Privacy policy
How Frifor handles information about you when you use the app and our websites.
Zuletzt aktualisiert: 9 November 2026
Diese Seite gibt es bisher nur auf Englisch. Eine deutsche Übersetzung ist in Arbeit.
Who is responsible
Frifor AS (org. no. 930 908 185, Lyren 15, 2316 Hamar, Norway) is the controller for the information collected in the Frifor app and on frifor.app, account.frifor.app, partner.frifor.app, console.frifor.app and go.frifor.app. If you have questions about privacy, write to mail@frifor.app. renvare.no has its own privacy policy.
Your account
When you create an account, we store your name and email address, and your profile picture if you add one. You sign in with a code we email you, with Google, with Apple or with a passkey. If you sign in with Google or Apple, we get your name, email address and the ID of your account there. Google also gives us the address of your profile picture there. If you sign in with Apple, we also keep a token, so we can ask Apple to disconnect Frifor from your Apple ID when you delete your account. For each sign-in we store the IP address and which device and browser you use, so you stay signed in and we can spot misuse. When you create the account, we store the country your IP address belongs to, and use it as your market until you choose one yourself. In the introduction we ask for your date of birth or age group, because you must be at least 13 to create an account. If the date of birth you give shows you are younger, you can't continue. If you are under 13, one of your parents must create the account, as the terms say. If you are under 18, we only store that you are under 18, not your date of birth. When you add your age in settings, the app can ask your phone for your age group to suggest a date. We don't store the phone's answer. In the introduction or in settings you can also give your gender, country and language, and what you want to use Frifor for. We use this to tailor the app, and the food diary uses your age and gender as suggestions when it estimates your calorie target. We also store which version of the terms and this privacy policy you accepted, and when. If you change your email address, we let the old address know. We need this to give you access to the app and your subscription.
What you want to avoid and get more of
In the compass you can add allergens and ingredients you want to avoid, and what you want more or less of. We use this to tailor product information, search and suggestions to you. The compass is stored on your account, so you have it on all your devices. If you choose something in the introduction before you sign in, those choices stay only on your phone until you sign in. Allergens, intolerances and ingredients you want to avoid can say something about your health. That's why we only store them when you add them yourself and have agreed to it. You can delete them whenever you like, and if you withdraw your consent under Me → Privacy, we delete them from all your compasses. You can't add choices based on belief, such as halal. We also count how many people have made the same choice, and show the most common choices first when you add something to the compass. We only store the counts for choices at least 20 people have made, and we never show them. Allergens and other choices that say something about health are counted too, but we never use them to show suggestions.
Camera and photos
The app uses the camera to read barcodes. When you are signed in, we store which products you scan and open, so we can tailor the suggestions on the home screen. The list of your scans in the app is kept only on your phone. If we don't recognise a product, or we're missing information about it, you can add it when you're signed in. Your phone then reads the text on the pack, and the app takes photos of the pack when you hold it still or tap the button. The photos and the text your phone read are sent to us. We use AI from OpenAI and Google to read the packaging, and from TypeSafe to pick out the name and brand in the text. Only take photos of the product. The photos don't contain your location. Photos you take of packs are kept as long as you have an account and deleted when you delete it. What we send to AI from your scans, and the answers we get, are kept for up to 30 days so we can find mistakes. Versions 2.0.0 to 2.0.6 of the app also send stills when you hold a pack steady after scanning a barcode we don't know. We find the product from the image, and AI from OpenAI checks the match. If you have agreed to it, these versions also send a cut-out of the pack. We keep the stills like the other photos, and we delete the cut-outs 90 days after they arrive, even if you deleted your account before then. A cut-out of the pack, or a product image that AI from OpenAI makes from your photos, may be used as a product image in Frifor, also after you delete your account. Others can't see that the image came from you. If you delete your account, we remove the link between you and the image, but our log of changes to product data still has your user ID next to what you contributed. When you choose a profile picture or a collection cover, or attach photos to a report, you can take a new photo or pick one from your library. We then only get the photos you pick. The app only asks for permission to save to your photo library when you save a share image.
Location
The app asks for your location when you open the map. If you allow it, the app uses your location while it's open, never in the background. We use it to show places nearby, to show the nearest places first when you search for places to add to a collection, and to suggest the right market. Before your location is sent to us, the app rounds it to two decimal places. In Norway that gives a grid of about one kilometre from north to south and half a kilometre from east to west. We don't store your location on your account. To suggest a market, the app sends the rounded location to Apple on iPhone or Google on Android, which reply with the country you're in. The app remembers where the map was last, but only on your phone. The map is drawn with Mapbox and loads map data from Mapbox, OpenFreeMap and Amazon Web Services. They get your IP address and learn which parts of the map the app loads, also when the map shows the area around you or a place you open. When the app starts, it loads places from us around where the map was last, or around where you last were if you have allowed location access. On iPhone it then also loads map data from OpenFreeMap around the same point, but only on Wi-Fi. If the app hasn't checked the map version with OpenFreeMap in the last day, it does so when it starts, even if you never open the map. We have turned off Mapbox's own collection of usage data. When you open a place in the app, we store on your account that you viewed it, and when. We use this to work out when places tend to be busy, and we only count weekdays and hours when at least five people viewed the place.
Food diary, Apple Health and Health Connect
The food diary is a trial feature in Labs. What you log, the stomach symptoms you note, your weight log, your calorie target and what you enter about your body in the food diary, such as height and weight, are stored only on your phone and aren't sent to us. When the app suggests a portion and your phone can't do it on its own, it sends the product's name and details to our server, which asks TypeSafe. To pick a short message on the home screen, the app sends our server and TypeSafe the time of day, the weekday, how much of your calorie target you have reached, how many days in a row you have logged and which messages fit, for example that you haven't logged lunch yet. TypeSafe doesn't learn who you are. You can fill in your height and weight from Apple Health on iPhone or Health Connect on Android. The app then reads your latest height and weight when you tap the button and uses them to estimate your daily calorie target. Allowing access to your weight when you tap the button also turns on “Import weigh-ins” in the food diary settings, unless you have turned it off before. While it's on, the app reads new weigh-ins each time you open the food diary, adds them to your weight log and can use the newest one to update your calorie target. The first time, it reads the weigh-ins from the last 30 days. You can turn it off at any time, and the weigh-ins already added stay. The app reads nothing else, reads nothing in the background and writes nothing back. We record that you use the food diary and that the app has read something from Apple Health or Health Connect, but never what you eat, weigh or note. If you delete your account in the app, we also delete the food diary on your phone. You can also delete it in the food diary settings.
Subscription and payment
You pay for the subscription through the App Store, Google Play or on the web. We use RevenueCat to keep track of which subscription you have, and for payment on the web. We never see your card details. On your account we store which subscription you have, where you bought it and when it expires. From RevenueCat we also get the amount and date of each purchase, renewal and refund. If you redeem an offer code or join Frifor through a friend, we store that too. Deleting your account doesn't cancel the subscription. You cancel it where you bought it.
Notifications
If you turn on notifications, we store a notification token for your phone so we can send you notifications. If you have added Frifor widgets to your home screen, we store a separate token to update them. Notifications go through Apple on iPhone and Google on Android. Notifications about safety and allergens, product updates, tips, points, badges, collections you follow, new followers and activity on your content are on until you turn them off. You only get news and campaigns if you turn them on. You choose under Me → Notifications, and you can turn off all notifications in your phone's settings. If you sign out, we stop sending notifications to the phone. We delete the token when you delete your account.
We email you when you need it for your account: sign-in codes, a notice when someone adds a passkey or changes your email address (the old address gets the notice) and invitations from others. You can't unsubscribe from these. Our email service, which we run ourselves on Google Cloud, gets your user ID and email address when you create an account. It is also told about some things you do, for example that you finished the introduction, earned points or badges, saved something or haven't used the app for 30 or 90 days. It never learns what you scan or what you want to avoid. We only send news, offers and reminders to come back if you said yes to marketing email. In the introduction you say yes by turning on both “News” and “Perks and campaigns”. A reminder can show up to three products you saved that have changed. We record whether you open the emails and tap the links in them. You unsubscribe with the link at the bottom of the email, under Me → Notifications or at account.frifor.app. Resend delivers the email for us.
Public profile and collections
In the introduction you choose a username and whether your profile is public. The profile is public unless you turn on “Private profile”. Anyone can see a public profile in the app and on frifor.app, also without an account. It shows your name, profile picture, username and bio, your Instagram, TikTok and X links if you added them, and how many people follow you. It also shows the products you saved, the products you rated and the rating you gave, the brands you follow and what you have published. Signed-in users also see on a product page that you saved or rated the product. If your profile is private, only you see it, and nobody else sees what you publish. Your collections are private until you publish them. If you publish a collection, recipe or meal plan before you have chosen a username, we make one from your name, and the profile stays private until you make it public. You can rate products and places and write a note. Only you see the note, but your rating counts towards the average others see. If you follow someone or copy a collection, the owner is told. If your profile is public, the owner sees your name. Otherwise the owner only sees that someone did it. Copies others have made of your collections are theirs, and they stay even if you delete the original. When someone follows you, copies a collection or changes something you follow, you see it under “Notifications” in the app. The notifications stay there until you delete your account. If you follow a collection, you also get a notification on your phone when it changes, until you turn off “Followed collections” under Me → Notifications. You can block other users. You then don't see each other's profiles and content, and you get no notifications about each other. We delete the notifications you already have about each other. You can also report a profile, a collection or other content. We store what you reported, the reason and what you wrote, and one of us reviews the report. We get a message in Slack that a new report has arrived, with no details about you or the person you reported. We keep your reports until you delete your account.
Views and paid placements
When you look at a public collection, recipe or profile in the app or on frifor.app, we record the view. We store what you looked at and for how long, how far you scrolled, what you tapped, the platform, language, market, app version and which website or campaign brought you there. If you are signed in, we link the view to your profile. We keep views with no time limit, and if you delete your account, we remove the link to you. The person who published sees only numbers, not who looked. The owner also sees how their followers split by country, age group and gender, but only in groups of at least 20. Businesses that publish collections see how many different people saw them each week, again only when the number is at least 20. Some collections in the app are paid placements from businesses, and they are marked. Our server picks which ones you see from your compasses, so you don't get a collection that clashes with what you want to avoid. The business only learns how many people saw and tapped the collection. To show a collection only a set number of times a day, we store a code made from your user ID and the date, not the user ID itself.
Shared lists
You can share a collection or a shopping list with others. If you invite someone by email, we store the email address and send an invitation there. The invitation lasts 14 days. You can also share an invite link. The person who owns the list sees the name and email address of everyone on it. People on the list can see it. If the owner allows it, they can also change it. If the owner deletes the list or their account, the list is gone for everyone. If you delete your account, you are removed from lists others shared with you, but what you added to them stays. The email address in an invitation stays until the person who invited deletes the list or their account.
Problem reports
You can report a problem with the app under Me or by shaking your phone, and a problem with a product from its page. The app uses the motion sensor to notice the shake, and what it measures stays on your phone. You can turn it off under Me. The report contains what you write and details about the app and your phone: app version, phone model, operating system, language, market, network type, the screen you're on, an ID for the installation, the ID PostHog has given you, the features turned on for you and the latest events the app has recorded. You must be signed in to report a product or attach photos. You can then attach up to three photos, and the report is linked to your account. We check a product report with AI from OpenAI, which reads what you wrote and your photos and compares them with the product. Frifor staff review reports when needed, and always when you have attached photos. We delete the reports and photos when you delete your account. A report you send without signing in isn't linked to an account, and we don't delete it on our own. Write to us if you want us to delete it.
Analytics
We always measure how the app and the websites are used, so we can improve them. This happens whatever you answer in the questions about marketing. We use PostHog for this, and PostHog stores the data on servers in the EU. In the app, PostHog stores an ID and a queue of events on your phone. We record which screens you open and what you do in the app, for example which products you scan and open. We also record when the app is opened, installed and updated, crash and error reports, and which features are turned on for you. The events include the device model, the app version, the iOS or Android version, the language and the time zone. From the introduction we record how many allergens you added and whether you agreed to us storing them, but never which allergens or ingredients you chose. When you are signed in, we link the events to your user ID. We then store details such as these on your profile in PostHog: your email address and name, app language, the country you have chosen, whether you have allowed notifications and the camera, whether you have a compass, when you finished the introduction, the time of your first scan, your subscription and how you found the app. The app never records sessions. PostHog does not store your IP address, but first uses it to estimate country, region, city, postal code and approximate coordinates. If you still have the old Frifor app (version 1 on iPhone, version 8 or 9 on Android), it also sends events to PostHog, such as when the app opens, which screens you open and the barcodes of the products you view.
Websites and cookies
On frifor.app, we measure without cookies and without storing an ID in your browser until you say yes. PostHog then makes an ID from your IP address and browser. The ID changes every day, so we can only recognise visits from the same browser and IP address on the same day. PostHog then does not use the IP address to estimate where you are either. We record which pages and products you view, what you click, how far you scroll, how fast the pages load, and error reports. If you say yes in the privacy choice in the bottom corner, we store an ID in a cookie, and you can also agree to session recording. Everything you type in forms is hidden in the recordings, but they show the browser's error messages and how long the page takes to fetch data. Your choice is stored in a cookie called frifor-consent and in the browser's local storage, and PostHog stores a flag that records a no. You can change your mind at any time under “Privacy settings” at the bottom of the page. On account.frifor.app and console.frifor.app there is no privacy choice, and the choice you made on frifor.app doesn't apply there. There we always measure the way we do on frifor.app before you say yes, without session recording. On account.frifor.app the measurement is not linked to you. On console.frifor.app, when you are signed in, we link the measurement to your user ID, email address and name. All our websites use the cookies needed for you to sign in, and frifor.app stores the language you chose in a cookie. On frifor.app we also use the country your IP address belongs to when we choose which offers to show you.
Events from our servers
Our servers send events about your account to PostHog under your user ID, for example when you create an account, sign in or follow someone. They also report when your subscription starts, renews or stops, and what it costs. This also happens when you said no on the website. With the events you trigger yourself, we send your IP address, so PostHog can estimate country, region, city, postal code and approximate coordinates. When you open a shared link on frifor.app, the server records the visit. Without consent it is not linked to you. When you share something from the app, we create a link tied to your account. If someone opens the link in the app while signed in, we store that they opened your link. If they are new to Frifor, we count it as you having referred them, and you may get points once they finish the introduction.
How you found the app
The first time you open the app, we find out what led you to it. This happens once per installation, whatever you answer in the questions about marketing. On iPhone, the app reads an AdServices token from Apple, and our server asks Apple which Apple Search Ads campaign, ad group, ad and keyword led to the installation, whether you tapped the ad or only saw it, when you tapped it, and in which country. On Android, the app reads the install referrer from Google Play: campaign parameters, click IDs, and the times of the click and the installation. We send the result to PostHog and store it on your account. The first source stays.
Marketing and ad measurement
We advertise Frifor on Facebook, Instagram, TikTok and Google, among others. To know whether the ads work, we measure how many people download the app, start a trial and become paying subscribers after seeing an ad. In version 6.0.0 and later, the app sends nothing to Meta until you have said yes. On iPhone, you say yes when iOS asks whether Frifor may track you across other apps and websites. On Android, we ask the question ourselves. The question comes in the introduction, or once when you open the app if you have not answered before. You can change the answer at any time under Me → Privacy → Ad measurement. Once you have answered on iPhone, the app takes you to Settings → Frifor → Allow Tracking. If you say yes, Meta's tool (Meta SDK) starts in the app. RevenueCat gets Meta's anonymous ID, the IP address, the device model and the iOS or Android version. On iPhone, RevenueCat also gets the advertising ID and the vendor ID, and on Android Google's advertising ID if the phone releases it. RevenueCat tells Meta's Conversions API when you start a trial, when you start paying and when the subscription renews. Each message carries the price, the IDs above and a code made from your user ID. Meta's tool also tells Meta that the app is installed and when you open it, with details such as the device model, the iOS or Android version, language, time zone and mobile carrier. On Android it also sends the install referrer from Google Play. If you have the Facebook app, it also sends the ID the Facebook app keeps on the phone. It can also send crash reports when the fault is in Meta's own code. Meta never learns what you scan or log. If you say no, none of this happens, and RevenueCat is told that you said no. If you say no after saying yes, Meta's tool stops recording new events, and we ask RevenueCat to delete the IDs. RevenueCat may still keep device IDs it has already stored, so on Android Meta may still be told about renewals. What Meta already has stays with Meta. Versions 2.0.0 to 2.0.6 of the app don't ask. They start Meta's tool every time the app opens and give RevenueCat Meta's anonymous ID and the device IDs, so RevenueCat can send your purchases to Meta. When you update the app, it counts as a no until you answer, and we ask RevenueCat to delete the IDs. On iPhone, whatever you answer, the app tells Apple's SKAdNetwork about installs and subscriptions. Apple then sends the ad network and us an anonymous, delayed count, with no ID from the app.
Ads on the website
On frifor.app we use Google Analytics and the Meta pixel, loaded through Google Tag Manager. They load only once you say yes to marketing in the privacy choice, and then they store cookies. Without consent, neither Google nor Meta gets anything.
Who we share information with
We never sell your information. These providers process information on our behalf: Google Cloud runs the app's servers, the database, the images and our email service (Belgium). Vercel runs frifor.app, account.frifor.app, partner.frifor.app and console.frifor.app (USA), and the pages are built on servers in Sweden. PostHog handles analytics and session recording (EU). Resend sends email (Ireland). Google Workspace receives email you send to mail@frifor.app. Apple and Google deliver notifications to your phone and get the notification token and the content of the notification. Expo delivers app updates and gets your IP address and an ID for the installation (USA). Sanity delivers the articles in the app and gets your IP address. Slack delivers internal alerts to Frifor's own channels (USA). RevenueCat handles subscriptions and payment on the web, and Stripe card payments (USA). OpenAI reads photos of products and reports about products and makes product images, and Google (Gemini) checks what OpenAI reads from the photos (USA). OpenAI also gets what you type in the product search, without knowing who you are, and the questions you ask about reports on console.frifor.app. Cheaperinference (Keak AI, USA) receives some of our requests to OpenAI's language models, including reports about products, and may process them in the USA, Canada and Europe. If Cheaperinference is down, the requests go straight to OpenAI. TypeSafe AI interprets what you search for, the text the app reads on packs and what the food diary sends for suggestions, without getting your name or user ID (USA). Mapbox draws the map (USA). Meta Platforms Ireland and Google Ireland measure ads, and Google also provides Google Tag Manager. Transfers to the USA are based on the EU's standard contractual clauses. These services also get information when you use the app: OpenFreeMap (through Cloudflare) and Amazon Web Services supply map data, get your IP address and learn which parts of the map the app loads. Pexels gets what you search for when you look for a cover for a collection, without knowing who you are, and your IP address when the app shows the images. Apple and Google work out the country from the rounded location when the app suggests a market, and learn that you sign in to Frifor if you sign in with them. Apple and Google Play give us the install source.
How long we keep information
We keep your account, compass and collections as long as you have an account. If you delete your account, we delete the information about you straight away and ask our email service to delete what it holds. This usually takes a few minutes. If it is down, we keep trying for about four hours, and then we follow it up ourselves. We also delete the install source on your account. We don't ask PostHog or RevenueCat to delete anything. The analytics and recordings in PostHog, and what RevenueCat holds about your subscription, therefore stay there. We keep PostHog analytics for up to seven years, and session recordings from the website for 30 days. If you want us to delete your information there, write to mail@frifor.app. Your profile picture and photos you've uploaded to collections are deleted after a few minutes. Our backups are deleted on a rolling basis, so after 15 days there is no copy of your information left with us. For security, we log each time you save, change or delete something while signed in: what was done and when, your email address, IP address and which device and browser you used. We delete the log after 12 to 13 months. If you delete your account before then, we remove your email address, IP address, browser information and the content of the changes. What remains is only what was done and when, under your user ID. After you delete your account, we keep a record of your payments for our accounts, under your user ID and without your name or email address: amounts, dates, renewals, refunds and offer codes you redeemed. If you haven't cancelled the subscription, new renewals are added too. We don't delete this record automatically. Some things stay with others. Copies others have made of your collections and compasses are theirs. Links you have shared still work but are no longer linked to you. In the notifications of people who followed you, your username and the name of what you published remain. We keep reports others have sent about you, with your username. Collections you made for an organization belong to the organization. Your user ID goes on a list of deleted accounts, so we can reject later messages about the account.
Legal basis
We process your information because we need it to give you what you asked for: the account, the compass, collections, the public profile, sharing and the subscription. We only store allergens, intolerances and other health information in the compass when you have explicitly said yes. We also only use marketing email, news and campaign notifications, ad measurement, session recording and cookies for measurement and marketing on frifor.app when you have said yes, with the exceptions described under “Marketing and ad measurement”. You can withdraw that at any time. Analytics, the security log, the install source, the numbers for what you publish and what our email service is told about your account rest on our legitimate interest in running, improving and securing Frifor. We keep the payment record for our accounts.
Your rights
You have the right to see the information about you and to have it corrected, deleted or handed over to you. You can also ask us to restrict how we use it, and you can object to how it's used. If you said yes to something, you can withdraw that consent at any time. You can download a copy of your information as a JSON file under Me → Account details in the app, at account.frifor.app or in the settings on frifor.app. The copy doesn't include the security log or what PostHog, RevenueCat and our email service hold. If you want that, write to mail@frifor.app. At account.frifor.app you can erase your profile data and keep the account. We then delete, among other things, your profile, compasses, collections and ratings and the scans and photos we have stored from you, and sign you out everywhere. Your name, email address, sign-in methods, subscription and the security log stay, and we don't ask PostHog, RevenueCat or our email service to delete anything. You delete the whole account under Me → Account details in the app or at account.frifor.app. If you haven't signed in during the last day, you must sign in again first. If you are the last owner or admin of an organization, or you own a Renvare workspace, we must close it or hand it over before you can delete your account. If we delete the account for you, for example because you asked by email, we close it straight away and delete it after 30 days. Until then we can reopen it. If you believe we handle your information in breach of the rules, you can complain to the Norwegian Data Protection Authority (Datatilsynet).