Please contact Loïc by email at contact.datelimite@gmail.com
Last updated: October 17, 2026
Date Limite is a personal project published by Loïc Sence, an individual based in France. Date Limite operates the website https://www.datelimite.app and the Date Limite mobile application for iOS (hereinafter collectively referred to as the "Service").
The Service allows users to track their consumable products and receive alerts before expiration dates.
This Privacy Policy informs you of how we collect, use and protect your data when you use our Service.
Service
The website https://www.datelimite.app and the Date Limite mobile application for iOS.
Personal Data
Any information relating to an identified or identifiable natural person.
Usage Data
Data collected automatically when using the Service (e.g., IP address, browser type, pages visited).
Cookies
Small files stored on your device by your browser.
Using a Date Limite account does not require an email address or your real name. The account is linked to technical identifiers that enable synchronization and the operation of the service. These identifiers and the data linked to them are not anonymous. We process in particular the information in your lists, your preferences, technical information about your devices and usage data. If you contact support by email, we also receive your address and the content of your message.
When you use the Service, the following data is created and stored on our servers:
If you allow notifications, Date Limite records a technical token specific to the app on your device and links it to your account in order to send notifications through the Apple Push Notification service (APNs). Depending on the notification, Date Limite sends Apple this token and the content needed to display it, which may include the name of a product or of a storage place, an expiration date, a number of days remaining and a quantity. The device and its token are kept as long as the account remains active. The token is deleted earlier when the Apple service reports it as invalid; the device and the token are deleted with the account after two years of inactivity. When a device is offline, APNs keeps only the most recent notification per app, for a limited period set by the expiration date that Date Limite attaches to each notification; after that period, or as soon as a more recent notification arrives, the pending notification is deleted. The technical sending logs contain neither the full token nor the content of the notification and are kept for no more than six months. For users located in the European Union, the controller is Apple Distribution International Ltd (Ireland). The content needed to display a notification may be processed by Apple Inc. in the United States; this transfer is governed by the standard contractual clauses, according to Apple's privacy policy.
The products you add to your lists (name, expiration date, quantity and other information you enter) are stored on our servers to enable synchronization across your devices and to send alerts.
You may associate an image with a product. This image may come from your camera, photo gallery, the Internet, or a partner source such as Open Food Facts. An image kept by Date Limite remains stored as long as at least one product of an active account references it. Since the same image can be shared by several accounts, deleting an account does not remove an image still used by another account.
When the "Contribute to Open Food Facts" option is on, which is the default, Date Limite may add to Open Food Facts a product that this database does not know yet: its barcode, its name, its net quantity, its packaging and the country of your device. This only happens once at least two accounts with the option on have registered the same barcode under exactly the same name. It is done with the Date Limite Open Food Facts account, with no photo and no identifier of your account. This information then becomes public, irrevocably, and reusable under the Open Food Facts terms. You can turn the option off at any time in the app: your entries are then no longer published and no longer count toward another account adding a product.
We automatically collect certain technical data when you use the Service: IP address, browser type, browser version, pages visited, date and time of visit, time spent on pages, mobile device type, operating system and device identifiers.
The server also keeps consumption statistics, screen view counters, recipe reports and, when a purchase is recorded, its type, amount and currency.
The consumption statistics linked to your account are used to display your consumption and waste history. The screen view counters are used to understand how the features are used. This data is kept as long as the account remains active, then deleted with it. Overall statistics may be kept when they can no longer be linked to an account.
When you report an error in a recipe, Date Limite keeps your message, a copy of the recipe concerned, the analysis carried out to assist moderation, any fix applied and the technical information about its origin. A pending report is kept until it is handled, for no more than two years after it was sent. Once resolved, it is kept for two years after its resolution. It is deleted earlier if your account is deleted. Beyond that, only overall totals that can no longer link a report to an account or a recipe may be kept.
We use OpenAI to suggest and detail recipes and to help analyze the errors you report. Depending on the feature used, we send names of products selected from your inventory, the language, the title and ingredients of a recipe, or the content of the recipe and your report message. The calls also include an internal account identifier and technical metadata, in particular suggestion or report identifiers. These identifiers are not your synchronization key or code, but they make it possible to link the processing to an account. Avoid entering personal or sensitive data in product names and messages.
Date Limite uses the OpenAI API with its standard settings, without the Zero Data Retention or Modified Abuse Monitoring arrangements. Generation and detail calls ask OpenAI to store the response (store: true); OpenAI documents that these responses are kept as application state for at least 30 days. The analysis of reports uses store: false and does not request this application storage.
For all these calls, OpenAI's standard abuse monitoring logs may contain the requests, the responses and metadata for up to 30 days, unless a longer retention is required by law or reasonably necessary to protect the service or a third party. OpenAI states that data sent through the API is not used to train or improve its models, unless the customer explicitly opts in to such sharing. For the Date Limite account, OpenAI acts as a processor. As the publisher is established in the European Union, the contracting party is OpenAI Ireland Ltd (Dublin). Processing and storage take place mainly in the United States, at OpenAI OpCo, LLC and its sub-processors. Transfers outside the European Economic Area rely on the European Commission's standard contractual clauses, or on an adequacy decision where it applies.
You can contact support at contact.datelimite@gmail.com. When you write to this address, your email address, the content of your message and any attachments are processed through Google's Gmail service in order to answer your request. These exchanges are kept for two years from the last exchange, then moved to the mailbox trash, which permanently deletes them thirty days later. Items needed to handle a dispute or to comply with a legal obligation may be archived separately for the applicable period. This support address is a consumer Gmail account: Google (for users in the European Union, Google Ireland Limited) processes these messages as a controller, under its own terms of service and privacy policy, and not as our processor. Any transfers outside the European Union are governed by those terms.
The technical logs kept on Date Limite's servers are used for diagnostics, security and service continuity. They may contain the IP address, the routes called, dates and durations, errors and technical identifiers used to correlate an incident. They are minimised and kept for no more than six months.
We only use technical cookies necessary for the operation of the Service:
We do not use any advertising, behavioral tracking or profiling cookies. You can configure your browser to refuse cookies, but some website features may then be unavailable.
We use the collected data for the following purposes:
In accordance with the General Data Protection Regulation (GDPR), we process your data on the following legal bases:
We use the following providers in connection with the operation of the Service:
These providers only have access to data strictly necessary to perform their services and are bound by confidentiality obligations.
Your data is hosted by OVHcloud in France; the copy of the images and the cold archive of the database backups are located in Frankfurt, Germany. OpenAI, Firebase Crashlytics and Apple may process data in the United States: the safeguards governing these transfers are set out in the paragraphs describing these services. The New Relic account used for monitoring is hosted in the United States; the transfer relies on New Relic's adherence to the Data Privacy Framework (EU-US), with the standard contractual clauses as fallback mechanism, under its data protection addendum incorporated in the contract by default.
The account and the data needed for the Service are kept as long as the account remains active. After two years without authenticated activity, the account and the data linked to it are deleted. A targeted private message is created in the app's Messages 30 days before this deadline and may be accompanied by a notification if you have allowed them. Any new activity before the deadline cancels the deletion and starts a new two-year period. Deletion at providers follows each service: at OpenAI, stored responses expire within thirty days or can be deleted through the API; at Firebase Crashlytics, crash traces are deleted after ninety days, and deleting an installation erases the associated data within one hundred and eighty days; at Apple, a pending notification expires according to the expiration date we set; support exchanges follow the corresponding paragraph; contributions to Open Food Facts belong to a public database with a separate regime.
Date Limite's records of support purchases contain the type of support, the price, the currency and the date, with no receipt or Apple transaction identifier. They are kept as long as the account remains active, then deleted with it. Overall statistical totals may be kept when they can no longer link a purchase to an account. The financial statements issued by Apple are kept separately according to the obligations that apply to them.
Database backups are kept for no more than 30 days. When an account is deleted, its data disappears immediately from the active database, and from the backups as they rotate, within no more than 30 days.
You may request the deletion of your account at any time by contacting us (see the "Contact us" section).
We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure or destruction. However, no method of Internet transmission or electronic storage is completely secure, and we cannot guarantee absolute security.
Under the GDPR, you have the following rights regarding your personal data:
To exercise these rights, contact us at contact.datelimite@gmail.com. We will respond to your request within one month.
You also have the right to lodge a complaint with the CNIL (French Data Protection Authority): www.cnil.fr.
We may disclose your data in good faith belief that such action is necessary to:
The Service may contain links to third-party sites that we do not operate (including Open Food Facts). We have no control over the content or privacy practices of these sites and disclaim any responsibility for them. We recommend that you review the privacy policy of each site you visit.
The Service is aimed mainly at an adult audience and is not intended for people under 16. We do not knowingly collect data from persons under 16. If you are a parent or guardian and you learn that a minor under your responsibility has used the Service, please contact us so that we can delete the relevant data.
We reserve the right to update this Privacy Policy. Any changes will be posted on this page with an updated date. We recommend that you check this page regularly.
If you have any questions about this Privacy Policy or wish to exercise your rights, contact us:
