Verdish Privacy Policy
Version 3 — effective 31 October 2026
1. The essentials
- We only collect what is needed to run Verdish.
- We do not sell any data, and the app shows no advertising.
- Your allergies are health data: they are used only to filter your recipes, and only with your agreement.
- Photos of your fridge are erased as soon as they have been analysed.
- You can export your data and delete your account yourself, from the app.
2. Who is responsible for your data
Jérôme Sabadini, sole proprietor (EI), trading as Sabadini Consulting, Bureau 326, 59 rue de Ponthieu, 75008 Paris, publisher of Verdish. For any question, or to exercise your rights: support@verdish.fr. We have not appointed a data protection officer: this address is the only point of contact.
3. The data we process, and why
| Data | What it is for | What allows us to |
|---|---|---|
| Account: email address, technical identifier; if you sign in with Google, the identifier, name, email address and profile photo address that Google passes to us. Your password is never stored in readable form | Signing you in, securing your account, writing to you about the service | Performance of the contract |
| Profile: first name or display name, diet (you enter it yourself and can remove it at any time), cooking level, language, time zone, unit system, cupboard basics, utensils, favourite juror, notification settings, avatar chosen from the app's pictures | Tailoring recipes and the app | Performance of the contract |
| Allergies (health data) | Leaving ingredients that contain these allergens out of recipes, and alerting you | Your explicit consent, given when you declare them |
| Your agreements: date and version of the terms accepted, confirmation of your age, agreement on allergies, acceptance of the limits of the filter, agreement to your photos being sent to the artificial intelligence provider | Proving that these agreements were given | A legal obligation |
| Photos of your fridge | Listing the ingredients in it | Performance of the contract |
| Ingredients, recipes, photos of your dishes, jury scores and comments, and what the jury notes about a dish photo (for example that a person seems visible, or that the photo seems taken from a screen) | Your history, your progress | Performance of the contract |
| Progress: points, levels, streaks, badges | The game | Performance of the contract |
| Nickname: a name made of “Chef”, a word and two digits, unique, drawn at random when your account is created (or when nicknames are introduced, for an existing account); you can have another one drawn once a month, and we may have another one drawn if yours is reported | Referring to you, without your name or email address, in the game leaderboard and the weekly challenge, where other users can see it | Performance of the contract |
| Game leaderboard (if you ask for it): your nickname and your best streak of the week | Comparing yourself with other players | Performance of the contract, at your request; you can leave at any time |
| Weekly challenge (if you take part): the dish you submitted, its score, when you entered, and your nickname | Comparing yourself with other participants on Sunday evening | Performance of the contract, at your request; you can leave the current week |
| Subscription, when one is offered and if you subscribe: its status, the store, the product; a log of subscription events | Giving you access to what you paid for | Performance of the contract |
| Reports you send about a verdict | Correcting the jury | Our legitimate interest in improving the service |
| The crowd (if you take part): the dishes you put forward there, with your agreement for each, and a copy of their photo, shown with their name and jury score, never with your name or nickname; your votes; the reports you send about a dish or an author; the authors whose dishes you have hidden; if one of your dishes is removed, the reason; if you can no longer put forward dishes, the date of that decision | Having dishes rated by the community, offering them in the app's games, and moderating it all | Performance of the contract, and our legitimate interest in protecting participants |
| Notifications: a token specific to your device, and the log of what was sent | Sending you the reminders you agreed to | Your consent |
| Usage analytics: screens and actions in the app, linked to a technical identifier, without your name or email; the device model, its system, language and time zone; your plan, your language and the age of your account in days | Understanding what works and what gets in the way | Your consent, which you can withdraw in settings |
| Error reports: the fault, the app version, the device model | Fixing things | Our legitimate interest in keeping the service working |
| Technical records: for each call to the artificial intelligence, its duration, cost, outcome and, for recipes, the names of the ingredients that were missing, linked to a fingerprint of your account; usage counters; anti-abuse counters, kept against a fingerprint of your IP address or of your account | Keeping to the limits of the plan, controlling costs, preventing abuse | Our legitimate interest |
| Exchanges with support | Replying to you | Our legitimate interest, or a legal obligation for a request about your rights |
| IP address and connection data: processed by our hosting provider and by the anti-bot service when you sign in | Signing you in, protecting the service | Our legitimate interest in securing the service |
| Administration log: the actions we take on an account (blocking, a benefit granted, erasure), with their date and reason; for an erasure, a fingerprint of the technical identifier and the number of items erased | Keeping a record of our own actions, proving that an erasure request was handled | Our legitimate interest, and a legal obligation for erasure |
Once you have accepted usage analytics, it includes the creation of your account and the first screens of the current session.
We also count, per week and without identifying you in the results, the scans, recipes and verdicts requested: this helps us set the limit of the free plan.
What is required, and what is not. An email address is needed to create an account; without an account, you can use the app as a guest. Declaring your allergies or a diet is optional: if you do not, recipes are simply not filtered. Usage analytics and notifications are optional, and the app works the same way without them.
We do not try to recognise people in your photos. Location and device information contained in a photo is removed before it is sent.
4. Artificial intelligence
Your photos and the list of your ingredients are sent to an artificial-intelligence service, run by the company Anthropic, to produce the ingredient list, the recipes and the verdict. Your allergies, your diet, your cooking level, your cupboard basics and your utensils are passed on with the recipe request, without your name or your email address. For the monthly report (subscribers), it receives your month's figures and the title of your best dish.
According to its terms, read on 8 October 2026, Anthropic deletes this data from its servers within 30 days and does not use it to train its models.
No decision that would have legal effects for you is taken by automated means.
5. How long we keep your data
| Data | How long |
|---|---|
| Photos of your fridge | Erased once analysed; about a day if the analysis was interrupted |
| The fridge list you confirmed for recipes, kept for “Your fridge from today” | About 24 hours (erased by an hourly sweep) |
| Ingredients read from the photos of your fridge | Until you delete your account |
| Monthly report written by your judge (subscribers) | Until you delete your account |
| Photo of a dish that was never shown to the jury | 30 days |
| Account, profile, allergies, dishes, recipes, progress | Until you delete your account |
| A dish, its verdict and its photo | Until you delete it ("Delete this dish", in the dish), or until you delete your account; your points, levels, streaks and badges stay |
| Nickname | Until you delete your account; it then becomes free and may be drawn for another user |
| Game leaderboard | Five weeks at most; your streaks are deleted as soon as you leave it |
| Weekly challenge | Five weeks at most. Other participants only see your nickname, the score and the rank, never the photo. If you withdraw or delete the dish, it leaves the ranking; this week's entry still counts, without being shown, until the end of those five weeks |
| Guest account left inactive | 30 days, then deleted along with everything in it |
| Technical records of calls to the artificial intelligence | 90 days |
| Anti-abuse counters | 1 day |
| IP address and connection data | The length of your session; 7 days at most in our host's technical logs |
| Usage counters | Until you delete your account |
| Subscription log, log of notifications sent | 90 days |
| Reports you send about a verdict | Until you delete your account; if you delete the dish, we keep the reason and date of the report for 90 days, without the photo or your comment |
| Usage analytics, at our provider | About one year, a period set by our provider. Withdrawing your agreement stops the collection and requests the erasure of what was collected, as deleting your account does (request sent the next day at the latest). You can also ask for it at support@verdish.fr |
| Error reports, at our provider | 30 days |
| Exchanges with support | 1 year after the last exchange |
| Reports in the crowd, after our decision; information about a dish removed from the crowd | 12 months after the decision, then deleted automatically; a pending report is kept until our decision |
| Copy of the photo of a dish in the crowd | Deleted at the end of its showing (30 days by default), or within a few hours of its removal |
| Administration log | 3 years, then deleted automatically; after an erasure, it holds only a fingerprint |
| Backup copies | 30 days (see below) |
When you delete your account, your data disappears from the app and from our services within a few days at most: some erasures, at our subscription and analytics providers, go through requests that we repeat until they succeed. A few exceptions: the technical records of calls to the artificial intelligence, which hold only a fingerprint of your account and expire on their own within 90 days; one line in our administration log, which keeps the date of the erasure and a fingerprint of your technical identifier for 3 years; the erasure requests sent to our providers, which keep your technical identifier until they succeed; and our host's technical logs, which may contain it for 7 days at most. We keep no proof of your agreements after deletion, except in backup copies, for 30 days at most.
Backups. Every week we make an encrypted copy of the database, kept for 30 days. Data from a deleted account may therefore remain in it for up to 30 days; nobody reads these copies except to repair a loss of data, and in that case we carry out again the deletions we have kept a record of. Photos of your dishes are not in them.
Deleting your account does not cancel a running subscription: that is cancelled in your Apple or Google account.
6. Who receives your data
We use service providers, which process your data only on our instructions:
| Provider | Role | Where the processing takes place |
|---|---|---|
| Supabase | Hosting the database and photos, sign-in, server processing | European Union (Paris, France) for the database and photos; server processing may run close to your device, including outside the Union |
| Anthropic | Artificial intelligence | United States |
| PostHog | Usage analytics, if you accept it | European Union |
| Sentry | Error reports | European Union |
| RevenueCat | Subscription management | United States |
| Google (Firebase Cloud Messaging) | Sending notifications | United States |
| Cloudflare (Turnstile) | Anti-bot check when an account is opened (guest accounts included), at sign-in and when changing your password | United States |
| Resend | Sending the service's emails | United States |
| OVH | Support mailbox, website | France |
| GitHub (Microsoft) | Keeping the encrypted backup copies | United States |
| Signing in with your Google account | Under its own rules | |
| Apple, Google | App stores; buying a subscription, when one is offered | Under their own rules |
When a provider is established outside the European Union, the transfer relies on the EU–US Data Privacy Framework if that provider is certified under it, and otherwise on the European Commission's standard contractual clauses. You can ask us for a copy at support@verdish.fr.
We may also have to disclose data to an authority where the law requires it.
7. Your rights
At any time you can:
- access your data and retrieve it: Settings → "Export my data". The file does not contain your photos; to receive those too, email support@verdish.fr;
- correct it: your profile, allergies and preferences in the app's settings; your email address or display name, on request to support@verdish.fr, from your account's address;
- erase it: Settings → "Delete my account";
- withdraw consent: clearing your allergies withdraws your agreement on allergies; usage analytics and notifications are switched off in settings (withdrawing your agreement to analytics also requests the erasure of what was collected, the next day at the latest). Withdrawal applies from then on: it does not affect what was done before;
- object to processing based on our legitimate interest, or ask for it to be restricted;
- give instructions about what happens to your data after your death.
Write to us at support@verdish.fr, from the address of your account: we reply within one month at most.
If our reply does not satisfy you, you can complain to the French data-protection authority, the CNIL (cnil.fr), or to the authority of your own country.
8. Age
Verdish is intended for people aged 15 and over. We do not knowingly collect data from a younger child; if you think this has happened, write to us and we will delete it.
9. Security
Exchanges are encrypted, photos are stored in private spaces, and each account can only reach its own data. No system is infallible: if an incident affected your data, we would tell you as the law requires.
10. Changes to this policy
If we make a significant change to this policy, we will tell you in the app before the change applies.
The verdish.fr website and its waiting list
What the website does not do
- It sets no cookies and uses no trackers.
- It does not measure traffic and shows no advertising.
- Its fonts and images are hosted on the website itself: your browser contacts no other service to display the page.
The host's logs
Like any website, verdish.fr is served by a hosting provider, OVH, which keeps technical logs: IP address, page requested, date and time, browser. They are used to run the website and protect it against abuse, which is our legitimate interest. They are kept by OVH for the period it sets, in line with the legal obligations on hosting providers, then deleted.
The waiting list
If you join the waiting list:
| Data | your email address, your phone (Android or iPhone), the language of the page and the site you came from |
|---|---|
| Purpose | to send you one email only, on the day the app launches |
| Legal basis | your consent, which you give by ticking the box on the form |
| Retention | until that email is sent, then deleted; at most 12 months after you sign up |
The form is provided by Tally, a company based in Belgium, which stores responses in Belgium. The website only loads Tally's form when you click "Join the waiting list"; at that point, Tally receives your IP address and applies its own privacy policy (tally.so/privacy).
The launch email is sent by Resend, our email delivery service, a company based in the United States. It is sent from Resend's servers in Ireland (European Union). If any data is processed in the United States, the transfer is covered by the European Commission's standard contractual clauses and by the EU–US Data Privacy Framework, to which Resend adheres.
Your data is never sold, rented or used for any other purpose.