Privacy policy

Last updated: 18 October 2026. Applies to the Hogaro app for Android and iPhone, the Hogaro web app and this website.

Draft. This policy is being reviewed and may change before Hogaro is publicly released. It describes how Hogaro works today, during its invite-only pilot.

Summary

What we collect and why

Your account

• Email address, display name and password. We store your password only as a secure one-way hash. We use your email to identify your account and confirm it is yours.
• Sign in with Google (optional). If you use it, Google tells us your Google account ID, name, email address, whether Google has verified that email, and may include a link to your profile picture. We don't receive your Google password or access to anything else in your Google account.
• Sign-in sessions. When you sign in we store a session record with your IP address and your browser or device type (user agent). A session expires after 7 days without use.

Your pantries and shopping

• Pantry contents: the food you add, with its name, quantity, unit, category, storage location, dates, refill threshold and any nutrition reference values you attached.
• Shopping lists and purchases, and a history of changes to stock and lists, so that changes can sync between devices, conflicts can be detected and purchases can be undone safely.
• Food preferences: diet (for example vegetarian or vegan), the higher-protein filter, preferred cuisines and default servings. These sync only to your own account and are never shown to other members. Diet choices can say something about you, so we use them only to filter recipe suggestions.

Shared pantries

• Members of a pantry you share can see your display name, your role and access, the stock and shopping changes you make, and food you mark as “Reserve for me”. They don't see your email address, your preferences or your recipes.
• When an admin invites someone, we store the invited email address with the invitation. The invitation is deleted once it is accepted, declined or revoked, and after 14 days at most. Invitations never reveal whether an email address already has an account.

Recipe import from a link

If you import a recipe from a web link, the link is sent to our server, which downloads that page and sends the recipe it finds back to your app. The website you link to sees a request from our server, not from you. We don't keep the link or the recipe on our server.

Account emails during the pilot

The pilot doesn't send email yet. Verification and password-reset links are stored encrypted in a private test mailbox that only the developer can read, and are passed on to invited testers directly. They expire after one hour. When real email delivery is added, we will name the email provider here first.

Security

To protect sign-in and the service against abuse, we count requests per IP address over short time windows. Our hosting provider keeps technical service logs for 7 days.

What stays on your device

These are not sent to our servers:

• Recipes, including imported recipes, saved sample recipes and bookmarks
• Recipe text you paste for import (it is read on your device)
• Notification permission, reminder time and the reminders themselves
• Theme and other device settings
• Backup files you export, which you control

On your phone, the app also keeps a copy of your pantries so you can use them offline. In a web browser, Hogaro keeps no pantry data after you sign out or close the tab.

What we don't do

• No advertising, no tracking across apps or websites, and no analytics or crash-reporting tools.
• We don't sell or rent your data, and we don't use it to build advertising profiles.
• We don't access your location or contacts.
• This website sets no cookies and loads nothing from other companies.
• No AI processing today. The current versions of Hogaro don't send your data or photos to any AI service. If we add an optional AI feature, such as recognizing food in a photo, we will update this policy and ask for your explicit permission in the app before anything is sent.

Service providers and where your data is stored

These providers process data on our behalf under their data processing terms, which require them to protect it. The United Kingdom is covered by a European Commission adequacy decision. Where a provider may handle data outside the European Economic Area and the United Kingdom, we rely on the safeguards in its data processing terms, such as the European Commission's standard contractual clauses.

How long we keep data

Deleting your account and data

You can delete individual food, lists and, as an admin, whole pantries in the app at any time. To delete your account, follow the steps on Delete your Hogaro account. Deleting your account from inside the app is coming in a later version.

When your account is deleted, we delete your account, sessions, sign-in methods and preferences, remove you from every pantry and erase pantries where you are the only member. Pantries you share stay with their other members: if you were the last admin, another member becomes admin, and your name is removed from that pantry's history. We complete deletion within one month of your request and confirm it by email.

Your rights

Under the EU General Data Protection Regulation you can ask us to:

• give you a copy of your data (access)
• correct it (rectification)
• delete it (erasure)
• limit how we use it (restriction), or object to processing based on legitimate interest
• give you your data in a portable format (portability). You can also export your pantry yourself from the app's backup option.

Write to support@hogaro.app from the email address of your account. We answer within one month. You can also complain to a data protection authority, such as the Spanish Agencia Española de Protección de Datos (aepd.es).

How we protect your data

• All connections use encrypted HTTPS.
• Passwords are stored only as secure hashes. Web sign-in uses cookies that page scripts cannot read.
• The server checks every request against your account and your pantry access. The app cannot grant itself access.
• Server credentials are kept on the server, never in the app.

Children

Hogaro is not directed at children under 14, and we don't knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.

Changes to this policy

We will update the date at the top when this policy changes, and let you know before significant changes take effect.

Contact

Santiago Fernández · support@hogaro.app