Privacy Notice

1. Who we are

Fruta Passport is operated by Kevork Wakimian ("we", "us"). For the purposes of data protection law, Kevork Wakimian is the data controller for the personal data described in this notice.

2. Data we collect and why

Account data — your email address and login credentials, used to create and secure your account (legal basis: performance of a contract).

Journal and tasting data — the tasting entries, ratings, notes, dates and places you record, and the fruit photos you upload, used to provide the journal, stamps and keepsake features (legal basis: performance of a contract).

AI scan data — photos you upload for fruit identification and a count of your scans, used to provide the identification feature and enforce fair-use limits (legal basis: performance of a contract and legitimate interests).

Waitlist data — if you join the pre-launch waitlist, your email address, used to notify you at launch (legal basis: consent).

Usage and device data — basic telemetry, device identifiers and IP address, used for security, fraud prevention and product improvement (legal basis: legitimate interests).

Payment data is collected and processed by Paddle (our Merchant of Record) and is not covered by this notice; see Paddle's privacy policy for details.

3. Who we share data with

Service providers and subprocessors who help us run the service (cloud hosting, database and file storage, AI processing, support tooling).

Paddle, our Merchant of Record, for the sale of products, payments, tax compliance and invoicing.

Professional advisers (legal, accounting) where necessary, and authorities where required by law.

We do not sell your personal data.

4. International transfers

Some of our service providers process data outside the UK/EEA. Where data is transferred internationally, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.

5. Retention

We keep your personal data for as long as your account is active or as needed to provide the service. When data is no longer needed, it is deleted or anonymised. Deleting your account removes your journal, photos and purchase records.

6. Your rights

Depending on your location, you may have the right to access, rectify or erase your personal data, restrict or object to processing, request data portability, withdraw consent, and complain to a supervisory authority. We respond to requests within one month. To exercise any right, contact us through the app.

7. Security

We apply appropriate technical and organisational measures, including encryption in transit, access controls, and row-level isolation so each traveler can only access their own entries and photos.

8. Cookies and local storage

We use essential storage only: authentication tokens and offline caching that make the app work (including offline access). We do not use analytics or marketing cookies. You can clear this storage through your browser settings, though sign-in and offline features will stop working until you sign in again.

9. Changes

We may update this notice from time to time. Material changes will be announced in the app, and the "last updated" date above will change.