BestBy — Privacy Policy

Last updated: 16 August 2026

This Privacy Policy explains how MineSL OÜ (registry code 14538565), Estonia ("MineSL", "we", "us"), the controller of your personal data, collects and uses personal data when you use the BestBy application ("Service"). We process personal data in accordance with the EU General Data Protection Regulation (GDPR).

1. Data we collect

Account data you provide: your name, email address, and password (stored hashed).
Region and language: the country and, where applicable, state/province and language you select at sign-up.
Consent record: the fact that you accepted these policies, the versions accepted, the date and time, and — collected at the moment of acceptance — your IP address, device/browser user agent, platform, and locale. We keep this to demonstrate that consent was given.
Content you add: kitchens, products, expiry dates, notes, and any images you upload.
Kitchen data: kitchens you create or join and their members.
Technical data: information needed to operate the Service, such as device and usage information and error diagnostics.
Subscription data: if you buy a subscription or recipe credits, we receive confirmation that a purchase happened, which plan it was, when it renews or expires, and an identifier for the transaction. We never see or hold your card details — Apple or Google takes the payment.
Crash diagnostics: if the app crashes or hits an error, we collect a technical report containing the error and its stack trace, the app version, the device model and operating system version, and a trail of the app's own recent activity (for example "image upload failed"). It is linked to your account only by your internal account identifier, so we can tell how many people a fault affects. It does not include your name, your email address, your IP address, your kitchen contents, or any images. You can turn this off at any time under Settings > Privacy > Send crash reports.

2. Why we use it and our legal basis

To provide the Service and your account (performance of a contract).
To send on-device expiry reminders you enable (your consent / device settings).
To keep a record of policy acceptance and to comply with legal obligations (legal obligation and our legitimate interest in accountability).
To secure the Service and prevent abuse (legitimate interest).
To diagnose crashes and errors so we can keep the app working (legitimate interest in a reliable and secure Service). You may object to this at any time by turning off crash reports in Settings.
To give you what you paid for and keep a record of it (performance of a contract, and our legal obligation to keep accounting records).

3. Sharing

We use trusted processors to run the Service, including Supabase (database, authentication, and storage hosting) and Functional Software, Inc. trading as Sentry (crash and error diagnostics), and RevenueCat (checking with Apple and Google that a purchase is genuine, and telling us what you are entitled to), acting on our behalf. Apple and Google are not our processors — they sell the subscription to you directly and handle payment under their own terms. Content you add to a kitchen is shared with that kitchen's members. We may disclose data where required by law. We do not sell your personal data.

4. Storage and transfers

Data is stored on our processors' infrastructure. Where data is transferred outside the European Economic Area, we rely on appropriate safeguards such as the European Commission's standard contractual clauses.

5. Retention

We keep your account data while your account is active. Records of purchases are kept for as long as accounting law requires, which in Estonia is seven years, even if you delete your account — we are not permitted to erase them sooner. Crash diagnostics are kept for a limited period by our diagnostics processor (at most 90 days) and are then deleted automatically. When you delete your account we delete or anonymise your personal data, except where we must retain certain records (such as the consent record) to meet legal obligations or to establish, exercise, or defend legal claims.

You can delete your account yourself, at any time, from Settings. Doing so also deletes any kitchen you own, including the products in it and any photos taken of them, and removes everyone else from that kitchen. Kitchens you joined but do not own are unaffected: you are simply removed from them. Deleting your account does not cancel a subscription bought through Apple or Google; you cancel that in the store you bought it from.

6. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, and the right to data portability and to withdraw consent. Erasure you can carry out yourself from Settings, without asking us. For the rest, contact us at the address below. You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or your local supervisory authority.

7. Children

The Service is not intended for children under 16, and we do not knowingly collect their personal data.

8. Changes

We may update this Policy. If we make material changes we will notify you in the app or by email and update the "last updated" date above.

Contact: info@mysite.ee (MineSL OÜ, Estonia, registry code 14538565).