Privacy Policy — Shopping List: Food & Recipes

Last updated: 13 October 2026. This policy covers the international service at balansit.app and the mobile app also named “Список покупок: еда, рецепты”.

1. Operator and contact

The data controller is Nikolai Anatolyevich Akshentsev, an individual entrepreneur. Contact for support, privacy requests and account deletion: hello@gomvp.dev. This policy describes actual processing; it does not restrict rights under applicable privacy or consumer law to one country.

2. Information we process

• Account and profile: email, account ID, sign-in verification and session records, linked provider identifiers and available profile information. Name, phone number and profile photo are optional. We do not receive your Google password.
• Household and app content: household membership and permissions, shopping lists, product quantities and comments, kitchen inventory, recipes, saved items and preferences.
• Optional dietary information: food preferences, avoided ingredients and allergies you choose to enter. Allergy information can be health data. Do not enter information that is unnecessary for the feature. You can edit or remove it in your profile.
• Photos and audio: images and recordings you choose to upload for product photos, receipts, recognition or voice input. Permission to use a camera or microphone does not mean continuous recording or access to your entire photo library.
• AI interactions: requests, uploaded attachments, relevant recipe or kitchen context, answers, proposed actions, history and feedback. Such content may include personal information if you put it in a request.
• Settings and technical information: app language, country selected or supplied by the device's region settings, account storage region, notification preferences, push registration tokens and installation identifiers, app/device details, request identifiers, error reports and operational usage records. Server connections include an IP address; it is used for connection handling and abuse prevention. The app does not use IP geolocation or GPS to determine your country.
• Support requests: your contact details, the message and attachments you choose to send.
• Safety reports: the content you report, your chosen reason, optional comment and review status. Authorised administrators review these reports to improve safety; reports are separate from normal helpful/not-helpful votes.

The app does not include advertising or intentionally collect an advertising identifier for ad targeting. The international release does not collect payment card information or offer a paid checkout.

3. Why we use information

We use account and app content to authenticate you, maintain your household, store and synchronise data, and provide the functions you request. Optional content is processed when you choose its feature. Preferences may personalise recipe suggestions. Technical records help us deliver notifications, troubleshoot problems, measure service and AI usage, and prevent fraud and abuse. We use support correspondence to answer and resolve your request.

Where applicable, these activities rely on performance of the service agreement, legitimate interests in operating and protecting the service, legal obligations, or consent where required. A device permission is not blanket permission for unrelated uses. Where your law requires specific consent for sensitive information, it must be obtained separately; do not submit such information unless the required basis is available. You may decline optional features and revoke device permissions in system settings.

4. Providers and sharing

We use hosting and storage providers, including Timeweb infrastructure, to run the service and store content; email delivery providers to send sign-in codes and service messages; and Google/Firebase Cloud Messaging and the RuStore push SDK where used to deliver notifications. Their technical processing may include device and registration information. A notification may appear on your device's lock screen according to your settings.

OpenAI processes content required for AI features, including text, selected photos or audio, and relevant context. We minimise unnecessary identifiers in AI prompts and request no provider-side storage for supported text/vision requests. This setting does not mean that all provider security or abuse-monitoring retention is disabled, and audio/image services have their own handling. We also retain app-side history according to our retention settings. Provider information: OpenAI privacy information and Google privacy information.

Google sign-in is optional and subject to Google's own service terms. We may disclose information to household members when you choose shared features, and to authorities where required by law. We do not sell your personal information or use uploaded content for advertising.

5. International processing

The international account database is separate from other regional databases. Your content and provider requests may be processed in countries different from your country of residence. Selecting a phone country or an app language does not guarantee that every processor is located in that country. We use appropriate contractual and security measures and applicable transfer safeguards where required. Contact us for information about relevant processing locations and safeguards.

6. Retention

Account, profile, shopping, kitchen and saved recipe information is retained while needed to provide your account, until deletion or another applicable retention basis ends. AI history and temporary attachments are cleaned up under operational retention rules; saved recipes and photos attached to durable records can remain with those records. We do not claim that uploads are processed only in memory.

Rolling server database backups currently retain up to 14 daily snapshots. Deleted information may remain in isolated backups until they expire and is not used to restore an active account without reapplying deletions. Technical logs and diagnostic records use limited operational retention; support correspondence and records needed for security, disputes or legal obligations are retained only for those purposes and only as long as necessary. A retained limited-purpose record is not used to recreate your account or for advertising.

Local cache may remain after ordinary sign-out. Account deletion clears the account cache on the device that performs deletion; uninstalling or clearing storage removes that device's local app data. Other offline devices may retain previously downloaded copies until their storage is cleared or the app reconnects and updates its state.

7. Deletion and your rights

Use Profile → Delete account or the account deletion page to request deletion. The page is available without signing in or installing the app. We may verify ownership in a proportionate way to prevent unauthorised deletion. Never send a password, verification code or session token to support.

Depending on applicable law, you may request access, correction, deletion, restriction, portability or object to certain processing, withdraw consent, and complain to your competent data protection authority. Where the GDPR applies, these include the relevant GDPR rights and response time limits, normally one month with lawful extensions where necessary. Other mandatory local rights remain available. Send requests to hello@gomvp.dev.

8. Security and updates

App-to-server traffic uses HTTPS. Access controls, protected credentials, regional separation and operational safeguards limit access to personal data. These are security measures, not a guarantee that incidents are impossible. The service is not end-to-end encrypted: authorised backend services process content to provide the selected features.

We update this policy when processing changes and provide appropriate notice of material changes. We do not use a policy update to retroactively authorise unrelated processing. The policy is available before sign-in, on this website and inside the app.