Privacy Policy

Holodos is operated by Marsel Galimov
50G Geofizikov Street
Ufa, Republic of Bashkortostan
Russian Federation. Privacy and data-rights requests: founder@myholodos.com.

Scope and data we process

This policy covers the Holodos website and application. We process account details, password hashes, verification and reset records, sessions and security metadata to register users, authenticate access and protect the service. Holodos is intended for people aged 18 or older.

Household names, memberships, roles, invitations and audit events support collaboration. Inventory, shopping-list entries, quantities, storage locations, dates, notes and photos are used to provide the requested household service. Content shared with a household is visible to authorized members and may remain for them after one member deletes an account.

Images and AI recognition

If you save an image as an inventory photo, it remains with that item until it or the relevant household is deleted. When you request product recognition, the photo and product context are sent to OpenAI for processing. Recognition suggestions are not final decisions — you review and confirm them before they affect your inventory.

Smart Holodos and recipe suggestions

The Smart Holodos chat assistant and “what you can cook” recipe suggestions are grounded in a snapshot of your household’s current inventory (product names, quantities, storage location, expiration status), sent to OpenAI to generate a response. Chat messages are stored so a conversation can continue; recipe suggestions are generated fresh per request and not stored.

Notifications, email and support

We process notification data for expiry reminders. Resend delivers account, password-reset and household-invitation email. IONOS hosts the support mailbox. Support correspondence is processed to answer requests and protect the service.

Logs, security and device storage

Security and operational records may include IP address, user agent, timestamps, internal identifiers and failures. Holodos uses an essential session cookie, a language cookie, and functional local/session storage for onboarding state and interface preferences. We do not currently use any advertising or analytics tracker.

Providers and international processing

Depending on the operation, data may be processed by Hetzner (application hosting), OpenAI (product recognition, Smart Holodos, recipe suggestions), Resend (transactional email), IONOS (support email), Timeweb Cloud (DNS/domain administration), GitHub (source-code hosting), and Open Food Facts (public product-data lookup). These services may process data outside your country.

Russia launch and data location

Holodos lists Russia among its initial markets, but its current primary database is hosted outside the Russian Federation (Hetzner, Finland). This policy does not claim that Russian data-localization requirements have been completed. Onboarding Russian users at scale is subject to a separate legal and technical review.

Retention and your rights

We keep data for as long as needed to provide the service, plus reasonable security, dispute and legal needs. Self-service data export and account deletion are not yet available in the product; to request access, correction, deletion, restriction, objection or portability of your data, email founder@myholodos.com. Rights depend on applicable law, including GDPR rights where EU/EEA law applies. You may also complain to a competent supervisory authority.

Security and changes

We use access controls, hashed credentials, restricted networks and monitoring. No system is completely secure. Material updates to this policy will get a new effective date.

Effective date: 2026-08-17