Last updated: February 7, 2026
1. Overview
Dishr ("we", "us", "the app") is committed to protecting your privacy. This privacy policy explains
how we collect, use, and protect your information in accordance with the General Data Protection
Regulation (GDPR) and other applicable data protection laws.
2. Controller (Art. 4 No. 7 GDPR)
FechTech
Christoph Andreas Fechter
Geheimrat-Frank-Straße 1
94566 Riedlhütte
Germany
E-Mail: fechtech.dev@gmail.com
3. Data We Collect
We collect the minimum data necessary to provide and improve Dishr's functionality:
| Data |
Purpose |
Storage |
| Ingredient Photos |
Sent to Google Gemini AI for ingredient recognition |
Processed in real-time, not stored on servers |
| Usage Counters |
Tracking weekly scans, recipe generations, and saved recipe counts to enforce free-tier
limits |
Google Firebase Firestore |
| Device Identifier |
Identifying anonymous users for usage tracking |
Apple's identifierForVendor; stored in Firestore |
| Anonymous User ID |
Linking usage data to authenticated accounts |
Firebase Authentication |
| Subscription Status |
Determining premium access |
RevenueCat & Firebase Firestore |
| Analytics Data |
Understanding app usage patterns to improve the experience |
Firebase Analytics (anonymous) |
| Crash Reports |
Identifying and fixing bugs |
Firebase Crashlytics |
4. Data Stored Locally Only
The following data is stored exclusively on your device and is never transmitted to
any server:
- Dietary preferences (e.g., Vegan, Keto, Halal)
- Allergy information (e.g., Peanuts, Gluten)
- Excluded ingredients
- Saved recipes and images
- Onboarding completion status
This data is stored using iOS UserDefaults and remains under your full control.
5. AI Processing
Dishr uses Google's Gemini AI (via Firebase AI Logic) for two purposes:
- Ingredient Recognition: Your ingredient photos are sent to Google Gemini for
analysis. Photos are processed to generate results and are not retained by us.
- Recipe Generation: Text-based prompts (including your ingredient list and
dietary preferences) are sent to generate recipe suggestions. These prompts are processed and
not stored.
AI processing is subject to Google's Privacy Policy.
6. Third-Party Services
Dishr integrates the following third-party services, each operating under their own privacy policies:
7. Legal Basis (Art. 6 GDPR)
We process your data based on the following legal grounds:
- Contract Performance (Art. 6(1)(b)): Processing ingredient photos and
generating recipes is necessary to provide the core service.
- Legitimate Interest (Art. 6(1)(f)): Analytics and crash reporting help us
maintain and improve app quality.
- Consent (Art. 6(1)(a)): Where required, we obtain your consent before
processing (e.g., camera access).
8. Data Retention
Usage tracking data is retained in Firestore for as long as you use the app. Weekly counters (scans,
generations) reset automatically every Monday. Analytics and crash data are retained according to
Firebase's standard retention policies (typically 14 months for Analytics).
Locally stored data (recipes, preferences) persists until you delete the app or clear its data.
9. Data Security
We implement appropriate measures to protect your data:
- Firebase App Check (with DeviceCheck) ensures only the legitimate Dishr app can access our
backend services.
- All network communication uses encrypted connections (HTTPS/TLS).
- Local data is stored using iOS secure storage mechanisms.
- Firestore security rules restrict data access to the authenticated user.
10. Your Rights (Art. 15–21 GDPR)
As a user in the European Union, you have the following rights:
- Right of Access (Art. 15): Request information about your stored data.
- Right to Rectification (Art. 16): Request correction of inaccurate data.
- Right to Erasure (Art. 17): Request deletion of your data.
- Right to Restriction (Art. 18): Request limited processing of your data.
- Right to Data Portability (Art. 20): Receive your data in a machine-readable
format.
- Right to Object (Art. 21): Object to data processing based on legitimate
interest.
To exercise any of these rights, please contact us at fechtech.dev@gmail.com.
You also have the right to lodge a complaint with a supervisory authority, in particular in the EU
member state of your habitual residence.
11. Children's Privacy
Dishr is not directed at children under 16 years of age. We do not knowingly collect personal data
from children. If you believe a child has provided us with personal data, please contact us so we
can take appropriate action.
12. Changes to This Policy
We may update this privacy policy from time to time. Changes will be reflected by updating the "Last
updated" date at the top. We encourage you to review this page periodically.
13. Contact
If you have any questions about this privacy policy or our data practices, please contact:
FechTech
Christoph Andreas Fechter
Geheimrat-Frank-Straße 1
94566 Riedlhütte, Germany
fechtech.dev@gmail.com