Last updated: 30 October 2026
Also available in: Español · Deutsch · Français · Italiano · Português
FreshTrack (SOFTAPP SOLUTIONS LLC) does not collect, store or share any personal data from its users. The only thing that ever reaches us is what you write to us by email, and we cover that at the end, under "Who is responsible and what you can ask for".
The products, containers, lists and settings you create are saved only on your device and, if you have iCloud enabled, in your private iCloud database, which only you can reach with your Apple Account. We cannot see it or access it.
Label reading, the recipes the app suggests from what you have at home, and product image generation are handled by Apple Intelligence. Depending on the feature and your iOS version, Apple processes them on your own device or on Private Cloud Compute, Apple's infrastructure designed so that no one — not even Apple — can access or retain what is processed. In no case do they pass through our servers or any third-party AI: we never see your label text, what you have stored, or your photos.
When you scan a barcode, the app looks it up in the public Open Food Facts database. From version 1.3 it also does so when you scan a package label and the barcode is visible in the photo: the code is read on your device and looked up the same way. In both cases only the code number is sent: not the photo, not the text on the label, and no identifier of you or your device. As with any internet connection, Open Food Facts receives the IP address the request comes from; what it does with it is explained in its own privacy policy.
These features arrive with version 1.1. Version 1.0 does not use Siri or Shortcuts and publishes nothing to the iPhone search index: if that is the version you have installed, this section does not apply to you.
From version 1.1 onwards, FreshTrack works with Siri and the Shortcuts app, and publishes what you have stored to your iPhone's search index (Spotlight) so you can find it from system search and so Siri can answer you.
For each product and container, the index receives: the name, where it is (pantry, fridge or freezer), the quantity, the expiry date, the food type and, for containers, the note you wrote about what is inside. Your photos, ingredients, allergens, nutrition facts and shopping list are not published to the index.
That index is managed by the operating system, is private to the app and stays on your device: it does not sync to your other devices, it does not reach Apple and it does not reach us. We also do not know what you search for: when you type in iPhone search, the app does not receive what you typed — it only finds out if you tap one of its results.
If you ask it to, Siri can read out what you have stored. You can turn this off at any time in Settings › Siri › FreshTrack (or Settings › Apps › FreshTrack › Siri, depending on your iOS version) by disabling "Show Content in Search".
When you write a tag, the app puts a single piece of information on it: the code that identifies that container. Usually it is a random code the app creates along with the container (the exception is just below). The app does not add your name, what is inside, or anything else about you. From version 1.3, that code sits inside a link to this website (https://freshtrack.softapp.tech/t/# followed by the code). Tags written with earlier versions carry it in a link only the app understands (freshtrack://tupper/ followed by the code). What you note about each container stays on your device and in your iCloud, like everything else.
The exception: if FreshTrack reads a tag or a link with a code that does not belong to any of your containers (for example, a tag you wrote with another app) and you tap "Create container", the new container keeps that code exactly as it is. The app does not swap it for a random one, and writes it back unchanged every time you write that tag. If the code says something, such as a name, the tag will keep saying it, and anyone who reads the tag with their phone can see it. Depending on the characters it contains, from version 1.3 it goes in the link to this website or stays in the one only the app understands. If you would rather have a random code, create a new container and write another tag with it.
When you read a tag with FreshTrack, the app looks the code up among your containers without going online: neither reading nor writing a tag connects to this website or anywhere else. If someone else with FreshTrack reads one of your tags, their app can only look the code up among their own containers, so they see nothing of yours.
Any phone with NFC held close to the tag can read it. If it does not have FreshTrack, it opens the tags page on this website, which is the same for every tag and links to the App Store. The code comes after the # sign, and browsers do not send that part of a link when they request the page. That is why neither we nor GitHub, which hosts the website, know which tag was read, and nothing on the page reads that code. The visit is treated like any other on this website (see "This website"). The App Store link carries a campaign label, "tupper", the same for everyone: it lets Apple give us the total number of downloads that come from the tags, without telling us who made them.
The camera is used only to scan barcodes and labels; NFC, only to read and write the tags on your containers; notifications, only to warn you about expiry dates. The photos the camera takes never leave your device, and the app does not send anywhere what it reads from or writes to an NFC tag (what the tag carries, and what happens if another phone reads it, is under "The NFC tags on your containers"). The only thing that leaves when you scan is the barcode number, to look it up in Open Food Facts.
This website is hosted by GitHub (GitHub Pages). To show you a page, GitHub receives your IP address, like any server, and according to its documentation logs and stores it for security purposes. We have no access to those logs. What GitHub does with them is explained in its privacy statement. GitHub is in the United States and participates in the EU-U.S. Data Privacy Framework. The legal basis is our legitimate interest in publishing this website and keeping it secure (Article 6(1)(f) GDPR).
We also count visits with our own counter, with no cookies. When you open a page, your browser tells softmetrics.softapp.tech, a server of ours, that a page of freshtrack.softapp.tech was viewed, which part of the site it belongs to (the language, the guides or the tags page, never the full address) and whether it is the first page of this visit. So as not to count you twice, your browser keeps a marker that disappears by itself when you close the tab. That notice goes through Cloudflare (United States, also part of that Framework), which provides the network for that server. On the server we only add one to the day's totals: we do not store your IP address or anything that could recognise you, so those totals say nothing about any person.
The controller of the app and of this policy is SOFTAPP SOLUTIONS LLC, 74 E Glenwood Ave # 250, Smyrna, DE 19977, United States.
The app sends us nothing of yours, so the only thing we can ever hold is what you write to us at freshtrack@softapp.tech: your email address and whatever you tell us in the message. We use it only to reply to you and to sort out what you asked about; the legal basis is our legitimate interest in answering the people who write to us (Article 6(1)(f) GDPR). We keep those emails for as long as the conversation lasts and for up to a year afterwards; then we delete them. They are received and stored on our behalf by our email provider, Proton AG (Switzerland), on its servers in Europe.
You can ask us at any time to see what we hold about you, to correct it, to delete it, to restrict what we do with it, or to object to us handling it: write to that same address and we will reply. If you think we are getting it wrong, you can complain to the data protection authority in your own country: in Spain that is the AEPD; the list of every authority in the European Union and the European Economic Area is on the European Data Protection Board website; in the United Kingdom it is the ICO; in Brazil it is the ANPD (see the next section).
Your products, containers and lists are yours to delete: from the app itself, and the iCloud copy from Settings › your name › iCloud on your iPhone. We have no copy to delete.
Brazil's General Personal Data Protection Law (Lei nº 13.709/2018, the "LGPD") also applies to us. Everything this policy says still holds: the app sends us nothing of yours, and the only personal data we can ever hold is what you send us by email.
Why we handle it: to reply to you and sort out what you asked about. The legal basis is our legitimate interest in answering the people who write to us (Article 7, IX, LGPD). We keep those emails for as long as the conversation lasts and for up to a year afterwards; then we delete them. We do not sell them or share them with anyone: our email provider, Proton, only stores them on our behalf. We make no automated decisions about you.
Your rights (Article 18, LGPD). You can ask us, at any time and free of charge, for: confirmation that we process data about you; access to it; correction of incomplete, inaccurate or out-of-date data; anonymisation, blocking or deletion of data that is unnecessary, excessive or processed in breach of the LGPD; portability of your data to another provider; and information on who we have shared it with (no one: Proton only stores it for us). You can also object to the processing if we are not complying with the LGPD. The rights tied to consent (Article 18, VI, VIII and IX) do not apply here, because we never ask for your consent: we rely on legitimate interest. Even so, if you ask, we delete your emails.
How to use them: write to freshtrack@softapp.tech. That address is our channel for anything to do with your personal data, both for you and for the ANPD. We confirm whether we hold data about you and give you access to it within 15 days at most (Article 19, LGPD), and answer everything else as soon as we can.
If we do not answer you in time, or you are not satisfied with our answer, you can file a petition against us with Brazil's National Data Protection Authority, the ANPD (Article 18, §1, LGPD). You can also go to consumer protection bodies such as Procon (Article 18, §8).
freshtrack@softapp.tech
Lee esta política de privacidad en español
Home · FreshTrack support · Guide to NFC labels for food containers · FreshTrack guides