Privacy policy

Version 1.0 — 25 August 2026


The principle, before the details

Tiroko works with no account, no registration and no server. Your inventory (your bases, your entries, your quantities, your photos, your movement log) lives on your phone and does not leave it. The publisher has no access to it, cannot consult it, and could not hand it over even if it wanted to: it does not hold it.

Three specific features send limited data, described below. Everything else happens on your device.

1. Who is responsible

Data controller: ASSODIO, société par actions simplifiée unipersonnelle, 2 rue de Coulanges, 89660 Mailly-le-Château, France, RCS Auxerre 108 383 654.

Contact: contact@assodio.fr

No data protection officer has been appointed: the appointment is not mandatory given the nature and volume of the processing carried out.

2. What stays on your device

Everything you enter: bases, fields, entries, quantities, dates, photos, movement log, local backups, settings. This data is neither transmitted, nor synchronised, nor backed up anywhere other than on your phone (and, if you have enabled it, in your device's general backup managed by Apple or Google, which follows their own terms).

You erase it entirely by deleting the app. CSV export, a premium feature, also lets you retrieve it in a spreadsheet.

3. What is sent, feature by feature

Barcode scanning

When you scan a product unknown to your local cache, the app queries the community database Open Food Facts (a French non-profit association). What is sent: the barcode and the IP address of your connection, along with a technical identifier of the app. No name, no account, no history: the request does not say who you are, only that a device is asking about this product. Recognised products are then cached on your device: scanning the same product a second time never leaves your phone.

The premium purchase

Purchases are concluded and collected by Apple (App Store) or Google (Google Play), depending on your phone. To activate premium and restore it from one device to another, the app relies on RevenueCat Inc. (United States), which processes an anonymous app identifier and the transaction history sent by Apple or Google. Neither your name, nor your address, nor your bank details pass through Tiroko or RevenueCat: they stay with Apple or Google. This transfer to the United States rests on the EU–US Data Privacy Framework and standard contractual clauses.

Voice dictation

Speech recognition is handled by your operating system's dictation service (Apple or Google). Depending on your phone's settings, the audio may be processed on the device or on those providers' servers, under the terms they publish. Tiroko receives only the transcribed text, and keeps no audio recording.

Reminders

The daily expiry notification is scheduled locally on your device. It passes through no server.

4. Why, and on what legal basis

Purpose Legal basis
Recognising a scanned product Performance of the contract
Activating and restoring the premium purchase Performance of the contract
Transcribing voice dictation Performance of the contract
Ensuring security and proper operation Legitimate interest

The app contains no advertising, no analytics tool, no tracker. No data is sold, rented, exchanged or used for advertising purposes.

5. For how long

Data Retention
Your inventory on your device, for as long as the app is installed
Barcode cache on your device, for as long as the app is installed
Anonymous purchase identifier (RevenueCat) lifetime of the installation, under RevenueCat's policy
Dictation audio recordings never kept by Tiroko

6. Who else is involved

Role Provider Location
Hosting of tiroko.app OVH SAS France
Food product database Open Food Facts France
Purchase activation RevenueCat Inc. United States
Purchase collection Apple / Google depending on the platform

7. Your rights

You have a right of access, rectification, erasure, restriction, objection and portability. For most of your data the question does not arise: it is not in our hands. It is on your device, you alone have access to it, and deleting the app erases it for good.

For the rest, that is the anonymous identifier tied to the premium purchase, write to contact@assodio.fr. A reply is given within one month.

Should the reply be unsatisfactory, you may refer the matter to the Commission nationale de l'informatique et des libertés, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — https://www.cnil.fr.

8. Cookies and trackers

The tiroko.app site uses no advertising cookie, no third-party tracker, no external analytics tool. The app uses no cookies.

9. Changes

Any substantial change is brought to users' attention at least one month in advance. The date of entry into force appears at the top of this document.