Terms of Use prexpire.com

Privacy Policy

Last updated November 5, 2026

The short version

  • Prexpire works without an account. Your items, lists and settings are stored on your phone.
  • Labels and dates are read on your phone. Camera images are never uploaded or kept.
  • When a barcode is scanned, only its number is sent to product databases to find the product's name.
  • If you create an account, we keep your email and a copy of your items so you can back them up and use them on another phone. You can delete the account at any time in the app.
  • No ads, no tracking, and we never sell or share your data for marketing.

1Who we are

Prexpire is an app for keeping track of the expiry dates of products at home. It's made and run by an individual developer living in Romania ("we", "us"), who is the controller of the personal data described here.

Questions about this policy or your data: [email protected].

2What stays on your phone

Everything you add to Prexpire is stored on your phone: products, expiry dates, categories, your shopping list, waste stats and settings. The app works fully offline and doesn't need an account.

The camera is used only while you scan. The images are read on the phone (with Apple's on-device text recognition and an on-device reader) to find barcodes and dates. They are not uploaded, saved or shared.

Backups you export from Settings are files you save where you choose. We don't receive them.

3What leaves your phone, and why

  • Barcode lookups: to fill in a product's name, the barcode number is sent to public product databases (Open Food Facts, UPCitemdb, Go-UPC, barcodestock, Open Library for books, and a DuckDuckGo search as a fallback). Only the number is sent, never your other data.
  • App updates: the app checks app.prexpire.com for a newer version of its screens. This request contains no personal data.
  • Account and backup, only if you create an account (see below).
  • Security checks: when you sign in or create an account, a Cloudflare Turnstile check runs to stop automated abuse. Cloudflare processes technical data such as your IP address and browser details for this.

4Accounts and backup

An account is optional. If you create one, we process:

  • your email address, and your password, which is stored only in hashed form by our account provider;
  • if you use Sign in with Apple or Google: the identifier and email address they share with us (with Apple you can choose to hide your email);
  • a copy of your items, shopping list, categories, settings and waste stats, so they're backed up and the same on every phone you sign in on;
  • technical records our providers keep to run and secure the service, such as sign-in times and IP addresses.

We use this only to provide the account, backup and sync, and to send you the codes needed to confirm your email, sign in or reset your password. We don't read your items for any other purpose.

5The website and the waitlist

prexpire.com doesn't use advertising or analytics cookies. If you join the waitlist, we store your email address, the time you joined, the page section you used and your country (derived from the connection), only to email you when Prexpire is available on the App Store.

After you join, the page may show your Gravatar picture to you. Your own browser requests it from Gravatar using a fingerprint (hash) of your email; nobody else sees it.

6Service providers

We use these providers to run Prexpire. They process data only on our instructions:

  • Supabase: accounts, backup and sync (servers in the EU).
  • Resend: sending account emails such as confirmation and sign-in codes (EU, Ireland).
  • Cloudflare: the website, the waitlist, the Turnstile security check and our domain.
  • Railway: hosting the files the app loads its screens from.
  • Apple and Google: Sign in with Apple and Sign in with Google, when you choose them.
  • The product databases listed above, which receive barcode numbers only.

8How long we keep data

  • Data on your phone stays until you delete it or remove the app.
  • Your account and its backup are kept until you delete the account. Deleting it in the app removes the account and its backup straight away; copies in our providers' routine backups are overwritten within their normal cycle.
  • Waitlist emails are kept until we've sent the launch email, then deleted, or earlier if you ask.
  • Security and server logs are kept only for the short periods our providers set.

9Your rights

You have the right to access your data, correct it, delete it, receive a copy in a portable format, restrict or object to its processing, and withdraw consent. You can delete your account yourself in Settings, Account, Delete account. For anything else, email [email protected] and we'll reply within one month.

You can also complain to a data protection authority: in Romania, the ANSPDCP (dataprotection.ro), or the authority where you live.

10International transfers

Some providers, such as Cloudflare, Railway, Apple and Google, may process data outside the EU. Where they do, the transfer is covered by the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

11Security

Connections are encrypted (HTTPS). Each account's backup can be read only by that account, enforced in the database. Passwords are never stored in readable form. No system is perfectly secure, but we take reasonable measures to protect your data and will inform you and the authorities of a breach where the law requires it.

12Age

You can use Prexpire without an account at any age. To create an account you must be at least 16 years old.

13Changes to this policy

If this policy changes, we'll update the date at the top. For important changes, we'll tell you in the app or by email before they apply.

14Contact

[email protected]

See also the Terms of Use.