Privacy Policy

PROvisions

Version
2.0
Effective date
October 24, 2026
Developer
Developer
Contact
01

Introduction

This Privacy Policy describes what data is collected, processed, and stored by the mobile application "PROvisions" for iPhone and iPad (it runs as an iPad app on Mac and Apple Vision Pro), developed by Developer (the "Developer", "we"), and how that data is protected.

The App is designed to help users track the expiration dates of products and goods. Users can:

  • add items manually or by scanning the packaging label;
  • calculate expiration dates using the built-in calculator and optionally save results to the product list;
  • receive local notifications about approaching or passed expiration dates;
  • optionally look up product information in a shared database by barcode and suggest new products (optional online features, see section 03).
Core principle: your product list, passcode and settings stay on your device. The App uses no third-party SDKs, displays no advertising, requires no account and does not ask for your name or email. Only the optional online features contact the Developer's server (section 03).

The online features work at your request and are needed to carry out that request (find a product, accept your suggestion). Server logs and app verification via Apple App Attest are used to protect the service from abuse.

02

What Data We Collect

The App processes only data you enter yourself or that is required for its operation. Most data stays on your device only. Data transmitted to the server when you use the online features is described separately in section 03.

Product data

  • product name;
  • production date, expiration date, opening date;
  • product category;
  • product photograph (optional, at your discretion).

Expiration date calculator data

The App includes a built-in calculator to compute expiration dates.

  • All calculations run entirely on your device and are not saved automatically.
  • If you tap "Save", the result is added to your product list and processed under the same terms.
  • If you do not save the result, no calculation data is stored or transmitted.

App settings

  • notification preferences (schedule, on/off);
  • security settings (passcode, biometrics, lock timeout).

Settings are stored locally on your device.

App passcode

If you set a numeric passcode (4 or 6 digits), it is stored exclusively in the secure system storage Keychain. The App does not transmit your passcode to any server, the Developer, or any third party.

We do NOT collect
  • name, email, phone number, address: there are no accounts, this data is not requested;
  • advertising device identifiers;
  • location data;
  • analytics or behavioral statistics linked to you (the server keeps only aggregate daily request counters that contain no information about users, see section 03);
  • your product list, passcode or settings: they never leave the device (except via iCloud when you are signed in to iCloud on the device, and the family list if you use it).
03

Online Features and Our Server

Some features work over the internet with the Developer's server (prosrok.ru): it provides product information by barcode and lets users add to the shared product database. These features are optional and require no account.

The server does not receive your name, email, phone number, your product list, passcode or app settings.
🔎Product lookup by barcode

When you scan a barcode, the App sends it to the server and receives information about the product: name, photo, shelf life, and also ingredients, nutrition facts, storage conditions, allergens and food additives, where they are given in the database.

The barcode is not stored together with an IP address or a device identifier. After the response, the server only increments a daily counter for the product or barcode (aggregate counters that contain no information about users). The fact of the request itself (IP address and time, without the barcode) is recorded in the server's technical log for up to 3 days.

🛡️Verifying that a request comes from the App

To protect the database from bots and mass copying, the App once creates a cryptographic key on your device and attests it through the Apple App Attest service. The server stores a random identifier and a public key. They are not linked to your name, Apple ID or other data, but make it possible to tell one device from another (for example, to limit the number of submissions per day).

After you uninstall and reinstall the App, a new key is created. The record is deleted after 90 days of inactivity. The identifier is random and does not allow your identity to be established.

📦Suggesting a new product

If you tap "Send", the product barcode, packaging photos (up to 7) and an optional note (up to 500 characters) are sent to the server. Sending happens only on your action; the App asks for confirmation before the first submission. All metadata except the image orientation and technical image parameters (such as resolution) is removed from the photos before sending.

What you send is stored separately from the IP address and the device identifier, and the Developer does not match these data. Submitted photos are not published in their original form and are visible only to the Developer. The Developer may use them to prepare a product card (name, ingredients, nutrition facts, shelf life, a processed packaging photo) that is available to all users; by sending a photo, you permit such use. Unprocessed submissions are deleted automatically after 30 days; in any case, submitted originals are kept no longer than that.

You can also report a mistake in a product that is already in the database: the barcode, packaging photos (up to 7) and an explanation (up to 500 characters, required). Such a report is sent only on your action and is stored in the same way as a suggested product.

Please do not photograph people or documents. If such a photo has been sent, write to us (section 11) and we will delete it.

🧾Technical server logs

Like any web server, ours records in a log the IP address, date and time, the type of request (without the barcode and the submission number) and the response code. Request headers and information about your device are not recorded.

The log is used only to protect against abuse, including temporarily blocking addresses that send requests in bulk.

The prosrok.ru website does not use cookies, analytics or advertising. Your chosen language and theme are remembered only on your device, by your browser.

Where data is stored

The server is located in Saint Petersburg (Russia) with the hosting provider Timeweb Cloud. Only the Developer has access to the server. Data is transmitted over a secure connection (HTTPS).

The Developer does not transfer data outside Russia (except for your device's interaction with Apple services, which is governed by Apple).

Retention periods

  • server request log: up to 3 days;
  • abuse-protection records (IP address and time of the event): up to 3 days;
  • device key identifier: while you use the App, and up to 90 days after the last activity;
  • daily submission counters for a device: 7 days;
  • aggregate product-lookup counters: contain no information about users (counters for barcodes not in the database: up to 180 days);
  • products you suggested (barcode, photos, note): no longer than 30 days.
  • products you suggested and error reports (barcode, photos, note): no longer than 30 days.
04

How We Use Your Data

All data processed by the App is used exclusively for the following purposes:

  • displaying your product list and expiration dates;
  • calculating expiration dates in the built-in calculator;
  • generating local notifications about approaching or passed expiration dates;
  • automatically recognizing dates on labels via computer vision and Apple Intelligence;
  • capturing and attaching product photographs at your choice;
  • synchronizing data across your devices via iCloud - automatically, if you are signed in to iCloud on the device (you can turn it off in the system iCloud settings);
  • displaying upcoming expiration dates in the home-screen widget;
  • protecting access to the App with a passcode and/or biometrics;
  • answering your product lookups from the shared database and processing the products you suggest (section 03);
  • verifying that a request comes from the App and limiting request rates to protect against bots and abuse;
  • aggregate statistics (counters with no information about users) on which products are scanned most, to expand the shared database.
We do not use data for advertising or profiling, do not sell it and do not share it with third parties for advertising or analytics. The infrastructure is provided by Apple (iCloud, App Attest) and the hosting provider Timeweb Cloud, which is obliged to ensure the confidentiality and security of hosted data.
05

Data Storage and iCloud

Local storage

All product data, including photographs, is stored locally on your device. Data you send to the server (section 03) is stored there for a limited time.

iCloud synchronization

If you are signed in to iCloud on your device, the App automatically synchronizes data across your devices via Apple iCloud. You can turn synchronization off for the App in the system iCloud settings. The Developer has no access to your data in iCloud; Apple provides its storage.

Data processing within iCloud is governed by Apple's privacy policy: apple.com/legal/privacy.

Family list

If you create a shared (family) list and invite other people to it, the products in that list are visible to the invited members. They are passed through Apple iCloud (CloudKit) using an invitation that you send yourself; the Developer has no access to this data. You can leave the list or remove a member in the App. Your personal products stay separate.

Data deletion

  • Delete all local data: "Settings → Delete all data" within the App.
  • Uninstalling the App removes the App's data from the device, including the App passcode stored in the system Keychain.
  • iCloud data can be deleted via your device's system iCloud settings.
  • Products sent to the server are deleted automatically after 30 days. To have them deleted sooner, write to us (section 11).
06

Permissions

All permissions are optional - you may deny any of them and continue to use the App with reduced functionality.

📷Camera

Purpose: (a) text recognition (OCR) on packaging to automatically detect dates; (b) capturing a product photo to attach to a product card; (c) photographing packaging to suggest a new product.

Data retention: the video feed is not recorded or transmitted. A captured photo is saved locally only if you attach it. A photo you suggest as a new product is sent to the server only after your confirmation (section 03).

🖼️Photo Library

Purpose: (a) selecting a photo from your gallery to attach to a product card; (b) recognizing dates in previously saved photos.

Data retention: an attached photo is saved only locally on your device.

🔔Notifications

Local only No server-side push service is used: notifications are generated on the device itself.

Purpose: notifying you about approaching or passed expiration dates.

Content: product name, expiration date, and optionally a photo thumbnail.

🔐Face ID / Touch ID

Purpose: unlocking the App instead of entering a passcode.

Data retention: biometric data never leaves the device's Secure Enclave. The App has no access to biometric templates.

🧠Apple Intelligence

On devices with iOS 26+, label text may be processed by Apple's on-device language model for improved date recognition.

On-device No data is sent to Apple's servers, the Developer, or any third party. Available only when Apple Intelligence is enabled.

🔍Spotlight & Siri

Product names and expiration dates are indexed in Spotlight search - locally, data does not leave the device. The App supports integration with Siri and the Shortcuts app.

📱Widget

The widget displays upcoming expiration dates on the home screen. It uses the same local data and performs no network requests.

07

Security

🔑
KeychainThe App passcode is stored only in Apple's secure system storage.
👁️
BiometricsFace ID or Touch ID - optional, in addition to the passcode.
⏱️
Auto-lockThe App locks automatically after an inactivity timeout.
🫥
App Switcher maskingWhen backgrounded, the screen is blurred to prevent your data from appearing in system snapshots.
🔒
Minimal network transmissionYour product list, passcode and settings are not sent to the server. The online features (section 03) work over a secure HTTPS connection.
🛡️
Server protectionThe server management panel is not accessible from the internet, only the Developer has access to the data, and requests are checked to come from the App.

Despite these measures, no system can guarantee absolute security.

08

Data Sharing with Third Parties

No advertising
No third-party SDKs
No trackers
Data is not sold

The App contains no advertising, uses no third-party SDKs for analytics or tracking, does not sell data and does not share it with third parties for advertising or analytics.

External channels:

  • synchronization via Apple iCloud (automatically, if you are signed in to iCloud on the device), which takes place within your personal Apple ID and is governed by Apple's privacy policy;
  • the family list: if you invite other people, the products in that list are visible to them through Apple iCloud (CloudKit); the Developer has no access to them;
  • Apple App Attest: verifying that a request comes from the genuine App (governed by Apple's policy);
  • the Developer's server (prosrok.ru), hosted with the hosting provider Timeweb Cloud (Russia), which provides the server infrastructure and is obliged to ensure the confidentiality and security of hosted data (section 03).

Data may be disclosed to authorized bodies only in cases expressly provided for by law.

09

Children's Data

The App is designed for a general audience and is not specifically directed at children. The Developer does not knowingly collect information about users below the legally applicable age, including children under 13 (or another applicable age in your jurisdiction).

The App requires no registration, does not ask for a name, email or other information about the user, contains no advertising or third-party trackers, and the online features do not link data to a person. Children are advised to use the online features (submitting products) together with a parent.

10

Changes to This Policy

This Policy may be updated from time to time. The current version is always available within the App and on the App's page in the App Store. Material changes are announced in the update description.

Version 2.0 (October 21, 2026) added a description of the online features and the Developer's server. The new version takes effect on the date shown at the top of this document.

11

Contact Information

For any questions related to this Policy, you may contact the Developer. You can ask us to delete materials you sent (give the barcode and the date of sending) and ask questions about data. We usually reply within 48 hours and no later than 10 business days. The email address and the content of your message are used only to reply and are deleted as soon as the matter is resolved. Messages pass through the Yandex Mail service.

DeveloperDeveloper
Emaile-mail
AppPROvisions