This page explains the whole picture, because the whole picture is short.
What stays on your device
Everything you put into the app: your food items, dates, prices, photos, notes, shopping list, stats, and achievements. All of it is stored locally on your iPhone and nowhere else. We cannot see it. Nobody can, unless they are holding your unlocked phone.
The one thing that touches the internet
When you scan a barcode, the app asks the Open Food Facts database (a non-profit, open food database) what product that barcode belongs to. The request contains the barcode number and nothing else: no name, no location, no list of what is in your kitchen. Like any internet request, Open Food Facts' servers can see the network address the request came from. The answer is saved on your device so scanning the same product again does not need the internet at all. If you never scan a barcode, the app never uses the network.
Notifications
The daily digest notification is scheduled and delivered entirely on your phone. No notification service of ours is involved, because we do not have one.
Backups
If you export a backup, the app writes a single file and hands it to you. It goes wherever you choose to save it and nowhere else. Restoring reads a file you choose. That is the whole system.
Crash reports and TestFlight
If the app crashes, Apple's built-in reporting can share a technical crash log with us, but only if you have opted in to sharing analytics with developers in your iOS settings. Crash logs describe what the code was doing when it failed. They do not contain your food data.
Apple controls this setting. Fridge Forecast does not turn it on for you.
If you tap Send Feedback, your own mail app opens with our address filled in. Nothing is sent unless you send it.
Children
The app collects no data from anyone, and that includes children.
Changes
If this policy ever changes, the new version will be posted at this page with a new effective date. Given how the app is built, there is not much room for it to change.