Privacy Policy

Last updated: June 22, 2026

Expireless ("we", "our", "us") is a food inventory and expiry tracking app operated by Mikl Labs. This Privacy Policy explains how we collect, use, and protect your personal information when you use the Expireless app (Android, iOS, web) and related services.

1. Information We Collect

Account data — Telegram user ID, display name, and language when signing in via Telegram; Google account ID when signing in via Google.
Inventory data — food items, expiry dates, quantities, storage locations, and shopping lists that you add.
Usage data — app events, feature usage, and error logs collected via anonymous analytics.
Device data — FCM token for push notifications (Android/iOS). We do not collect device fingerprints or advertising IDs beyond what Google Play Services requires.
Receipt images — photos or PDFs you upload for OCR scanning. These are sent to Google Gemini AI for processing and are not stored permanently on our servers.
Voice input — audio is transcribed via OpenAI Whisper and not stored after processing.

2. How We Use Your Information

To provide and improve the core inventory, expiry tracking, shopping list, and menu features.
To send expiry alerts and medicine reminders via Telegram or push notifications.
To process in-app purchases and subscriptions.
To diagnose errors and improve app stability (Sentry error tracking).

3. Data Sharing

We do not sell your personal data. We share data only with:

Google Gemini / OpenAI — for AI-powered receipt scanning, voice input, and menu generation. Data is processed per their respective privacy policies.
Telegram — for bot notifications and authentication.
Sentry — for anonymised crash and error reporting.
Google Analytics (GA4) — for anonymised usage analytics on the website.

All third-party processors are bound by data processing agreements.

4. Data Retention

We retain your account and inventory data for as long as your account is active. Deleted products are soft-deleted and permanently removed within 24 hours. After account deletion, all personal data is permanently erased within 30 days.

5. Security

All data in transit is encrypted via TLS. Database backups are encrypted with AES-256. We apply the principle of least privilege to internal data access.

6. Your Rights

Depending on your jurisdiction you may have the right to access, correct, export, or erase your personal data. To exercise these rights, contact us at [email protected].

7. Account Deletion

How to delete your Expireless account and all associated data:

Option A — In-app (fastest): Open the app → Profile tab → Settings → Delete Account. Your account and all data are permanently deleted within 30 days.

Option B — By email: Send a deletion request to [email protected] with the subject line "Account Deletion Request". Include your registered Telegram username or Google email so we can identify your account. We will confirm deletion within 5 business days.

Upon deletion we erase: your profile, all food inventory, shopping lists, medicine schedules, AI usage logs, and payment history. Anonymous aggregated analytics that cannot be linked back to you may be retained.

8. Children's Privacy

Expireless is not directed at children under 13. We do not knowingly collect personal information from children under 13.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via the app or email. Continued use of the app after changes constitutes acceptance.

10. Contact

Questions or requests: [email protected]
Mikl Labs, Poland