Privacy policy

Despendo is a web app to organize a home pantry, estimate days of food autonomy, and keep a family emergency plan. This policy covers data processed at despendo.com.

What we collect

Account name and email, a hashed password, pantry and garden items you enter, family profile details you choose to store (age, sex, activity, allergies, blood type), the 72-hour kit and emergency notes, an optional city for weather, and Stripe or PayPal customer and subscription IDs, dates and amounts. We do not store card numbers. We also keep the IP address used in login attempts (to block abuse) and send confirmation and expiry emails, plus the newsletter only if you opt in.

Barcodes

If you scan a product and save it, we keep the barcode together with the name, unit, calories and category you typed, so it is recognized next time and suggested to other people who scan the same code. Your name and email are never shown to them. To identify a product, the code is also looked up in the open OpenFoodFacts database.

Analytics and cookies

We use Google Analytics (through Cloudflare Zaraz) to count visits to the site, the blog and the app, see which pages are viewed, from which country or device type, and for how long. This may use cookies or browser identifiers. We do not measure the email-confirmation, download or admin pages. You can limit it by blocking cookies, turning on Do Not Track, or installing Google's Analytics opt-out add-on. The app also uses a session cookie needed to keep you signed in. Analytics data is used only to understand and improve the site.

Why

To run your account, calculate household needs, send expiry alerts, generate recipes or calorie estimates when you ask, process the yearly subscription, and answer support. We do not sell personal data. Legal basis: performing the service you signed up for; your consent for health data and the newsletter; and our legitimate interest in security and abuse prevention.

Sharing

Hosting, Cloudflare, Google Analytics, an email delivery service, Stripe, PayPal, a weather API, a barcode database, an AI provider, and Telegram if you link the bot, only as needed for that feature. Some operate outside your country, including the United States.

Children

An adult creates the account and must confirm they are 18 or older. Data about children in the household (name, age, allergies, medicines) is entered by that adult to calculate food needs and the family plan. The child does not create the account or type that data. Accounts are not offered to anyone under 18. Allergies, blood type, and medicines are health data: you enter them by choice, they are used only for your calculations and plan, you can delete them anytime, and entering them means you authorize that use.

Referrals

We store your personal invitation code and, if you signed up through someone else's link, the code you used, plus the rewards generated and their dates. When you visit despendo.com with an invitation link, the site saves that code in your browser for 30 days to apply it at sign-up; you can remove it by clearing site data. We do not share the invitee's email or other personal data with the person who invited them; the link is used only to deliver the reward.

Security

Access uses a login and traffic is encrypted (HTTPS). The health data in the family profile (allergies, blood type, medicines and conditions) is also stored encrypted in the database, with a key kept outside the website. No system is infallible: avoid reusing passwords and do not enter data you do not want in an online app. The family plan can be exported to keep outside the app.

Retention and rights

Data stays while the account is active, then as needed for billing records. Email [email protected] to access, correct, object to, or delete it. If you are in the EU, the UK, Brazil, California or another place with its own data protection law, you also have the rights that law gives you and may complain to your local data protection authority.