Privacy Policy

Version 1.0 — Last updated: March 12, 2026

1. Data Controller

NOAH Natural Products s.r.o.

IC: 11953811, DIC: CZ11953811

Zamecka 50/13, 470 01 Ceska Lipa, Czech Republic

Contact: privacy@freshfru.it

2. What Data We Process

Fruit & Vegetable Quality Reports

When you submit a report, we collect:

  • Photo of the produce (EXIF metadata is stripped before storage)
  • Produce type, quality rating (1-3), optional price
  • Selected store from our database
  • Timestamp of submission

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) — providing community-driven produce quality transparency.

Geolocation

Your device location is requested only with your explicit browser permission. It is used locally to suggest nearby stores and is never transmitted to or stored on our servers.

Legal basis: Consent (Art. 6(1)(a) GDPR) — via browser permission dialog.

Anonymous Session

A random session identifier (UUID) is generated and stored in your browser's localStorage. This enables features like reaction toggling ("Same here"). It is not linked to your identity and cannot be used to identify you.

"Same Here" Reactions

When you react to a report, we store your anonymous session ID alongside the report ID to prevent duplicate reactions.

3. Cookies & Local Storage

ItemTypePurposeDuration
ff_session_idlocalStorageAnonymous session for reactionsPersistent
ff_consentlocalStoragePrivacy consent preferencePersistent

We do not use tracking cookies, analytics cookies, or advertising cookies.

4. Data Processors & Storage

ServicePurposeLocation
Supabase (PostgreSQL)Database, authenticationFrankfurt, Germany (EU)
Supabase StoragePhoto storageFrankfurt, Germany (EU)
VercelHosting, CDNGlobal CDN, origin EU
MapboxMap tilesUSA (no personal data sent)

All data is encrypted in transit (TLS 1.3) and at rest. Photos are stored without EXIF metadata.

5. Your Rights (GDPR)

Under the General Data Protection Regulation, you have the right to:

  • Access — request a copy of all data associated with your session
  • Rectification — correct inaccurate data
  • Erasure — request deletion of your reports, photos, and associated data
  • Restriction — limit how we process your data
  • Portability — receive your data in a machine-readable format (JSON)
  • Objection — object to processing based on legitimate interest

To exercise any of these rights, email privacy@freshfru.it.

You may also file a complaint with the Czech Data Protection Authority (UOOU) at www.uoou.cz.

6. Data We Do NOT Collect

  • We do not require registration or login for the pilot version
  • We do not collect names, emails, or any personally identifiable information
  • We do not sell or share data with third parties for advertising
  • We do not use tracking or profiling technologies

7. Photo Policy

By uploading a photo, you confirm that:

  • The photo depicts produce you purchased
  • The photo does not contain identifiable faces of other people
  • You grant FreshFruit a non-exclusive license to display the photo on the platform

You may request deletion of any photo you uploaded by contacting us.

8. Changes to This Policy

We may update this policy from time to time. Significant changes will be communicated via the website. The version number and date at the top of this page indicate the latest revision.

Version History

v1.0March 12, 2026Initial version — pilot launch