Privacy Policy

1. Who we are

Data Controller: Enrico Frigo
Email: enrico.frigo.developer@gmail.com

If you have questions about this Privacy Policy or want to exercise your privacy rights, you can contact us using the details above.

2. What data the App processes

The App processes the information that you choose to enter directly in order to provide its core functionality. This may include pantry items, grocery lists, product names, quantities, categories, expiration dates, notes, and similar content you create inside the App.

The App may also process technical connection data strictly needed to use the synchronization feature when you enable it. This may include the WebDAV server address, username, and credentials or authentication material required to connect to the server you configured.

3. Data we do not collect

We do not collect your data on our own servers for analytics, advertising, profiling, or marketing purposes.

We do not use Firebase Analytics, Crashlytics, ad networks, marketing platforms, or social login providers.

We do not buy data from third parties and we do not combine app data with external marketing or profiling data.

4. How the App works

Dispensa is built to work locally on your device by default. Data you enter is primarily stored on the device so that the App can provide pantry management and grocery-list features even without a network connection.

If you choose to enable synchronization, the App transmits your data to the WebDAV server that you configure. In that case, the transfer happens because you intentionally use that feature, and the destination server is chosen and controlled by you or by your provider, not by us.

5. Purposes of processing

• Provide the App’s pantry and grocery management features.
• Store and display the content you create.
• Synchronize your data with your chosen WebDAV endpoint, if you enable that feature.
• Maintain the security and integrity of the App.

We do not process data for behavioral advertising, user profiling, or unrelated secondary purposes.

6. Legal basis under GDPR

If you are in the European Economic Area, the legal bases for processing are generally:

• Performance of a contract: when processing is necessary to provide the App’s features requested by you.
• Legitimate interests: when limited technical processing is necessary to secure and maintain the App.
• Consent: where required for optional features that involve transmitting data to external services configured by you.

7. WebDAV synchronization

If you enable WebDAV synchronization, the App connects to the server address and account you provide. The data sent through synchronization may include the content you created in the App and the credentials or authentication information necessary to complete the connection.

We do not operate or control third-party or self-hosted WebDAV servers configured by users. The privacy and security of that server environment depend on the provider or administrator you selected, including whether the server uses HTTPS and how credentials are managed there.

8. Sharing of data

We do not sell personal data.

We do not share data with advertisers or data brokers.

We do not share data with analytics or marketing partners.

Data may be transferred only in the following cases:

• To the WebDAV server selected by you when you enable synchronization.
• If required by applicable law or a valid legal request.
• In connection with a merger, acquisition, or transfer of assets, if legally necessary and with appropriate notice where required.

9. International transfers

If you configure a WebDAV server located outside your country or outside the European Economic Area, your data may be transferred to that jurisdiction as part of the synchronization feature. This happens only when you choose and configure that server.

10. Data retention

Data stored locally on your device remains there until you delete it, clear the App data, or uninstall the App, subject to any device-level backups you use.

Data synchronized to a WebDAV server remains on that server until you delete it from the App, from the remote storage, or from your backup systems.

We do not retain user content on our own servers because the App is designed to operate locally and to sync only to user-configured storage endpoints.

11. Security

We take reasonable steps to protect data processed by the App. Where data is transmitted over a network, it should be protected using modern cryptography such as HTTPS/TLS.

Note: if your App supports only secure WebDAV over HTTPS, keep this statement as is. If it also supports plain HTTP, this section should be revised before publication.

12. Children

The App is not directed to children. We do not knowingly collect personal data from children through our own backend services.

13. Your rights

Depending on applicable law, you may have the right to:

• Request access to personal data.
• Request correction of inaccurate data.
• Request deletion of data.
• Object to or restrict certain processing.
• Request data portability.
• Withdraw consent where processing is based on consent.

Because Dispensa is primarily a local-first app, many data actions can be performed directly by you on your device or on your configured WebDAV storage.

14. How to delete your data

• Delete items, lists, or other content from within the App.
• Disable synchronization and delete the remote files from your WebDAV storage.
• Clear the App data from your device settings.
• Uninstall the App.

If you send us a privacy request, we will respond in accordance with applicable law.

15. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be made available at the published privacy-policy URL and will show the updated date at the top.

16. Contact

Enrico Frigo
Email:enrico.frigo.developer@gmail.com