Privacy policy
Last updated: July 19, 2026
Naranza is an anti-waste app designed to work primarily on your device. This policy describes local processing and optional network services, so you know when data leaves your device.
1. Data controller and contact
The data controller is the app publisher shown under the name Naranza on the store listing from which you downloaded it. That listing provides the publisher’s legal identity. For any privacy question or request: contact@naranza.fr.
2. Data you provide
Naranza records the products, quantities, optional prices, dates, storage locations, shopping lists, recipes, favourites, cooking history, meal plans and settings you enter. Your food preferences may include allergens or excluded ingredients.
If you create an account with Apple or Google, Supabase processes the information needed for authentication and your profile, such as your identifier, email address depending on the provider options, and display name. Community posts and likes submitted while you are signed in are associated with that account. A community report can only be submitted while signed in and is also associated with that account.
3. Local storage and syncing
App data is kept in a local database on the device. Without an account, inventory and shopping data are not synced.
With an account and a shared household, the household inventory and shopping list are synced through Supabase and visible to its members. Food preferences may be attached to the account. Personal recipes, favourites, cooking history and meal plans currently remain on the device only and are not synced. Signing out erases this local data and the device settings so another account cannot access it; you can export it before signing out.
4. Scans, imports and AI analysis
A barcode is sent to Open Food Facts to retrieve the public product record. Open Food Facts receives the network request and usual technical data, but Naranza does not attach your account identifier.
For a receipt, the photo stays on the device and OCR is performed locally. Before any AI analysis, Naranza asks whether the recognized text may be sent to a Supabase function and then to the configured provider: OpenAI in the United States or DeepSeek in China. If you choose local analysis, nothing is sent to that provider.
To structure a video recipe with AI, the items disclosed on the consent screen may be transmitted: source link, pasted text, title and author, subtitles, text extracted from images, the local draft and, depending on the provider, image URLs. Refusing keeps an AI-free extraction path. Web imports also contact the source site or platform to read its published data.
5. Purposes and legal bases
Providing the service you request is the legal basis for authentication, syncing, shared households, imports and community posts you initiate. Consent is the basis for optional AI analysis, optional usage measurement and, when enabled separately, account syncing of allergens and exclusions; that last choice is also explicit consent to processing possible health data. You may withdraw each consent without losing local features.
Naranza’s legitimate interest in keeping the service secure and reliable is the basis for abuse quotas, moderation, fraud prevention and minimized error diagnostics. Providing account data is optional, but cloud features cannot work without an account. No automated decision produces legal or similarly significant effects for you.
6. Supabase
Supabase provides authentication, the cloud database, server functions and household syncing. Relevant data is encrypted in transit with TLS. Supabase also processes AI-analysis requests before forwarding them to the selected provider. To limit abuse of these paid functions, a pseudonymous installation identifier and the IP address are converted to non-reversible server-side fingerprints; raw values are not retained in quota counters.
Usage measurement is off by default. If you enable “Help improve Naranza” while signed in, Supabase receives only predefined daily milestones (app open, onboarding, product added, recipe created/cooked, household created/joined), your account identifier, app version and platform. No product name, entered text or free-form property is sent. You can turn it off at any time; these events are deleted with the account. We do not use your data for targeted advertising and do not sell it.
7. Diagnostics with Sentry
In production builds where Sentry is configured, Naranza sends only an operational tag, the error type and stack frames, strictly filtered primitive context, app version and technical device information. The original error message, entered or displayed messages, identity, requests, navigation breadcrumbs and performance transactions are not sent. Sentry is used only to diagnose stability, not to track you for advertising.
8. Device permissions
The camera is used for barcodes and receipt photos. The photo library is used for receipts and recipe images you select. Notifications are used for reminders you enable. Naranza plays confirmation sounds, but does not record audio or request microphone access.
9. Recipients and transfers outside the EEA
Members of a shared household can view and change its inventory and shopping list. Recipes published to the community are visible to other users. Apart from these choices, technical recipients are Supabase, Sentry when enabled, Open Food Facts, sites or platforms you import from and, only after your agreement, OpenAI or DeepSeek for AI analysis.
Depending on the region and provider, data may be processed outside the European Economic Area. Supabase governs transfers through its data-processing addendum and Standard Contractual Clauses; Sentry states that it uses the EU–US framework and, where applicable, Standard Contractual Clauses. The OpenAI API may process in the United States and retains abuse-monitoring logs for up to 30 days by default. DeepSeek states that it processes and stores in China under its own policy; the consent screen lets you refuse that transfer and keep analysis local. You may request a copy or references for applicable safeguards at contact@naranza.fr.
10. Retention and deletion
Local data remains on the device until deletion, sign-out, reset or uninstall. Account data and synced content are retained while the relevant account or household exists. Leaving a household removes its cache from the device, while its cloud data remains available to other members. Turning off usage measurement immediately stops collection and requests deletion of previous milestones; account deletion removes the profile, community recipes, account-linked likes and reports, and usage measurements.
Naranza does not keep AI-request content in its product database. OpenAI states that API logs are retained for up to 30 days by default; DeepSeek applies the periods in its policy, including required security-log periods. Expired quota fingerprints are cleaned after seven days during counter maintenance. Sentry events follow the retention configured for the Sentry project. Technical backups follow each provider’s rotation cycle and are not restored except for security recovery.
11. Your rights, withdrawals and complaints
Under the GDPR, you may request access, correction, deletion, restriction or portability of your data, and object to processing based on legitimate interests. You can export local data and manage or delete data from Settings. The usage-measurement and food-preference-sync switches withdraw those consents; AI screens ask again before every transmission. Withdrawal does not affect the lawfulness of earlier processing.
To exercise a right: contact@naranza.fr. We respond within the statutory period, subject to being able to identify you. You may also lodge a complaint with the French data protection authority, the CNIL, at cnil.fr.
12. Changes
This policy may change as features and providers evolve. Material changes will be announced in the app and the date below will be updated.