Privacy policy
Last updated 15 October 2026. This policy covers the Product Expiry Tracker mobile app and this website.
1. Who we are
Product Expiry Tracker (“the app”) is provided by WEB REGISTER Ltd (“we”, “us”). We are the data controller for the personal data described here.
For anything in this policy, use our contact form.
2. The short version
The app tracks things you own and when they expire. That is the only reason it exists, and we do not use your inventory for anything else.
- You can use it without telling us anything. In guest mode, your items stay on your phone and never reach our servers.
- We do not sell your personal data, and we do not use it for advertising or profiling.
- There are no advertising or analytics trackers in the app.
- Product information you add for a barcoded product is different — it describes the product, not you, and it is shared. See section 6.
- You can delete your account and all your data yourself, in the app, in a few taps. See section 9.
3. Using the app without an account
Guest mode needs no email address and no registration. Your items, photos, storage locations and settings are stored only in the app’s own storage on your phone. We cannot see them, and they are not backed up anywhere — if you uninstall the app without exporting a backup, they are gone.
Even as a guest, two things do leave the phone:
- Barcodes you scan or type. These are sent to our server to look up the product, and on to an open product database if we do not have it yet. A barcode identifies a product, not a person.
- An anonymous device identifier. When you add product details for a barcoded product, a random identifier for your installation is sent with it. We use it only to stop one device flooding the shared catalogue. It is not linked to your name or email, and we do not use it to track you between apps or websites.
Reminders are scheduled by your phone. Nothing about them is sent to us.
4. What we hold when you have an account
| What | Details |
|---|---|
| Your account | Email address, a one-way encrypted (hashed) password that we cannot read or recover, and the date you registered. |
| Your settings | Preferred language, default country, date format, and your default reminder rules. |
| Your items | Everything you record: product name, brand, barcode, expiry date, quantity, storage location, notes, weight, category, country of origin, description, ingredients and nutrition values. |
| Your photos | Pictures you add to an item. They are stored with our storage provider and served from a web address that is hard to guess but not secret — treat a photo as unlisted rather than private. |
| Your storage locations | Any locations you create, with their names and icons. |
| Your subscription | Whether a subscription is active, which plan, which store, and when the current period ends. We never see your card: payment is handled entirely by Google or Apple. |
| Reports you send | If you report wrong product data, we store what you corrected and email it to ourselves, together with your account email or your device identifier. |
| Messages you send us | If you use the contact form on this website: your name, your email address, the topic and your message. We use them only to answer you. |
| Server logs | Ordinary technical logs: the time, the address requested and your IP address. IP addresses are used to apply rate limits and to investigate abuse and faults. |
5. Why we use it, and on what legal basis
If you are in the UK or the European Economic Area, the UK GDPR and the EU GDPR apply. Our legal bases are:
| Purpose | Legal basis |
|---|---|
| Running the account and storing your items so they reach your other devices | Performance of a contract with you |
| Sending the emails the service depends on — password resets, and notices about your subscription | Performance of a contract with you |
| Taking payment and keeping your subscription in step with the store | Performance of a contract with you |
| Keeping the service up, stopping abuse, applying rate limits, and investigating faults | Our legitimate interests in a service that works and is not abused |
| Building and improving the shared product catalogue from information you add (see section 6) | Our legitimate interests in a catalogue that makes the app useful to everyone |
| Meeting our legal obligations, for example tax records of a sale | Legal obligation |
We do not use your personal data for advertising, and we do not make automated decisions about you that have legal effects.
6. Product information you add
This section matters, so it is written plainly.
When you add or correct details of a product that has a barcode — its name, brand, weight, category, ingredients, nutrition values, country of origin, or a photo of the product or its label — that information is added to a shared product catalogue we maintain, alongside data from open product databases. It is stored against the barcode, not against you.
This information may be used and shared by us, including with third parties, and may be made available through a product data service. We may keep it indefinitely, and it is not removed if you later delete your account, because by then it describes the product rather than you.
It is not published with your name, email address or any other identifier. If you would rather not contribute, do not fill in product details for a barcoded item: your own copy of an item is always yours alone, and anything you record for a product with no barcode is never shared.
7. Who else sees it
We do not sell personal data. We share it only with the services the app needs to work.
We may also disclose data if the law requires it, or to establish or defend legal claims.
Where your data is held
Our server and database are in the European Union. Some of the services we use may process data outside the EEA, including in the United States. Where that happens, the transfer relies on the European Commission’s standard contractual clauses or an equivalent safeguard.
8. How long we keep it
- Your account and items: until you ask us to delete them. An account that has had no subscription and has not been signed in to for three years may be deleted, after we have warned you by email.
- Photos: deleted when you delete the item they belong to, or when the account goes.
- Messages you send us: kept in our mailbox only as long as needed to deal with them, and normally deleted within two years.
- Password reset links: one hour, then they stop working; the record is cleared within 24 hours.
- Server logs: up to 90 days.
- Records of a sale: as long as tax law requires, which is normally several years.
- Shared product catalogue: indefinitely — see section 6.
9. Your rights, including deletion
You can ask us to:
- give you a copy of the personal data we hold about you (the app also exports everything for you);
- correct anything that is wrong;
- delete your account and the data in it;
- restrict or object to how we use it;
- send your data to another service in a machine-readable form.
You can also export everything in the app at any time, without asking us: Settings → Backup & export.
What deletion removes
- your account, your sign-in and your settings;
- all your items, with their photos and notes;
- your storage locations;
- any unused password-reset links;
- your subscription record with our subscription-checking service.
What stays
- Product information you added to the shared catalogue and any reports you made about it stay, with your account removed from them, as explained in section 6. A photo you contributed to the catalogue stays with it.
- Records we are legally required to keep, such as the record of a sale, for as long as the law requires.
- Your subscription. Deleting an account does not cancel a subscription: only Google Play or the App Store can do that, and they keep billing you until you cancel there. Cancel first, under Subscriptions in the store. We say so in the app before you confirm.
Accounts can be deleted only from inside the app. If you have forgotten your password, reset it from the login screen first. In guest mode there is nothing on our servers to delete: your items are only on your phone, and uninstalling the app or clearing its data removes them.
You can ask for a copy, a correction, or to restrict or object to our use of your data in the same way, through the contact form.
If you think we have handled your data badly, please tell us first — but you also have the right to complain to your national data protection authority.
10. Security
Traffic between the app and our server uses HTTPS. Passwords are stored only as a bcrypt hash, so nobody — including us — can read them. Password reset links are stored hashed, expire after an hour and work once. Access to the server and database is limited to the people who run the service.
No service can promise perfect security. If a breach affects your data and is likely to put you at risk, we will tell you and the relevant authority as the law requires.
11. Children
The app is not aimed at children and is not intended for anyone under 16. We do not knowingly collect data from children. If you believe a child has given us personal data, write to us and we will remove it.
12. Changes
If we change this policy we will update the date at the top. If a change materially affects your rights, we will tell you in the app or by email before it takes effect.
13. Contact
WEB REGISTER Ltd
Contact us through the form