Xpir Privacy Policy
Xpir helps you track expiry dates for food, medicine, subscriptions, documents, warranties, cosmetics and other items, and lets you save links to videos and pages from other services so you can find them again. This Privacy Policy explains what information Xpir collects, how it is used and the choices you have.
Information We Collect
Account information
When you create or use an account, Xpir may collect your email address, display name, profile photo from your sign-in provider, sign-in provider (email, Google or Apple), Firebase Authentication user ID, and account timestamps.
Expiry tracking information
Xpir stores the information you add so the app can track expiry dates and send reminders. This includes item names, categories, expiry dates, reminder settings, item status, quantity, unit, brand, batch number, notes, storage location, custom categories, category settings and notification history.
Saved video links
Xpir lets you save links to videos and pages hosted by other services, including Instagram, TikTok, YouTube, Facebook, Pinterest, X, Threads and ordinary websites. For each link you save, Xpir stores in your account: the link (URL) you shared or pasted; the source platform, identified from the link; the title, thumbnail image address and creator name where the source platform makes that information publicly available; a title you type yourself if no public title could be retrieved; your own notes and category assignment; and the date you saved it.
When you add a link, Xpir asks the source platform's public preview service for that link's basic information. For Instagram links, Xpir may use the third-party service microlink.io and Meta's public instagram_oembed endpoint. These requests contain only the public link you chose to save. They do not include your name, email address, account identifier or login credentials, and they carry none of your expiry tracking data.
Xpir does not download, copy, store or host any third-party video or image file. Xpir stores the address of that content. The video itself always remains with the platform hosting it, and opening a saved video hands you off to that platform's own app or website, where that platform's privacy policy applies.
If you share a link into Xpir before signing in, the link is held on your device only until you sign in, and is then moved into your account. You can delete any saved link at any time. Deleting it from Xpir removes only your own saved reference and has no effect on the original post.
Subscription logos
When you track a subscription or membership, Xpir shows the service's logo to make the entry easier to recognise. To do that it asks Google's public favicon service for the icon of that service's website — the same request a web browser makes to show a site's icon on a tab. The request contains only the service's domain name, such as netflix.com. It does not include your account identifier, your email address, your item list or any other information about you, and it is only made for services Xpir already recognises by name.
If the icon cannot be loaded, or you are offline, Xpir draws the service's initials instead. Logos are never stored in your account and are never bundled into the app. Company names and logos remain the property of their respective owners, and their appearance in Xpir does not imply any affiliation with or endorsement by them.
Photos, camera and scanning
Xpir may access your camera or photo library only when you choose to use a scanning feature or attach a photo to an item.
Camera scanning uses on-device optical character recognition (OCR) powered by Google ML Kit to read printed text from product labels — including expiry dates, product names, brand names and batch numbers. This image processing is performed entirely on your device. No photo or image is sent to Xpir servers or Google servers for OCR.
Xpir also supports fresh produce scanning. When you point the camera at a PLU price-look-up sticker on fruit or vegetables, Xpir reads the PLU code using on-device OCR and matches it against a bundled IFPS (International Federation for Produce Standards) database and a built-in USDA FoodKeeper shelf-life database to estimate how long the item will stay fresh. No produce images or PLU codes are sent to any external server. Shelf-life estimates are calculated locally on your device using bundled reference data.
Optional item photos you save are uploaded to Firebase Storage so they appear in your account across devices. Xpir does not use camera access for advertising.
Notifications
If you enable reminders, Xpir may use a device notification token and your notification preference settings to send expiry reminders. You can disable notifications at any time in the app or in your device settings.
Free tier and subscription
The free tier of Xpir allows you to track up to 25 items and 6 categories. Usage counts are tracked locally and in your account to enforce these limits. Upgrading to Xpir+ removes these limits. Subscription status and purchase-related information are processed by Apple, Google Play and RevenueCat to manage access to premium features.
Advertising and identifiers
Xpir may show ads to free users through Google AdMob. Xpir+ subscribers do not see ads. Google AdMob may collect or receive device identifiers, advertising identifiers, approximate location derived from IP address, app interactions, ad interactions, diagnostics and performance information.
This information may be used to provide ads, limit ad frequency, measure ad performance, prevent fraud and improve ad delivery. Where required by law, Xpir uses Google's User Messaging Platform to request your consent before ads are served. If privacy choices are required in your region, you can manage them in the app from Settings > Privacy Choices.
Learn more about how Google uses data at https://policies.google.com/technologies/ads.
How We Use Information
Xpir uses information to create and manage your account, sync your expiry list across devices, save and display your items, categories, photos and settings, save, organise, search and reopen the video links you choose to keep, retrieve public preview information for those links, send expiry reminders, help you scan labels and identify fresh produce shelf life, provide customer support, manage premium access, show and measure ads for free users, improve reliability and security, and detect abuse or technical problems.
How Information Is Shared
Xpir does not sell your personal information. Xpir uses third-party service providers that process information for app functionality, security, analytics, purchases or advertising. These may include Firebase, Google Cloud, Google Sign-In, Apple Sign-In, Google Mobile Ads, Google User Messaging Platform, Google ML Kit, Apple, Google Play and RevenueCat. Xpir also contacts public link-preview endpoints operated by Google/YouTube, TikTok, Pinterest, Meta (instagram_oembed) and the third-party service microlink.io, solely to retrieve public information about a link you saved; those requests carry only the public URL and no account data. Each provider operates under its own privacy policy.
Data Retention
Xpir keeps your account and expiry tracking data for as long as your account is active. If you delete an item, category, photo or your account, Xpir removes it from active storage, subject to technical processing time, backup systems, logs, fraud prevention, security requirements and any applicable legal obligations.
Account Deletion
You can delete your account inside the app from Settings > Delete Account. When you confirm deletion, Xpir permanently deletes your login credentials and all associated app data, including saved items, custom categories, notification history, settings and item photos stored by Xpir.
For security, Xpir may ask you to sign in again immediately before deletion is processed. You can also request deletion by visiting https://xpir-app.web.app/deletion.
Your Choices
You can edit or delete individual items inside the app at any time. You can disable notifications in the app or in device settings. Where required, you can manage ad privacy choices from Settings > Privacy Choices. You can delete your entire account from Settings > Delete Account. For any privacy question or deletion request, contact xpirmobileapp@gmail.com.
Children
Xpir is a general household productivity app and is not directed at children. We do not knowingly collect personal information from children.
Security
Xpir uses Firebase, Google Cloud infrastructure, HTTPS encryption, Firebase Authentication and platform security controls to protect user data. No online service can guarantee complete security.
Changes
We may update this Privacy Policy when the app, laws or service providers change. The effective date at the top of this page shows when the policy was last updated.
Contact
For privacy questions or deletion requests, contact xpirmobileapp@gmail.com.