Privacy Policy

Organr is a personal project operated from Norway. Privacy inquiries go to privacy@organr.com.

We collect your name, login PIN, and data you create in the apps: calendar entries, tasks, shopping lists, food inventory, recipes, and meal plans. Email address is optional. We also store technical preferences like theme settings and language choice in your browser's localStorage. Inside the purchase flow we measure how it is used: which steps you see, which module they concerned, and where you dropped off. This measurement holds only event names, module and timestamp. It never holds the contents of your lists, meals or names, and it is stored in our own database, never with a third party.

We process personal data to deliver the service (GDPR Art. 6(1)(b) — contract performance) and to improve the service based on legitimate interest (GDPR Art. 6(1)(f)). AI features in Calendr, Fridgr, Recipr, and Pantr use OpenAI for image, text, and speech analysis.

We share data with: Supabase (database and authentication, EU region), OpenAI (AI analysis of images, text, and speech), and Vercel (hosting and CDN). On the website we use Vercel Analytics (privacy-friendly, cookie-less traffic measurement) and, if enabled, Google Analytics 4 (anonymized site statistics). No data is sold to third parties.

Data is stored as long as your account is active. When an account is deleted, all personal data is removed within 30 days. Anonymized usage statistics may be retained.

Under GDPR, you have the right to access, rectification, erasure, data portability, restriction of processing, and the right to object. You exercise these rights by writing to privacy@organr.com. Exporting and deleting your own data is something you do yourself in the app, under Settings and Privacy. We respond within 30 days.

Family accounts may include children. Parents/guardians with the admin role create and manage children's profiles and consent on their behalf.

The apps do not use third-party cookies. Your browser stores authentication tokens, theme preferences, and language settings in localStorage. This is necessary for the service to function. If Google Analytics 4 is enabled on the website, it may set cookies for anonymized statistics.

All data is transmitted encrypted (TLS/HTTPS). Database access is protected with Row Level Security (RLS), ensuring families can only see their own data.

In the event of a data security breach, we will notify affected users and the Norwegian Data Protection Authority within 72 hours per GDPR Art. 33.

We update this policy when significant changes occur. The last update date is shown at the top of this page.

The data controller is Organr, Norway. For privacy questions, access to your own data or deletion, write to privacy@organr.com. You may also lodge a complaint with the Norwegian Data Protection Authority.