Version 1.0 — 25 August 2026
Tiroko works with no account, no registration and no server. Your inventory (your bases, your entries, your quantities, your photos, your movement log) lives on your phone and does not leave it. The publisher has no access to it, cannot consult it, and could not hand it over even if it wanted to: it does not hold it.
Three specific features send limited data, described below. Everything else happens on your device.
Data controller: ASSODIO, société par actions simplifiée unipersonnelle, 2 rue de Coulanges, 89660 Mailly-le-Château, France, RCS Auxerre 108 383 654.
Contact: contact@assodio.fr
No data protection officer has been appointed: the appointment is not mandatory given the nature and volume of the processing carried out.
Everything you enter: bases, fields, entries, quantities, dates, photos, movement log, local backups, settings. This data is neither transmitted, nor synchronised, nor backed up anywhere other than on your phone (and, if you have enabled it, in your device's general backup managed by Apple or Google, which follows their own terms).
You erase it entirely by deleting the app. CSV export, a premium feature, also lets you retrieve it in a spreadsheet.
When you scan a product unknown to your local cache, the app queries the community database Open Food Facts (a French non-profit association). What is sent: the barcode and the IP address of your connection, along with a technical identifier of the app. No name, no account, no history: the request does not say who you are, only that a device is asking about this product. Recognised products are then cached on your device: scanning the same product a second time never leaves your phone.
Purchases are concluded and collected by Apple (App Store) or Google (Google Play), depending on your phone. To activate premium and restore it from one device to another, the app relies on RevenueCat Inc. (United States), which processes an anonymous app identifier and the transaction history sent by Apple or Google. Neither your name, nor your address, nor your bank details pass through Tiroko or RevenueCat: they stay with Apple or Google. This transfer to the United States rests on the EU–US Data Privacy Framework and standard contractual clauses.
Speech recognition is handled by your operating system's dictation service (Apple or Google). Depending on your phone's settings, the audio may be processed on the device or on those providers' servers, under the terms they publish. Tiroko receives only the transcribed text, and keeps no audio recording.
The daily expiry notification is scheduled locally on your device. It passes through no server.
| Purpose | Legal basis |
|---|---|
| Recognising a scanned product | Performance of the contract |
| Activating and restoring the premium purchase | Performance of the contract |
| Transcribing voice dictation | Performance of the contract |
| Ensuring security and proper operation | Legitimate interest |
The app contains no advertising, no analytics tool, no tracker. No data is sold, rented, exchanged or used for advertising purposes.
| Data | Retention |
|---|---|
| Your inventory | on your device, for as long as the app is installed |
| Barcode cache | on your device, for as long as the app is installed |
| Anonymous purchase identifier (RevenueCat) | lifetime of the installation, under RevenueCat's policy |
| Dictation audio recordings | never kept by Tiroko |
| Role | Provider | Location |
|---|---|---|
| Hosting of tiroko.app | OVH SAS | France |
| Food product database | Open Food Facts | France |
| Purchase activation | RevenueCat Inc. | United States |
| Purchase collection | Apple / Google | depending on the platform |
You have a right of access, rectification, erasure, restriction, objection and portability. For most of your data the question does not arise: it is not in our hands. It is on your device, you alone have access to it, and deleting the app erases it for good.
For the rest, that is the anonymous identifier tied to the premium purchase, write to contact@assodio.fr. A reply is given within one month.
Should the reply be unsatisfactory, you may refer the matter to the Commission nationale de l'informatique et des libertés, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — https://www.cnil.fr.
The tiroko.app site uses no advertising cookie, no third-party tracker, no external analytics tool. The app uses no cookies.
Any substantial change is brought to users' attention at least one month in advance. The date of entry into force appears at the top of this document.