Fridge+
Privacy Policy
Last updated: 15 October 2026
Fridge+ is a shared-life app for couples and households. It includes +together, a private space for the two of you. We built it so that as much as possible stays on your phone, and what goes to our servers is visible only to the people you share it with.
- No adverts, no tracking, no selling or renting your data. Ever.
- No analytics or advertising tools are built into the app.
- Photos live on your phone. Our server keeps a copy for 30 days so your household can save them, then deletes it.
- Your +together content is seen only by you and your partner. Some of it is seen only by you.
- You can export or delete your data in the app at any time: Settings → Privacy and data.
Who we are
Fridge+ is provided by chrispsdesign, based in Cambridge, Ontario, Canada ("we", "us"). We are the data controller for the information described here. Contact: [email protected].
What we hold, and why
| Information | Where it's kept | Why |
|---|---|---|
| Account: email address, display name | Our server | To sign you in with a one-time code and show your name to your partner and household. |
| Household (Fridge+): shopping lists, tasks, calendar events, meals, bills, pantry items, children's names and notes, routines, members | Our server, plus a copy on each member's phone | So everyone in the household sees the same lists and plans. |
| +together: notes and messages to your partner, answers, daily answers, quiz answers, Yes/No/Maybe votes, check-ins, your story's dates and milestones, the content level you choose | Our server, plus a copy on your phone | So you and your partner can play, answer and reveal together. |
| Personal extras: profile photo, birthday, your own take-home pay (if you add it), love-languages result, wishlist and bucket list, memories and their photos, meeting topics | Our server, until you delete them or your account | To show them to the people you share them with: your partner, or your household for the budget total. |
| Purchases: premium packs, gift codes you redeem, and a gift's sender name and message | Our server | To unlock what you bought or were given. |
| Feature interest: which coming-soon features you tapped | Our server | So we build what people want first. We only look at the totals. |
| Photos you add to the family album | Your phone. A copy on our server for up to 30 days. | So other members can save the photo onto their own phones. |
| Settings: notification preferences, quiet hours, sharing permissions, and a log of when you turned each permission on or off (not what you shared) | Our server | To respect your choices and show that we did. |
| Reminders | Your phone only | Reminders are scheduled on your phone. Lock-screen text is generic and never shows private content. |
| Subscription status: plan, renewal date, whether it's active | Our server | One subscription unlocks the app for you, your partner and your household. We never see your card details; Apple handles payment. |
We don't collect your location, contacts, camera or microphone. The app opens your photo library only when you choose photos to add.
Intimate content
Parts of +together may reveal things about your sex life. We treat this as sensitive information and process it only because you, and your partner, explicitly choose to turn it on. Each of you picks a content level, and the app shows only the lower of the two. You can lower your level at any time, and anything shared at a higher level is hidden again. Your Yes/No/Maybe votes are never shown to anyone: your partner sees only ideas you both said yes or maybe to.
Legal bases (UK and EU)
We process your information to provide the service you signed up for (contract), with your explicit consent for intimate content and optional sharing permissions, and for our legitimate interest in keeping the service secure. You can withdraw consent at any time in the app.
Who can see what
- Your household sees household lists, tasks, shared events, the album and children's notes. Household membership never gives access to +together.
- Your partner sees what you send them and what you choose to share. Partnership never gives access to a household you haven't joined.
- Only you see your private answers, preferences, private events and votes.
These rules are enforced on our server, not just in the app, and are tested before every release.
Services we use
We use a small number of providers to run Fridge+. They process data only on our instructions.
- Supabase: database, sign-in and file storage.
- An email delivery service: sends your sign-in codes.
- Apple: App Store payments and notifications.
- Cloudflare: hosts this website and stores the waitlist.
If data is transferred outside the UK or EU, we rely on the provider's standard contractual clauses or an equivalent safeguard.
Partner (affiliate) links
Some links in Fridge+ (wishlist shopping links and date-night experiences) are partner links: if you buy, the shop may pay Fridge+ a small commission at no cost to you. We only add our partner ID to the shop's own link. We don't share anything about you, and we don't track you. The shop's own website has its own privacy policy.
Website visitor statistics
This website uses Cloudflare Web Analytics to count page views and visits. It doesn't use cookies, doesn't collect personal information, and doesn't follow you to other sites. The Fridge+ app itself has no analytics or advertising tools.
The website waitlist
If you join the waitlist on this website, we store your email address (and the time you joined) with Cloudflare, and note which page you joined from (for example, the gift page), and use it only to tell you when Fridge+ launches, or when gifts open if you asked about those. We delete the list after launch. Email us any time to be removed sooner.
How long we keep it
- Album photos: deleted from our server 30 days after upload. They stay on phones that saved them.
- Everything else: until you delete it, leave the household or couple, or delete your account.
- Backups: deleted data may remain in encrypted backups for up to 7 days.
Leaving, unlinking and deleting
- Unlink your partner: the +together space ends for both of you. Your shared answers go back to being private.
- Leave a household: your private items there are deleted. Shared items you added stay with the household.
- Delete your account (Settings → Privacy and data → Delete account): you are unlinked, you leave every household, and your account and personal data are deleted.
- Sign out: removes the app's data from that phone.
Your rights
You can access, export, correct or delete your data, object to or restrict processing, and withdraw consent. Most of this is in the app: Settings → Privacy and data → Export your data, or Delete account. For anything else, email [email protected] and we'll reply within 30 days. If you're in Canada, you can contact the Office of the Privacy Commissioner of Canada (priv.gc.ca). If you're in the UK you can complain to the Information Commissioner's Office (ico.org.uk); in the EU, to your local data protection authority. Residents of California and other US states have similar rights and can use the same contact.
Security
Data is encrypted in transit. Access rules on our server decide who can read each record. On your phone, data is kept in the app's private storage, so protect your phone with a passcode. No system is perfectly secure; if a breach affects you, we'll tell you and the regulator as the law requires.
Age
Fridge+ is for adults aged 18 and over. Parents may add notes about their children for household planning, but children don't use the app and we don't knowingly collect data from anyone under 18.
Changes
If we change this policy in a way that matters, we'll tell you in the app before it takes effect.