Your fridge is personal.
We treat it that way.
Hold the Order stores only the information needed to run your household dinner agent. You control notification permission, device access, account restore, and deletion.
What is processed
When you choose to scan, your refrigerator image is sent securely to Google Gemini for analysis. The app stores the resulting ingredient list, freshness estimates, meal suggestion, and scan time—not the uploaded image itself.
What is stored
Your household preferences, inventory results, family constraints, workflow records, task acknowledgements, agent-inbox items, notification subscriptions, and reported outcomes are stored in Google Cloud Firestore. A private household key controls access across devices. If you enable account restore, the app stores a one-way account-link identifier—not your account password or household owner key.
Autonomous operation
A scheduled cloud evaluation checks your configured dinner window, decaying inventory confidence, takeout-risk threshold, cooldown, quiet hours, and alert limit. It can generate or revise a plan, reassign a declined household task, and send a browser notification. It cannot buy, cancel, or contact an outside delivery provider.
Your controls
- Browser notifications require explicit device permission.
- You can disable notifications on each device.
- You can unlink account restore without deleting the household from already connected devices.
- You can pause automatic replanning, reassignment, and outcome escalation.
- Fridge evidence expires from autonomous eligibility after seven days and loses confidence before then.
- “Delete household data” removes the household record, account links, push subscriptions, workflows, events, tasks, inbox items, outcomes, and memory records.