Product: Shelfy (shelfy.asia)
Market (soft launch): Indonesia (primary) · Hong Kong also supported
Languages: English (primary) · 繁體中文 (summary sections)
Version: 0.2-draft · Date: 21 October 2026 (Asia/Hong_Kong)
Status: Soft-launch draft for waitlist + upcoming app (Indonesia first; Hong Kong also supported). Not legal advice; counsel review before App Store / Play publish.
> Locked / TBD before publish
> 1. Legal entity / data user / soft-launch merchant — confirmed (21 Oct 2026): Dal Duca Limited (HK CR 2931380; BRN 71758096; incorporated 14 Apr 2020; status Live, private company limited by shares) as App Store / Play / privacy publisher. Registered address TBD. Soft-launch merchant = Dal Duca Limited; future migration to Shelfy Ltd possible if product proves out. Dedicated idle HSBC under this entity for Shelfy IAP (clothing HSBC stays separate).
> 2. Raw photo retention period — locked: 7 days (decided 21 Oct 2026). Option B (30 days) rejected.
> 3. Contact email for privacy requests (placeholder: privacy@shelfy.asia until confirmed).
This draft uses PDPO-aware language for Hong Kong (Personal Data (Privacy) Ordinance, Cap. 486) — purpose limitation, transparency, retention, access/correction, and security — without claiming formal legal certification.
Shelfy (“we”, “us”) is a mobile app and related website at shelfy.asia that helps you turn photos of your Fridge, Pantry, and Spices & Sauces into personalized recipes, video suggestions, and a shopping list of missing items (with deep-links to local grocery delivery partners — soft-launch Indonesia: GrabMart, foodpanda, and GoFood; Hong Kong: foodpanda and Keeta).
Data user / legal entity (soft-launch): Dal Duca Limited — Hong Kong private company limited by shares (Companies Registry No. 2931380; Business Registration No. 71758096; incorporated 14 Apr 2020; status Live). Registered address TBD — founder to confirm for publish. Soft-launch App Store / Play merchant = Dal Duca Limited. A future migration of data-user / publisher identity to a dedicated Shelfy Ltd is possible if the product proves out; this policy will be updated before any such change.
Privacy contact (placeholder): privacy@shelfy.asia
This policy covers personal data we process when you:
- join the waitlist on shelfy.asia;
- create an account and use the Shelfy iOS / Android app (Flutter);
- contact us about beta / TestFlight / Play closed testing.
It does not cover third-party sites or apps we deep-link to (e.g. GrabMart, foodpanda, GoFood, Keeta, YouTube, Apple, Google). Their policies apply when you leave Shelfy.
| Category | Examples | When |
|----------|----------|------|
| Account | Name/display name (if provided), email, Apple / Google sign-in identifiers | Registration / sign-in |
| Waitlist | Email, optional WhatsApp number, language preference, cuisine preference | Waitlist form |
| Inventory content | Ingredient names, quantities, units, cuisine preferences, recipe interactions | App use |
| Photos you upload | Images of fridge / pantry / spice shelves | Scan flows |
| Device & diagnostics | App version, OS, crash logs, approximate region (e.g. market = ID / HK), analytics events | App use / support |
| Purchase | Subscription status, trial start/end (via Apple / Google / RevenueCat); we do not receive full card numbers | Premium |
| Communications | Messages you send us (email, WhatsApp testing groups) | Support / beta |
We do not intentionally collect government ID numbers, precise continuous GPS tracking, contacts lists, or payment card PANs.
We use personal data to:
1. provide core features (vision/OCR recognition, inventory storage, recipe generation, YouTube tutorial ranking, missing-item list, market grocery deep-links);
2. operate accounts, free scan limits (5/week), and Premium (7-day trial, then \$5.99/mo or ~\$39.99/yr);
3. improve accuracy and product quality (aggregated / de-identified evaluation where practicable);
4. send waitlist / TestFlight / beta notices you opted into;
5. secure the service, prevent abuse, and comply with law;
6. respond to access / correction / deletion requests.
We will not use your personal data for paid advertising networks during the \$0 organic Indonesia soft launch. We do not sell personal data.
When you scan shelves, photos may be sent to our backend (planned: Supabase Storage + Edge Functions) and to vision / OCR providers (e.g. OpenAI / Google Gemini / Cloud Vision) solely to recognize ingredients and text on packaging.
- Prefer derived inventory data (ingredient list + quantities) for long-term product use.
- Raw photo retention: 7 days (locked 21 Oct 2026) — see §6.
- You can edit or delete inventory items in-app; account deletion requests are described in §10.
| Data | Retention |
|------|-----------|
| Account profile | While account active + short wind-down after deletion request |
| Inventory items (structured) | While account active, or until you delete items / account |
| Analytics events | Typically ≤ 24 months (tool default / configured shorter) |
| Waitlist email | Until launch invites complete or you unsubscribe / request erasure |
| Support messages | As needed to resolve, then limited archive |
| Raw scan photos | 7 days (locked 21 Oct 2026) |
Raw scan photos (locked — Option A): Raw photos are deleted or irreversibly de-associated from your account within 7 days after successful recognition (or sooner if recognition fails and retry is abandoned), unless a short extension is required to finish processing a failed job. Structured inventory results may remain until you delete them.
> Decision note (21 Oct 2026): Founder locked retention at 7 days. Former Option B (30 days) is rejected and must not appear in public copy or store data-safety answers.
Other retention: we keep data only as long as needed for the purposes above, then delete or anonymize, subject to legal holds.
We may share personal data with:
- Infrastructure / backend (e.g. Supabase or equivalent hosting);
- Vision / LLM / OCR providers (to process scans and generate recipes);
- Analytics (e.g. PostHog) — event data, not raw photo galleries;
- Subscription / IAP (Apple, Google, RevenueCat);
- Email / form providers for waitlist (Formspree or Supabase — TBD);
- Professional advisors or authorities when legally required.
Grocery partners (Indonesia: GrabMart, foodpanda, GoFood; Hong Kong: foodpanda, Keeta) receive data only if you tap a deep-link and continue in their app/site — we pass shopping intent via link parameters as needed for that action, not a bulk data sale.
International transfers may occur (e.g. US/EU cloud AI providers). We will use contractual and technical safeguards appropriate to the destination and PDPO expectations.
We use industry-standard controls appropriate to a consumer MVP: TLS in transit, access-controlled storage, least-privilege keys, and monitoring for abuse. No method is 100% secure; please use device passcodes and keep OS/app updated.
Shelfy is not directed at children under 13 (or a higher age required in your place of residence). We do not knowingly collect their personal data. Contact us if you believe a child has provided data.
Subject to applicable exemptions, you may request to:
- access personal data we hold about you;
- correct inaccurate personal data;
- delete your account and associated personal data (subject to legal retention);
- withdraw consent for optional marketing / waitlist messages;
- ask about our policies and practices in relation to personal data.
How: email privacy@shelfy.asia (placeholder) from your account email, or use in-app Settings → Delete data / account when shipped. We aim to respond within a reasonable period (target: 30 days where practicable).
You may also complain to the Office of the Privacy Commissioner for Personal Data (PCPD), Hong Kong: https://www.pcpd.org.hk/
The waitlist page may use essential cookies or local storage (e.g. language preference). Analytics cookies, if added later, will be disclosed and optional where required.
We may update this policy. Material changes for the live app will be posted on shelfy.asia and/or notified in-app. Draft versions may change frequently before soft launch.
Entity: Dal Duca Limited (CR 2931380; BRN 71758096; soft-launch publisher; Shelfy Ltd migration possible later)
Email: privacy@shelfy.asia (placeholder)
Website: https://shelfy.asia
重要： 本中文為摘要，方便香港用戶理解。如有歧義，以英文主文為準。軟啟動法律實體／上架商戶：Dal Duca Limited（公司註冊編號 2931380；商業登記號碼 71758096；於 2020年4月14日註冊；狀態 Live）；日後或可遷至 Shelfy Ltd。原始相片保存期已鎖定為 7 日（2026年10月21日決定；30 日方案已否決）。
帳戶資料（電郵、Apple／Google 登入）、候補名單資料、庫存食材資料、你上載的貨架相片、裝置／當機診斷、訂閱狀態（經 Apple／Google），以及你主動聯絡我們的內容。
提供掃描辨識、食譜、YouTube 建議、缺少清單與市場外送深層連結（印尼 GrabMart／foodpanda／GoFood；香港 foodpanda／Keeta）；管理免費配額（每週 5 次掃描）與 Premium（7 日試用，其後 \$5.99／月）；改善產品；發送你同意的測試邀請；保安與守法。印尼軟啟動期間 不買廣告流量（\$0 自然流量），亦不會出售你的個人資料。
原始掃描相片於成功辨識後 7 日內刪除或與帳戶解除關聯（辨識失敗且放棄重試時可更早）。結構化庫存資料可在帳戶有效期間保留，直至你刪除。
（前「方案 B／30 日」已否決，不適用於公開文案。）
可要求查阅、改正、刪除帳戶相關個人資料，或撤回候補／推廣同意（適用法律允許範圍內）。聯絡：privacy@shelfy.asia（暫定）。亦可向香港個人資料私隱專員公署投訴：https://www.pcpd.org.hk/
離開 Shelfy 進入 GrabMart、foodpanda、GoFood、Keeta、YouTube、Apple、Google 等服務時，適用對方政策。
- [x] Legal entity confirmed (21 Oct 2026): Dal Duca Limited (CR 2931380; BRN 71758096; incorporated 14 Apr 2020; Live) · registered address still TBD founder · future Shelfy Ltd migration possible
- [x] Photo retention locked to 7 days (21 Oct 2026); Option B (30d) removed from public text
- [ ] Confirm privacy@shelfy.asia or replacement mailbox
- [ ] Align App Store / Play data safety & privacy nutrition labels with 7-day photo retention
- [ ] Counsel / PDPO review
- [ ] Publish on shelfy.asia and link from app Settings + store listings
- [ ] Waitlist form backend (Formspree / Supabase) privacy notice matches this draft
Document owner: Founder (Marcello) + counsel
Aligned to: shelfy-product-strategy.md · shelfy-mvp-backlog.md · shelfy-organic-gtm-hk.md