Privacy Policy

Who we are

fufu is a food safety application developed and operated by Fufu Technologies B.V., a company registered in Amsterdam, the Netherlands. Our app helps households manage dietary requirements, allergies, and intolerances by scanning grocery products and restaurant menus.

For questions about this policy or your personal data, you can reach us at privacy@getfufu.app.

Data we collect

We collect the following categories of personal data:

• Account data: your email address, used to authenticate you and send you important product updates.
• Household profiles: names and, for each person you add, the information the safety check needs — allergies and intolerances, age group (including pregnancy and breastfeeding, and infant and toddler bands), diet preference, and faith ruleset. Allergies, intolerances and age group describe health. A faith ruleset reveals religious belief. Both are given special protection in law, and we treat them accordingly — see the sections below.
• Scan history: the products and menu items you scan, what was flagged, and when. If you switch on location for scans, we also record the shop or restaurant name and city. Location is off by default. You can turn it off at any time, and doing so erases the location already recorded — not just future scans.
• Pet profiles: species and any ingredients your dog or cat reacts to.
• Usage data: anonymised analytics about how you use the app (screens visited, features used) to help us improve the product. This data does not identify you personally.
• Device data: operating system version, device model, and app version, used for technical support and crash reporting.

Legal basis for processing

Under the General Data Protection Regulation (GDPR), we process your personal data on the following legal bases:

• Contract performance (Art. 6(1)(b) GDPR): processing your account data and household profiles is necessary to provide the fufu service you have signed up for.
• Legitimate interests (Art. 6(1)(f) GDPR): we process anonymised usage and device data to maintain and improve the app.
• Explicit consent (Art. 9(2)(a) GDPR): some of what fufu needs is special category data — data given extra protection because of how revealing it is. For fufu that means:
  • Health data — allergies, intolerances, and the age groups that describe a physical state, including pregnancy, breastfeeding, and infant and toddler bands.
  • Religious or philosophical belief — the faith ruleset on a profile (Halal, Kosher, Hindu, Jain), and diet preferences held as a matter of belief, such as vegan or vegetarian.
  We collect each of these only with your explicit, separate consent. You are asked for it directly during setup, we record which version of this policy you agreed to, and you can withdraw any of them at any time without losing access to the rest of the service.
• Consent (Art. 6(1)(a) GDPR): recording where a scan happened is optional and off unless you switch it on. It is never required to use fufu.

What we deliberately do not do

• We never sell or share your personal data, under any definition used in European or United States law. We have no advertising business and no data partners.
• We do not use your data to infer anything about youbeyond running the safety check you asked for. Your scans are not analysed to guess your health, your beliefs, or your household’s circumstances.
• We do not store a verdict history.When you look at a past scan, the result is worked out fresh from each person’s current profile. It means editing or deleting a profile takes effect everywhere at once, and there is only ever one copy of the sensitive information.
• We do not keep scan history indefinitely. Scans are erased automatically after 24 months by default, and you can shorten that to as little as one month. Shortening it applies to history you already have.

How we use your data

• To authenticate your account and keep it secure.
• To check products and menus against the dietary profiles you have configured.
• To send you safety recalls for products you have previously scanned.
• To send transactional emails (magic link sign-ins, account notices).
• To improve the app based on aggregated, anonymised usage patterns.

We do not sell your personal data. We do not use your data for advertising. We do not share your data with third parties except as described in the section below.

Data processors and third parties

We use a limited number of trusted third-party services to operate fufu. Each is bound by a Data Processing Agreement with us.

• Supabase (Ireland, eu-west-1): our database and sign-in provider. Your household profiles, scan history and account details are stored on servers in Ireland, inside the European Union — including for customers in North America. We chose to keep everything in one place rather than move sensitive data to whichever region is nearest.
• Vercel (Dublin, EU): hosts this website. Requests are served from the European Union. Vercel does not store your household data — it runs the site, and the data lives in Supabase.
• Paddle: our payment provider, acting as the seller of record. Paddle collects and holds your payment details, billing address and tax information, and issues your invoices. Paddle never receives any information about your household, your health or your beliefs.
• Open Food Facts: a public, open-source food product database used to look up product information from barcodes. Queries contain only the barcode number — no personal data is sent.

Data retention

• Household profiles are kept while your account is open, because the service cannot work without them.
• Scan history is erased automatically after 24 months. You can shorten this to as little as one month in settings, and the change applies to history you already have.
• Scan locations are erased the moment you switch location off.
• Device and session records are kept for 90 days after last use.
• Consent records are kept for three years after withdrawal, because we are required to be able to show that consent was properly obtained.

If you delete your account it closes immediately and is recoverable for 30 days, after which your profiles, scan history and settings are permanently erased.

One exception we want to be honest about: records of payments cannot be deleted on request. Dutch law requires us to keep financial records for seven years, and our payment provider keeps them as the seller of record. These records contain your name, billing address and what you paid — never anything about your household, your health or your beliefs.

Your rights

Under the GDPR, you have the following rights:

• Access: you may request a copy of the personal data we hold about you.
• Rectification: you may correct inaccurate data at any time from within the app.
• Erasure: you may request deletion of your account and all associated data.
• Portability: you may request your data in a structured, machine-readable format.
• Withdrawal of consent: where processing is based on consent, you may withdraw it at any time.
• Objection: you may object to processing based on legitimate interests.

To exercise any of these rights, email privacy@getfufu.app. We will respond within 30 days. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

Cookies and tracking

The fufu web app uses only functional cookies required for authentication (session token). We do not use tracking cookies, advertising cookies, or third-party analytics cookies. The mobile app does not use cookies.

If you are in the United States

fufu is operated from the Netherlands and serves people across the United States. The rights below are in addition to, not instead of, everything described above — we apply one standard everywhere rather than a weaker one outside Europe.

Health data.Washington State’s My Health My Data Act, and similar laws in Nevada and elsewhere, treat information about health, wellness and nutrition as consumer health data. That covers most of what a fufu profile contains. We publish a separate Consumer Health Data Privacy Policy describing exactly how it is handled, as those laws require.

Sensitive personal information.Under California’s CPRA and comparable laws in Virginia, Colorado, Connecticut, Texas, Oregon, Maryland and other states, health information, religious belief and precise location are sensitive personal information. We ask for your affirmative consent before collecting any of them, we use them only to run the safety check you asked for, and we never use them to infer anything further. There is nothing to opt out of, because there is no secondary use.

Depending on your state, you have the right to:

• Know what personal information we hold and get a copy of it.
• Correct information that is wrong.
• Delete your information.
• Limit how we use sensitive personal information.
• Opt out of sale, sharing, targeted advertising and profiling. We do none of these, so there is nothing to opt out of — but we will confirm that in writing if you ask.
• Appeal if we refuse a request, and to contact your state Attorney General.
• Not be treated differently for exercising any of these rights.

We honour the Global Privacy Control browser signal. We respond to requests within 45 days, extendable once where the law allows.

If you are in Canada

We handle your information in line with PIPEDA and, in Quebec, Law 25. Health information and religious belief are sensitive information under both, and we ask for your express consent before collecting either. You may request access, correction, deletion and portability using the same contact details below, and you may complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d’accès à l’information.

Children

The account holder must be an adult. fufu is not directed at children, and if you are under 16 (or the age of digital consent where you live) please do not create an account.

You can, of course, add children to your household as profiles — that is much of the point of fufu, and the age groups include infants and toddlers. When you do, you are providing health information about a child in your care, and you confirm you are their parent or guardian. We hold it under the same protections as everything else in this policy, we never use it for anything except the safety check, and it is erased when you delete the profile or the account.

We do not knowingly collect information directly from a child, and fufu has no child-facing features.

Changes to this policy

We may update this policy from time to time. We will notify you of material changes by email or via an in-app notice at least 14 days before the change takes effect. The date at the top of this page always reflects the most recent version.