Privacy Policy

Inflato · Last updated: July 2026

1. Data Controller

The controller responsible for data processing in this app is:

Daniel Spatz
Schleißheimer Straße 171
80797 Munich, Germany
Email: inflato@gmx.de

2. What data is collected?

Data stored locally on your device:
All products and price entries you add in the app are stored exclusively on your device (a JSON file in the app's directory).

If you use an account (optional):
If you create an account, the following additional data is processed:

• Email address (for login and account management)
• Your saved products and price data (for synchronization between devices)
• Device token (for push notifications, if enabled)

Product search (optional):
If you use the barcode search, a request is sent to the Open Food Facts API (openfoodfacts.org). Open Food Facts is a non-profit, public database. No personal data is transmitted in the process.

3. Legal basis

Your data is processed on the basis of:

• Art. 6(1)(a) GDPR (consent) – for account creation
• Art. 6(1)(b) GDPR (performance of a contract) – to provide the app's functions
• Art. 6(1)(f) GDPR (legitimate interest) – to improve the app

4. Service providers (data processors)

Supabase (only if you use an account):
We use Supabase (Supabase Inc., San Francisco, USA) for account authentication and data synchronization. Data is transferred to the USA on the basis of the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). More information: supabase.com/privacy

All other data processing takes place exclusively on your device.

5. Retention period

Local data is stored until you manually delete it in the app or uninstall the app.

Account data at Supabase is stored until you delete your account via Settings → Account & Data → Delete. After that, all data is permanently and irrevocably deleted.

6. Your rights

Under the GDPR, you have the following rights:

• Access (Art. 15): information about the data stored about you
• Rectification (Art. 16): correction of inaccurate data
• Erasure (Art. 17): deletion of your data – directly in the app under Settings → Account & Data → Delete
• Restriction (Art. 18): restriction of processing
• Objection (Art. 21): objection to processing
• Right to lodge a complaint: with the competent data protection authority

For inquiries, please contact: inflato@gmx.de

7. No disclosure to third parties

Your data is never sold to third parties or used for advertising purposes. There is no tracking and no behavior-based advertising.

8. Changes

We reserve the right to update this privacy policy as needed. The current version is always available in the app under Settings → Privacy Policy.