Privacy Policy

Last updated: October 20, 2026

Short version: this product stores your account and your waste logs in your own browser's local storage. We do not have a copy. If you clear your browser data, your entries are gone — export them first. The only thing that leaves your device is an email you choose to send us.

1. Who we are

refood.com (the "Site", the "Service") is an independently operated software project. You can reach the operator at hello@refood.com. refood.com is not affiliated with any other company, charity or organisation using a similar name.

2. What data the Service handles

Data you enter, stored on your device

A display name, an email address, a password, and a location name you provide when creating an account.
Waste log entries: date, item name, category, disposal reason, quantity, unit, unit cost, and any note you add.
Your categories and location settings.

All of the above is written to local storage in your browser, scoped to this site. It is not transmitted to us or to any third party. We cannot read it, retrieve it, or restore it.

Because there is no server, the password you set is a convenience lock for this browser only. It is not hashed and it is not a security boundary. Do not reuse a password from another service.

Data you send us

If you email us — for the waste audit sheet, a support question, a correction, or a takedown request — we receive your email address and whatever you write. We use it only to reply. We do not add you to a mailing list without a separate, explicit request.

Hosting logs

The Site is served as static files by a hosting provider. That provider may log standard request data (IP address, user agent, requested URL, timestamp) for security and abuse prevention. We do not combine those logs with any account information, because we do not hold account information on a server.

3. No cookies, no trackers

The Site sets no advertising cookies, runs no analytics scripts, and loads no third-party fonts, embeds or pixels from other domains. Everything needed to render a page is served from this domain. Local storage is used for the ledger functionality described above, which is strictly necessary for the feature you are using.

4. Lawful basis and your choices (EEA/UK visitors)

Where the GDPR or UK GDPR applies, processing of locally stored ledger data happens on your device under your control; we are not a controller of that data because we never receive it. For email correspondence, we process your address on the basis of legitimate interest (responding to you) or your request (sending the sheet you asked for).

You can exercise deletion, access and portability directly, without contacting us: use Settings → Download full ledger (JSON) to take a copy, and Settings → Delete my account to erase it. Both actions take effect immediately because the data never left your browser.

5. Children

The Service is a workplace tool intended for adults running or working in food businesses. It is not directed at anyone under 16, and we do not knowingly collect information from children.

6. Retention

Locally stored data persists until you delete it, clear your browser storage, or the browser evicts it under storage pressure. Email correspondence is kept for as long as needed to handle your request, and normally no longer than 24 months.

7. International transfers

We do not transfer personal data internationally, because we do not receive personal data from the Service. Emails you send are processed by your and our respective email providers, which may be located outside your country.

8. Security

The Site is served over HTTPS. Because there is no server-side database, the main risks are local: a shared device, a browser profile synced to a cloud account, or someone with access to your unlocked machine. If you log waste on a shared kitchen tablet, sign out and consider clearing local data when the device changes hands.

9. Changes to this policy

If a future version adds server-side sync or staff accounts, this policy will be replaced before that version goes live, and the change will be described here rather than buried. The date at the top always reflects the current text.

10. Contact

Questions about this policy, or a request relating to it: hello@refood.com. We answer within a few business days.

This document is provided for transparency and is not legal advice. If you operate in a regulated jurisdiction and need a compliance opinion, consult a qualified adviser.