Privacy policy
Last updated: October 23, 2026Local data without an account
Food records and photos created without signing in are stored in the app's device storage and are not automatically sent to our server. Signing in preserves this data. Importing a backup into an account space uploads the selected records. Device reminders are scheduled on your phone without a push token. Removing the app may erase local data, so export a backup if needed. If you use operating-system device backups, that provider's settings and policies apply.
Reports and safety actions
We store reporter and subject identifiers, reason and description, an item or member snapshot and associated photo reference on our NAS to review reports and prevent abuse. Reports are not disclosed to other members. Resolved report evidence is cleaned up after 90 days. Your block list is removed when you unblock or delete your account. Safety and suspension records are kept while needed to prevent abuse and repeat violations. Backup copies follow the separate retention policy.
Operator and scope
Eternalsoft (이터널소프트) operates Expiry Note. This notice covers information processed by the app, its food inventory API and these support pages.
Account and inventory
Sign-in uses your email address, display name and Firebase user identifier. We store food names, dates, quantities, notes, locations, selected photos and thumbnails, spaces, memberships, language, time zone and reminder settings on our NAS server to provide synchronization and sharing. Firebase Authentication handles password authentication.
Photos and date recognition
Google ML Kit processes date recognition on your device. Photos in device data remain on your phone; selected photos in signed-in account spaces are uploaded to our server. We do not upload your entire photo library. You can change camera and photo permissions in device settings.
Reminders and service operation
Device identifiers, push tokens, operating system and language are used for reminder delivery through Firebase Cloud Messaging. Network requests transmit IP addresses and request information to our server and service providers. This information may be processed for service delivery, access control, troubleshooting and abuse prevention.
Subscriptions and advertising
Apple or Google processes payments. RevenueCat processes the app user identifier, product, transaction and subscription status to verify paid access. Our app server does not receive payment card numbers. During free use, the Google AdMob SDK may process IP addresses, device and advertising identifiers, ad interactions and diagnostics for advertising, measurement and security. Use available ad privacy choices and device privacy settings to change your choices.
iOS tracking permission and ad choices
On iPhone and iPad in every region, we start the advertising consent flow and advertising SDK only after Apple App Tracking Transparency (ATT) permission is authorized. Denied, restricted or undetermined permission prevents ad requests while personal features remain available. Applicable regional advertising choices still apply after ATT authorization, and iOS ad requests remain non-personalized. Within permitted choices, advertising providers may link device or advertising identifiers and ad activity with other companies' data for ad measurement. Change your choices in Settings → Ad privacy choices and in iOS Settings → Privacy & Security → Tracking.
Sharing and service providers
Inventory, photos and membership information in a shared space are visible to authorized members of that space. Firebase, Google AdMob, RevenueCat, Apple and Google Play participate in providing the relevant features; processing countries may differ from your country of residence. Information is processed as needed for those services, and each provider's privacy policy also applies.
Retention and deletion
Account and space data are retained while needed for service and recovery. An account deletion request removes access and device registrations and marks owned spaces for deletion. Marked spaces and unreferenced photos are cleaned up after a 48-hour recovery interval; delayed jobs may take longer. Account deletion markers and operation records may remain to prevent repeated processing. Operator backups are managed manually, so deleted information may remain in backups; contact us to request deletion of backup copies. You and other members manage copies you have exported or retained. Store and payment providers apply their own transaction record retention policies.
Your choices and requests
You can view and edit information, export a backup of your own space, change notification and photo permissions and request account deletion in the app. Contact us from your registered email address for access, correction, deletion or restriction requests. We request only information needed to verify the requester and never request your password.
Updates
We update this page and its date when this notice changes. Material changes affecting processing purposes or your choices will be communicated before they take effect through the app, email or another appropriate channel.
Google Privacy Policy · RevenueCat Privacy Policy · Apple Privacy Policy
Support and privacy requests
이터널소프트 · Eternalsoft
eternalsoft@eternalsoft.co.kr
+82 10-6577-8291