Privacy Policy

1. Information we collect

We collect your email address when you create an account. We also store the expiry date items you add to the app, including item names, categories, expiry dates, and any notes you provide.

2. How we use your information

We use your information solely to provide the GoodUntil service. Your data is used to authenticate your account and to store and display your expiry date items. We do not sell your data to third parties.

3. Data storage and third-party services

Your data is stored securely using Supabase, a trusted cloud database provider. Data is encrypted in transit and at rest. To provide certain features, we also share limited data with the following third-party services, each acting solely to perform the function described:

• Supabase — hosts our database and handles account authentication. Your account details and item data reside here.
• Anthropic — powers our AI camera scan and AI assistant features. For camera scan, your photo is sent to Anthropic to extract structured fields (such as item name and expiry date); we do not store the photo itself once the scan completes. For the AI assistant, your question, your recent conversation history (the last several exchanges — older messages remain visible to you in the app but are not resent), and your full list of tracked items are sent to Anthropic with every message, in order to generate a relevant response. Anthropic's own handling of data sent to their API is governed by Anthropic's API terms, separately from this policy.
• RevenueCat — manages subscriptions and processes purchase and billing events on our behalf for GoodUntil Plus.
• Resend — sends transactional emails on our behalf, such as account confirmations, security alerts, and subscription notifications.

We do not sell your data to any of these providers, and each is only given the data necessary to perform its specific function.

4. Data retention

We retain your data for as long as your account is active. If you delete your account, all your data — including your items and account information — is permanently deleted immediately.

The one exception is basic subscription and billing records (such as purchase amounts and dates). UK tax and accounting law requires us to retain these for up to 6 years. When you delete your account, this record is immediately and irreversibly anonymized — the link to your identity is removed — so it can no longer be associated with you or your account in any way.

5. Your rights

You have the right to access, correct, or delete your personal data at any time. You can delete your account and all associated data directly within the app. For any other requests, contact us at hello@gooduntil.app.

The right to erasure is not absolute: UK GDPR Article 17(3)(b) permits us to retain the anonymized billing record described in Section 4 to meet a legal obligation, even after the rest of your data has been erased. This exception is limited to that one anonymized record — it does not apply to any other data we hold about you.

6. Contact

If you have any questions about this privacy policy, please contact us at hello@gooduntil.app.