Privacy policy

What the app stores, and where

Freezers, shelves, packs, dates, quantities, custom names and notes are written to a database inside the app’s own container on your iPhone. There is no login, no password and no profile attached to them. DM Apps has no copy and no way to read them.

iCloud

If you are signed in to iCloud, Frostlog mirrors that database into the private area of your own iCloud account, using Apple’s CloudKit. This is what keeps the list identical on your iPhone and your iPad, and what brings it back when you replace a phone.

That data sits under your Apple Account, is governed by Apple’s terms, and is readable only by you and by Frostlog on your devices. DM Apps operates no server in this path and receives nothing. Signing out of iCloud, or switching Frostlog off in the system iCloud settings, stops the mirroring; the list stays on the phone.

Sharing a freezer with someone

Sharing a freezer creates an Apple CloudKit share and sends an invitation through the system share sheet — the same mechanism as a shared photo album or a shared note. The other person needs an Apple Account and nothing else: no registration with us, no email given to us.

What they can see is that one freezer and its contents. They cannot see your other freezers. Stopping the share removes their copy. The invitation, the acceptance and the exchange of data all run through Apple; DM Apps is not a party to any of it and stores nothing about who you shared with.

Anonymous usage events

The app records a small set of product events — the app was opened, a pack was added, a pack was eaten or thrown out, a freezer layout was chosen, a paywall was shown, a purchase succeeded, sync changed state. These carry counts, flags and fixed option names from a closed list defined in the app’s source.

Never included in an event, by rule:

• The names of anything in your freezer, typed or chosen.
• Custom food names, custom shelf names and freezer names.
• Anything you type into search.
• Prices, notes and photos.

The line is simple: if you typed the value, it does not go into an event. If we defined the value — a screen name, a layout type from a fixed list, a yes/no flag, a count — it may. There is no automatic screen capture and no session recording, and every automatic collector in the analytics SDK is switched off.

These events are processed by PostHog, an analytics service, on servers in the United States. They are not tied to a name, an email or an account, because Frostlog has none of those; the only identifier is a random value created at install that identifies a copy of the app, not a person. They are not used for advertising and are not shared with anyone else.

You can switch this off. Settings has an Anonymous usage data toggle that stops collection and discards anything still waiting to be sent. The app works exactly the same with it off.

Which ad brought the install (Apple Ads)

If you installed Frostlog after tapping one of our ads in App Store search, the app asks Apple once, on first launch, which of our ad campaigns that was. It uses Apple’s AdServices framework: the phone creates a one-time token and sends it to Apple’s own attribution service, and Apple answers with numbers — our campaign, ad group and keyword ids — or with “not from an ad”.

Those numbers are attached to the anonymous usage events described above, so we can see whether our ads bring people who actually use the app, and stop paying for the ones that don’t. Nothing about you is in them: no name, no Apple Account, no advertising identifier (IDFA), nothing that links you across other apps or websites. That is why there is no App Tracking Transparency prompt. With Anonymous usage data switched off, the app does not ask Apple at all.

Notifications

Reminders about packs approaching the end of their quality window are scheduled on the device by iOS. They are not push messages from a server of ours, and their content never leaves the phone. Notification permission is optional and the app is fully usable without it.

Purchases

Subscriptions and the lifetime purchase are handled by Apple through the App Store. DM Apps receives no card details and no billing address. The app knows only whether an entitlement is active.

What the app never does

• No ads inside the app, no advertising identifier (IDFA), no ad networks. The only advertising-related data is the Apple Ads attribution above.
• No selling or sharing of data with third parties.
• No tracking across other apps or websites, and no App Tracking Transparency prompt, because there is nothing to track.
• No contacts, location, microphone or health access.

Camera and photos

The camera is used for two things.

A photo of a pack, if you choose to take one. The picture is read on your phone — text, dates and what kind of food it is are recognised by Apple’s on-device Vision, with no server of ours or anyone else’s involved. The app keeps the pack itself, cropped away from the background, as part of your list: on your device and, with iCloud on, in your own iCloud. If a freezer is shared with your family, the people you invited see that pack’s photo too. Replacing the photo or deleting the pack removes it. Nothing is sent to us.

The QR code that invites you to a shared freezer. That picture is examined on your phone to find the code and is never saved.

You can also pick a photo you already have, and the app works fully without granting either permission: packs go in with one tap, and an invitation link works on its own.

Deleting everything

Deleting a freezer inside the app removes it and everything in it, on every device signed in to the same iCloud account. Removing the app from the phone removes the local database; the copy in your private iCloud is removed by turning Frostlog off in the system iCloud settings, or by deleting the app’s data from iCloud storage settings.

Children

Frostlog is a household tool for adults. It is not directed at children, is not in the Kids Category, and collects nothing that would identify anyone.

Changes

If this policy changes, the date at the top changes with it, and the change is described in the app’s release notes.

Contact

Questions about any of this go to support@dmapps.app. See also the support page.