FoodQuestPrivacy Policy
Last updated: 6 July 2026
1. Data controller
The data controller is:
Jerome Sabadini
78 allée Primavera
Centre UBIDOCA, 23361 Pringy
74370 ANNECY
publisher of the FoodQuest app.
For any question about your data: contact@foodquest.fr.
2. Data we collect
| Category | Data concerned |
|---|---|
| Account | Email address, password (stored encrypted / hashed), username, date of birth. |
| Content you provide | Photos of your ingredients (‘fridge scan’) and photos of your dishes, along with saved ingredients and dishes. |
| Game data | Progress (XP, level, hero class, stats), streak, quests, herbarium, signature recipes, friend code and friends list, leaderboard. |
| Technical data | Push notification token (Firebase), language preference, connection data and technical logs required for operation and security. |
| Purchases | Confirmation of in-app purchases made via Google Play (we neither receive nor store your bank card details). |
3. Purposes and legal bases (GDPR)
- Providing the service (account, quests, progress, friends) — basis: performance of the contract.
- AI analysis of photos to recognise your ingredients, generate your quest and validate your dishes — basis: performance of the contract. See section 4.
- Push notifications (streak reminders, challenges, events) — basis: your consent, which can be withdrawn at any time in your phone settings.
- Security, fraud prevention and service improvement — basis: legitimate interest.
- Compliance with our legal obligations (where applicable) — basis: legal obligation.
4. Processing of photos by an AI service
To analyse your fridge, generate your quests and validate your dishes, the photos and associated text you submit are sent to our artificial intelligence provider OpenAI (GPT-4o API), which processes them on our behalf and returns a result. This processing may involve a data transfer outside the European Union (United States); it is covered by the appropriate safeguards provided for by the GDPR (standard contractual clauses).
Your photos are stored securely (Cloudflare R2) for the time needed to process them and display them in the app, then automatically deleted within 48 hours at most after being sent. They are not kept permanently.
5. Recipients and processors
We do not sell your data. It may be shared with the following providers, only to the extent necessary for the service:
- OpenAI — photo analysis and content generation (see section 4).
- Google Firebase (Cloud Messaging) — sending push notifications.
- Google Play / Google LLC — processing in-app purchases.
- OVH (server hosting, France, European Union) and Cloudflare R2 (photo storage).
6. Retention periods
The photos you submit are kept for 48 hours at most, then automatically deleted. Your account and game data are kept as long as your account is active; when you delete your account from the app, they are deleted immediately from our database, subject to retention periods required by law.
7. Transfers outside the European Union
Some providers (notably OpenAI and Google) may process data outside the European Union. These transfers are covered by appropriate safeguards (European Commission standard contractual clauses or equivalent mechanisms).
8. Your rights
Under the GDPR, you have the following rights over your personal data:
- Right of access and rectification;
- Right to erasure (‘right to be forgotten’);
- Right to restriction of and objection to processing;
- Right to portability of your data;
- Right to withdraw your consent at any time (for example for notifications).
To exercise these rights, write to us at contact@foodquest.fr. You can delete your account and the associated data directly from the app, via Profile → Delete my account. You also have the right to lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr), or your local supervisory authority.
9. Security
We implement reasonable technical and organisational measures to protect your data (hashed passwords, communications encrypted via HTTPS). As no system is infallible, we cannot guarantee absolute security.
10. Minors
FoodQuest is rated PEGI 3 and is suitable for all ages; we do not set a minimum age. The date of birth is used solely to personalise certain features, such as the yearly recap. If you believe a child has provided us with data and you want it deleted, please contact us.
11. Cookies and local storage
The foodquest.fr website and the app only use local storage and cookies strictly necessary for their operation (for example your language preference and your session). We do not use advertising cookies or third-party tracking tools for marketing purposes.
12. Changes to this policy
We may update this privacy policy. In the event of a significant change, we will inform you by appropriate means. The last updated date appears at the top of this page.
13. Contact
For any question about this policy or your data: contact@foodquest.fr.