AperUpThis Privacy Policy explains how the AperUp app processes users' personal data, in accordance with Regulation (EU) 2016/679 ("GDPR") and other applicable data protection laws.
1. Data controller
The data controller is:
Davide Ferrario
Via Monte Rosa 4
22070 Appiano Gentile (CO), Italy
Email: info@aperup.com
For any privacy request or to exercise your rights, please write to the email address above.
2. Data we process
AperUp processes only the data needed to provide and improve the service. This may include:
- account data, such as name, email address, country and language;
- technical account and device identifiers needed for the service to work;
- dietary preferences, allergies and intolerances you choose to enter;
- ingredients you select in your fridge, pantry and freezer;
- preferences and content you save in the app;
- essential technical data about the app's operation, security and stability.
3. Sign in with Apple and identity management
When you choose “Sign in with Apple”, authentication is handled by Apple. AperUp only receives the information needed to identify your account, according to the choices you make. If you use “Hide My Email”, Apple may provide a private relay address. AperUp never receives your Apple ID password.
4. Profile and dietary preferences
Information about allergies, intolerances and dietary preferences is used to personalize and filter suggestions. It does not replace checking product labels or medical or professional advice, and it is not a diagnosis or prescription.
5. Purposes
We use data to create and maintain your account, generate suggestions based on your ingredients and preferences, sync Premium access, ensure security and stability, handle support requests and comply with legal obligations.
6. Legal basis
Depending on the case, processing is based on performance of the service you requested, your consent, our legitimate interest in keeping the service secure and working properly, and compliance with legal obligations. Where applicable, you can withdraw your consent at any time.
7. Service providers
To provide the service, AperUp may rely on technical providers that process data on our behalf or under their own roles and terms, including infrastructure and authentication services, subscription management and app store services. In particular, the service may interact with Supabase, RevenueCat, Apple and, on the relevant platforms, Google.
AperUp does not sell users' personal data.
8. Advertising measurement (Meta)
To measure the effectiveness of our advertising campaigns, AperUp uses tools provided by Meta Platforms Ireland Ltd. (Facebook and Instagram): the Meta SDK in the iOS app and the Meta Pixel on the aperup.com website.
In the iOS app, your device's advertising identifier (IDFA) is shared with Meta only if you allow it through Apple's “Allow this app to track your activity” prompt (App Tracking Transparency). With your permission, Meta may receive the advertising identifier and information about app events, such as install, app open, free trial start and subscription purchase, in order to attribute installs to ads and optimize campaigns. If you do not allow tracking, the IDFA is not shared and measurement happens only in limited or aggregated form, including through Apple's systems (SKAdNetwork). You can change your choice at any time in Settings > Privacy & Security > Tracking.
On the website, the Meta Pixel is activated only if you accept it through the cookie banner. In that case it may record page visits and clicks to the App Store to measure campaign results. If you decline, the Pixel is not loaded. You can change your choice at any time using the “Cookie settings” link at the bottom of the home page. Your choice is saved in your browser.
Meta also processes this data under its own policy, available at facebook.com/privacy/policy. The legal basis is your consent.
9. Subscriptions and payments
AperUp offers auto-renewable Premium subscriptions. Purchases made through the App Store are processed by Apple under the App Store terms. AperUp does not receive or store your full payment card details. RevenueCat may be used to verify subscription status and access to Premium features.
10. Notifications
If you enable notifications, AperUp may process a technical device identifier or push token needed to deliver them. You can turn notifications off at any time in your device settings.
11. Retention
Account data is kept for as long as needed to provide the service and, afterwards, for any period required by law or to protect our rights. If you delete your account, your data is deleted or anonymized within the necessary technical timeframes, unless we are required to keep it.
12. International transfers
Some providers may process data outside the European Economic Area, including in the United States. In those cases processing relies on the safeguards required by applicable law, including adequacy decisions or standard contractual clauses where needed.
13. Security
AperUp takes reasonable technical and organizational measures to protect data against unauthorized access, loss, alteration or disclosure. However, no system can guarantee absolute security.
14. Your rights
Where provided by the GDPR or other applicable law, you may request access, correction, deletion, restriction, objection, portability and withdrawal of consent. You may also lodge a complaint with the competent supervisory authority; in Italy this is the Garante per la protezione dei dati personali. Users outside the EU, including in the United States, can send any privacy request to info@aperup.com and we will handle it in line with the laws that apply to them.
15. Account deletion and revoking Apple access
You can request or start account deletion using the features in the app or by contacting info@aperup.com. If you used “Sign in with Apple”, you can also manage or revoke AperUp's access in your Apple ID settings. Revoking Apple access does not automatically cancel active subscriptions, which must be managed through the App Store.
16. Children
AperUp is not intended for children under 14 and does not knowingly collect personal data from children below the permitted age without the authorizations required by law.
17. Changes and contact
This Privacy Policy may be updated to reflect changes to the service or the law. The date of the latest update is shown at the top of this page. For privacy requests: info@aperup.com.
This English version is provided for convenience. In case of any discrepancy, the Italian version prevails.