Summary
- The core app works without creating an account.
- Leftover records and photos are stored locally by default.
- Local notifications are scheduled on your device from reminders you choose.
- Private iCloud sync is optional and uses your Apple account.
- Apple Vision label reading and deterministic field suggestions run on your device; label text, photos, EXIF metadata, and voice audio are not uploaded by those features.
- The developer does not collect core leftover content for advertising, profiling, or sale.
- LeftoverFirst does not use third-party advertising SDKs or cross-app tracking.
Information stored on your device
LeftoverFirst stores the records you create, which may include a food name, container, user-confirmed prepared date, fridge or freezer location, priority or reminder choices, notes, disposition history, templates, app settings, and local media references. Photos you attach are stored in app-controlled local storage. The app may also keep a protected local cache of verified StoreKit entitlement status so paid access remains understandable when the network is unavailable.
You control this information through editing, archive, export, and deletion actions in the app. The core queue, manual capture, reminder management, history, and ownership controls remain available without sending record content to the developer.
Permissions
Camera and photo access
Camera or photo access is requested only when you choose to capture or select an image. Manual entry remains available if you decline. Image analysis for label text uses Apple Vision on your device.
Microphone and speech recognition
Microphone and speech-recognition access are requested only when you choose Dictate label. LeftoverFirst requires on-device recognition, keeps the editable transcript in the capture screen, and does not save or upload the audio. Manual typing remains available if you decline or on-device recognition is unavailable.
Notifications
Notification permission is requested after you create a reminder. Reminder content and timing are scheduled locally. You can change quiet hours, snooze, reschedule, complete, or cancel reminders. If you deny permission, the queue and in-app reminder status still work.
iCloud
Private iCloud sync is optional. When enabled, Apple transfers and stores the selected app data in your private iCloud account so supported devices can stay up to date. Apple controls iCloud infrastructure, account access, backup, and retention under its own terms and privacy policy. Turning off sync does not automatically delete every copy already present in iCloud; use the app's deletion controls and your Apple iCloud controls as appropriate.
On-device label reading
When you choose a photo, Apple Vision can read visible label text on your device. LeftoverFirst can apply deterministic rules to that local text to propose editable fields such as a name, container, location, or quantity. The label image and recognized text are not sent to the developer or a third-party AI provider.
Every proposal remains advisory and requires your review and an ordinary Save action. It cannot set a food-safety window, prepared date, queue priority, reminder, disposition, purchase, share, or sync action. Manual entry remains available when text cannot be recognized.
Purchases
Apple processes subscriptions and lifetime purchases. LeftoverFirst receives signed StoreKit transaction and entitlement information needed to unlock features, restore purchases, and respond to expiration, revocation, or refund state. The developer does not receive your full payment-card number. Subscription eligibility, billing, cancellation, refunds, and regional prices are governed by Apple.
Diagnostics and support
Routine diagnostics are designed to be privacy-minimal and content-free. They may include app version, operating-system version, device class, feature state, coarse failure category, and whether an operation succeeded. Raw leftover names, photos, notes, recognized label text, Apple credentials, and payment details are excluded from routine logs.
If you email support, the developer receives your email address and whatever information you choose to include. Do not send photos of food, private household content, passwords, payment-card details, App Store credentials, or one-time security codes. Support correspondence is retained only as needed to respond, document the issue, and meet legitimate legal or security obligations.
Tracking and advertising
LeftoverFirst does not use the AppTrackingTransparency identifier, sell personal information, run behavioral advertising, or track you across apps and websites owned by other companies.
This support website
These static pages store one browser-local preference, leftoverfirst-site-theme, to remember whether you selected the light or dark website theme. The site source includes no advertising tracker, account, form handler, or developer analytics script. The hosting or CDN provider may inject operational performance tooling and process standard technical request information, such as an IP address, request time, requested path, browser details, and delivery timing, for delivery, reliability, and security under its own operational policies. Email links open your chosen mail app; the developer receives information only if you send the message.
Export, deletion, and retention
You can export versioned app-owned data and delete records from within LeftoverFirst. Permanent deletion removes app-owned local records and media after confirmation. When private iCloud sync is enabled, the app also requests deletion of synchronized app records; Apple backups or recently deleted data may remain temporarily under Apple's retention behavior.
Deleting the app removes its local container according to Apple platform behavior, but does not cancel an Apple subscription. Manage subscriptions separately in your Apple Account.
Children and sensitive information
LeftoverFirst is a general household utility and is not directed to children. Do not enter health records, financial account details, government identifiers, passwords, precise addresses, or other unnecessary sensitive information.
Food-safety boundary
Dates, queue order, and reminders are organizational aids only. LeftoverFirst does not determine edibility, expiration, or safety and does not replace manufacturer labels or storage and reheating instructions, official guidance, dietary or medical advice, or personal judgment. Follow labels and official guidance, and discard food when uncertain.
Security
The app uses Apple data-protection capabilities for app-owned local data, validates input at trust boundaries, verifies StoreKit transactions, and keeps provider credentials out of the app. Label reading and deterministic suggestions run on device, while optional iCloud sync and purchases use Apple platform boundaries. No security control can eliminate every risk, so export and recovery controls remain part of the product.
Changes to this policy
Material changes will update the date at the top of this page and must remain consistent with the shipped app, network behavior, privacy manifest, SDK inventory, and App Store privacy answers.
Contact
For privacy or deletion questions, email [email protected]. Include only the minimum information needed to understand your request. You can also visit LeftoverFirst Support.