives the photo, the recipe name and your first name to screen for unsafe content, and Mistral AI receives the photo and recipe name to confirm it shows a meal. OpenAI is the only AI provider friggy uses outside the EU: it processes this data in the United States, under the safeguards described in “International transfers” above.
  • —Reports and blocks — when you report a post or block a user, we store the report and your block list so we can hide that content and review it.
  • —Subscriptions — friggy+ is sold and billed by Apple. RevenueCat receives your purchase receipts and your friggy account identifier to confirm your subscription. We count your scans each week to apply the free limit. We never see your payment details.
  • —Diagnostics and analytics — crash reports through Sentry, and a small number of product events through PostHog on its EU servers, linked to your friggy account identifier. No session recordings. friggy has no ads, does not use the advertising identifier and does not track you across other companies' apps or websites, so it never shows the App Tracking Transparency prompt.

Your recipes, log, plate photos and posts are kept while your account exists. You can delete your account at any time in friggy under Profile → Settings → Delete account. That deletes your profile, recipes, log, plate photos, shared posts, reports and blocks, and revokes friggy's access to your Apple ID. Deleting your account does not cancel a subscription; cancel it in your iPhone's Settings.

Changes

We may update this policy as our apps change. Material changes will be announced in-app or in the relevant store listing before they take effect, and the date above will be updated.

Contact

Privacy questions and requests: emptea.studios@gmail.com.