Privacy Policy

Last updated: 24 July 2026

Frela ("Frela", "we", "us") is a mobile app that scores the food you scan. This policy explains what data we process when you use the app and the website at frela.app, and your rights. Frela is operated by Fritz Döbel. We build Frela to keep data collection to a minimum.

What we process

• Scans & scores. The products you scan (barcode or ingredient label), their computed 0–100 score and the time of the scan are stored so you can see your history and streaks. On your device this is stored locally; it is also synced to our database (Supabase, hosted in the EU) under an anonymous, app-generated identity — no name or email is required.
• Camera & photos. The camera is used to read barcodes and ingredient labels. Barcode reading and label text recognition happen on your device. To structure a label, the extracted text is sent to our backend; only if the text is unreadable is the photo sent as a fallback. Photos are processed to extract data and are not stored by us.
• Product cache. Structured product data (ingredients, nutrition, our score) is kept in a shared cache keyed by barcode, so repeat scans are faster. This contains product information, not personal information.
• Subscriptions. If you buy Frela Pro, the purchase is handled by Apple and your subscription status is managed through RevenueCat. We never receive your card or payment details.
• Diagnostics. The app does not run third-party advertising or analytics SDKs. The frela.app website uses a privacy-friendly analytics tool (DataFast) that does not use cookies or track you across sites.

How we use it

• To scan and score products and show your history and streaks.
• To structure ingredient labels into scoreable data.
• To provide and manage Frela Pro subscriptions.
• To speed up scans through the shared product cache and to fix bugs and improve the app.

Service providers

We share the minimum necessary data with providers that operate the service on our behalf:

• Supabase — database & storage, hosted in the EU (Frankfurt).
• OpenAI — turns label text/photos into structured product data. Data may be processed in the United States. OpenAI does not use this data to train its models via our API.
• Open Food Facts — public food database used for barcode lookups.
• Apple & RevenueCat — App Store purchases and subscription management.
• Vercel — hosts our backend and this website.

We do not sell your personal data.

Legal basis (GDPR)

Where the GDPR applies, we process data to perform our contract with you (providing the app and subscriptions) and on the basis of our legitimate interest in operating and improving Frela and preventing abuse.

Where your data is stored

Your scans and product data are stored in the EU. Label structuring may involve a transfer to OpenAI in the US under appropriate safeguards. If you do not want a label sent for structuring, use barcode scanning instead.

Retention

Scan history is kept until you ask us to delete it or delete your data. Label photos sent for the fallback path are not retained after processing.

Your rights

Subject to applicable law (including the GDPR), you can request access to, correction of, deletion of, or a copy of your data, and object to certain processing. Because scans are tied to an anonymous device identity, please contact us from the device or include enough detail for us to locate the data. Email us at hello@frela.app and we will respond within a reasonable time.

Children

Frela is not directed to children under 16 and we do not knowingly collect their data.

Security

Data is transmitted over encrypted connections (HTTPS) and access to user-owned rows is restricted at the database level. No method of transmission or storage is perfectly secure.

Changes

We may update this policy; we will change the date above and, for material changes, notify you in the app.

Contact

Questions or requests: hello@frela.app.