Your shelf, your avoid list and your reminders stay on your device — we can't see them, access them, or share them. A few optional features sync data through your own iCloud (see iCloud Sync below), but never your avoid list or any health-related data.

Data Stored Locally

• Items and their expiry dates
• Your avoid list (allergens/ingredients)
• Preferences

All data is encrypted via iOS storage when your device locks.

iCloud Sync (optional)

These features are off until you use them, and rely on your own iCloud account:

• Household sharing — if you invite family members, Custoda uses private iCloud invitations. The shared shopping list, recipe suggestions and votes, and the display name you choose, sync between the members of your household. Only people you invite can see them.
• Selected food from your inventory — off by default. If you turn on food sharing, only the food items you choose to share are visible to your household, and you can stop sharing at any time. Medicines, other items and your avoid list are never shared.
• Your saved recipes — recipes you create are stored in your private iCloud so they appear on all your devices, and stay private to you.

Everything else stays on your device.

What We Do NOT Do

• No accounts
• No tracking
• No ads
• No data monetisation
• No servers of our own
• No selling or sharing your data

Barcode Lookups

Optional regional catalogs download public product data from bfgapps.co for offline searching and scanning. Search terms, your inventory, avoid list and diet preferences are not sent with these downloads. Product-information photos can be cached separately when you enable that option, and downloaded packs and cached photos can be removed in Settings.

When you scan a barcode, Custoda may request public product information from Open Food Facts, Open Beauty Facts or Open Products Facts, and, if none of those knows the product, from USDA FoodData Central. That request contains only the barcode number — no identity and no account. If one of the Open Facts databases has a photo of the product, Custoda also downloads a small copy of it. Results are cached on your device so repeat scans work offline.

When you open the “More from Blue Flame Games” screen, Custoda asks Apple’s public App Store lookup, at most once a week, for the current names and icons of our other apps; the request contains only those apps’ App Store IDs and your device’s country code.

Camera

The camera scans barcodes and reads printed dates and ingredient labels entirely on-device. Label review also reads only the photos you explicitly select. You review recognized text before saving a local correction and may choose to retain its first photo on your device. Label text and personal photos are never uploaded.

Payments

All payments are processed by the Apple App Store. No financial details reach Custoda.

Notifications

Expiry reminders are local and device-side. No server is involved.

Deletion

Delete individual items in the app, or uninstall Custoda to remove everything stored on your device. Anything you have synced through iCloud (see iCloud Sync above) is not removed by uninstalling: delete your recipes, stop sharing food or leave your household in the app first.

Data Sources

Product data comes from the contributors to Open Food Facts, Open Beauty Facts and Open Products Facts (ODbL), and from USDA FoodData Central.

Not Medical Advice

Custoda helps you track expiry and flags ingredients you've told it to avoid. It does not guarantee a product is safe — always check the packaging and consult a pharmacist or doctor.

Contact