Privacy

Fridge Door is a family app: recipes, meal plans, lists, a family calendar and the kids' routines, on the website, a kitchen screen and the phone app. Here's what it keeps, who else sees any of it, and how to take it with you or delete it.

The short version

• Your family's data is used to run Fridge Door for your family, and for nothing else.
• No ads, no tracking, and nothing is sold or shared for marketing. The public pages (the home, pricing and gift pages, these legal pages) count visits with Cloudflare Web Analytics, which sets no cookies and doesn't identify you. Nothing inside your family's account is measured.
• Other families can't see anything of yours.
• You can download everything, or delete it, at any time.

Who we are

Fridge Door is run by Kieran Fahy, a sole proprietor in Kelowna, British Columbia, Canada, who is responsible for your information under Canadian privacy law.

What we keep

• Logins: the name, email and password (stored scrambled, never readable) of each person who signs in. Logins are for people 13 or older: whoever creates the household must be 18 or older, and someone aged 13 to 17 joins only when their parent or guardian invites them.
• Your family: first names, colours and any photos you add for each person, kids included. A parent adds the kids; children under 13 have a profile, not a login, and never sign in.
• What you put in: recipes and their photos, meal plans, lists, calendar events, tasks, stars and rewards, and the family photos for the kitchen screen.
• Household settings: your time zone, dinner time, and the town you pick for the weather.
• Calendars you follow: the link (kept encrypted) and a copy of their events, refreshed every 15 minutes.
• Devices: kitchen screens you pair and phones signed in to the app, so they stay signed in, and the push address of each phone or browser you turn reminders on for.
• Your subscription: its plan and dates, and Stripe's customer number for your household. Card details go straight to Stripe and never reach us.
• Family circles: which circles your household is in. The other families in a circle see your household's name, the recipes you choose to share there (yours in full, imported ones as a link), and the first name, photo and note of anyone who likes a recipe or says they made it. Nothing else of yours is shown to them.

Cookies

Only the ones the app needs to work: one that keeps you signed in, one that protects your forms, and one that keeps a paired kitchen screen signed in. Your light or dark setting is kept in your browser.

Who else handles it

Fridge Door runs on its own server, in Quebec, Canada. A few services help along the way, each only with what it needs:

• Cloudflare sits in front of the site, protecting it and passing pages along, and runs the "not a robot" check on sign-up. It also stores our nightly backups, encrypted with a password only we hold.
• Google's Gemini AI reads things for you when you ask it to: a recipe page with no recipe data, a social post's caption, pasted text, or a photo of a recipe card or cookbook page; a photo of a schedule or invitation to add to the calendar; and a recipe's ingredients to estimate nutrition. Only what's being read is sent, through Google's paid service, which doesn't use it to train its AI.
• The microphone buttons use your phone's or browser's own speech recognition (from Apple or Google) to turn what you say into words. Fridge Door only gets the words.
• Stripe takes payments for subscriptions and keeps the card, billing email and payment history.
• Reminders on the phone app go through Expo's push service to Apple or Google, which deliver them. On the website they go through your browser's push service. A reminder holds only its own words, such as tonight's dinner.
• Resend sends our email: invitations, password resets and account messages.
• Open-Meteo gets your town's rough location, to look up the weather. Nothing about your family goes with it.
• Recipe sites, YouTube, TikTok, Instagram and Pinterest are visited by our server, not your browser, when you import from them, and your calendar's provider when it's refreshed.

Some of these services are based in the United States or elsewhere, so what they handle may be processed outside Canada and be subject to the laws there.

Backups

Everything, with your photos, is backed up every night, encrypted, so a broken server doesn't lose your family's things. Backups are replaced by newer ones over time.

Taking it with you, or deleting it

• Settings › Household › Download your data gives you a ZIP of everything, with all your photos.
• Settings › Delete account, on the website or in the app, removes an adult's login and their place in the family. For the household's owner, it deletes the whole household and its photos, for good, and cancels the subscription.
• A household that stays read-only for 12 months after its trial or subscription ends is deleted, after two warning emails, unless it is in a family circle.
• A sign-up whose email is never confirmed is removed after 7 days.
• Anything deleted can still sit in a backup until that backup is replaced. Stripe keeps payment records as the law requires.
• You can ask what we hold about you, or for something to be corrected, by writing to us.

Questions

Write to [email protected].

Last updated 10 November 2026.