Last updated: August 11, 2026
FreshMatch ("we", "our", or "us") is operated by Michael Huseman, Iowa, United States. This policy explains what the FreshMatch Android app collects, why, and who else touches it.
FreshMatch does not ask for your name, email address, or a password. You are not asked to create an account. Your pantry, saved recipes, and grocery list are stored on your device, not on our servers. We send your ingredient names to an AI service to generate recipes, and receipt photos to the same service to read them — receipt photos are never stored by us.
Pantry ingredient names and quantities. Stored on your device. Names are sent to our server and to Google's Gemini AI when you generate recipes, in order to produce recipe suggestions.
Receipt photographs. Sent to our server and to Google's Gemini AI to extract grocery items automatically, processed, then discarded. Not stored by us.
Saved recipes and grocery list. Stored on your device only, for app functionality.
An anonymous account identifier issued by Firebase Authentication, to associate your daily usage allowance and subscription with your installation. It contains no personal details.
A device identifier (Android ANDROID_ID), to enforce the daily free-usage limit. Without it, clearing app data would reset the allowance. It is scoped to this app and your device, and resets on a factory reset.
Usage counters — number of generations and scans per day, and reward credits — to enforce free and subscription limits.
Subscription status and purchase identifiers, to determine whether you have an active subscription.
Advertising identifiers and ad interaction data, collected by Google AdMob to serve advertisements to non-subscribers.
Device and app integrity signals, assessed by Google's Play Integrity API when the app contacts our servers. This confirms the request comes from a genuine, unmodified installation of FreshMatch rather than an automated client, which is what protects the free usage allowance from abuse. We receive only a pass or fail verdict — not the underlying device details behind it.
Diagnostic logs (errors, timing), to detect and fix faults.
We do not collect your name, email address, phone number, postal address, payment card details, contacts, precise location, or photographs other than receipts you choose to scan. We never see your payment details — those are handled entirely by Google Play.
When you scan a receipt, the image is resized on your device, transmitted over an encrypted connection to our server, forwarded to Google's Gemini AI to extract food item names, and then discarded. We do not write receipt images to any database or storage bucket, and we do not retain them after the request completes. Only the extracted item names are returned to your device, where you confirm them before anything is added to your pantry.
To reduce cost and speed up results, generated recipes are cached on our servers under a one-way hash of the ingredient list that produced them. A recipe generated from your pantry may be shown to another user whose pantry contains the same ingredients, and you may be shown recipes generated for someone else.
The cache stores only the ingredient hash and the resulting recipe text. It cannot be reversed to identify you, and it is not linked to your account or device identifier. Cached entries are automatically deleted after 90 days.
Recipe generation and receipt reading are performed by Google's Gemini API. Ingredient names and receipt images are sent to Google for processing, subject to Google's API terms.
FreshMatch uses Gemini's paid service tier. Under Google's terms for paid services:
Your prompts and the responses are not used to improve Google's products or train its models. This is the material difference from the free tier, where submitted content is used for product improvement and may be read by human reviewers.
There is no human review of your content for product-improvement purposes.
Google retains prompts and responses for a limited period solely to detect and prevent abuse and to maintain the security of the service.
In practice this means the ingredient names you enter and the receipt photographs you scan are used to answer your request and for Google's abuse monitoring — not to train a model.
Google Firebase (Authentication, Firestore, Cloud Functions) — anonymous accounts, usage limits, and backend hosting. Firebase privacy policy
Google Gemini API — recipe generation and receipt reading. Google privacy policy
Google AdMob — advertising for non-subscribers. Google privacy policy
RevenueCat — subscription management. RevenueCat privacy policy
Google Play Billing — payment processing. Google privacy policy
Google Play Integrity API — confirming requests come from a genuine app installation. Google privacy policy
We do not sell your personal information, and we do not share it with anyone other than the processors above.
Non-subscribers see advertisements served by Google AdMob, which may use an advertising identifier to show relevant ads and measure performance. You can reset or delete this identifier in Settings › Google › Ads on your device. Subscribers to FreshMatch Pro see no advertisements.
Pantry, saved recipes, grocery list — on your device until you delete them or uninstall.
Anonymous account and usage counters — until you request deletion.
Cached recipes — 90 days.
Receipt photographs — not retained.
Subscription records — as required for billing and tax purposes.
Depending on where you live, you may have the right to access, correct, delete, or export your data, to object to processing, or to withdraw consent.
Because FreshMatch does not collect identifying information, we usually cannot connect a request to a specific installation unless you provide your anonymous account identifier. For most data the simplest route is direct: clearing the app's data or uninstalling removes everything stored on your device.
To request deletion of server-side data, please contact the developer via the contact information provided on the Google Play Store listing.
If you are in the European Economic Area or the United Kingdom, FreshMatch asks for your consent before serving personalised advertisements, using Google's User Messaging Platform. No advertisements are requested until you have made a choice.
You can change that choice at any time using the Privacy options link at the bottom of the app. The link appears only where consent rules require it.
FreshMatch is not directed at children under 13 (or the equivalent age in your country) and we do not knowingly collect their data. If you believe a child has provided us information, contact us and we will delete it.
Data in transit is encrypted with HTTPS. Server-side data is stored in Google Cloud with access rules that permit each installation to read only its own record; usage counters and cached recipes are not readable by the app at all. No system is perfectly secure, and we cannot guarantee absolute security.
Our infrastructure runs in Google Cloud's us-central1 region in the United States. If you use FreshMatch from elsewhere, your data is transferred to and processed in the US.
We may update this policy. Material changes will be notified in the app or on this page, and the "last updated" date above will change.
If you have any questions or suggestions about our Privacy Policy, please contact the developer via the contact information provided on the Google Play Store listing.