Skip to content
Despensado ← Back to site

Despensado · Legal

Legal

Two documents govern the use of Despensado, and both are set out on this page: the privacy policy, which describes what the Service does with data, and the terms and conditions, under which an account is created and the Application is used.

Privacy Policy

Last updated: 2 September 2026

Scope and identity of the controller

Despensado ("the Application") is a household pantry inventory application for iOS and Android devices, published by the operator of the Service ("we", "us", the controller of the personal data described herein). The Application enables a household to record the goods it holds, the places in which those goods are stored, the quantities remaining and the dates upon which those goods are expected to expire.

This policy governs the Application and this website (together, "the Service"), and describes the categories of personal data processed in connection with the Service, the purposes for which that data is processed, the period for which it is retained, and the means by which its erasure may be obtained. Use of the Service constitutes acknowledgement of the practices set out below; where a particular processing operation is contingent upon a permission granted by the operating system of the device, that permission is requested separately and may be withheld or subsequently revoked in the manner described in section 04.

Information collected

The following categories of personal data are collected in the ordinary course of providing the Service:

  • Account data. The name and electronic mail address supplied upon registration, the password thereupon chosen (which is retained exclusively as a salted cryptographic hash, at no point in plain text, and is accordingly not recoverable by us), and the language preference selected for the interface.
  • Content supplied by the user. The storage locations, products, inventory entries and their associated quantities, units of measure, dates of purchase and of expiry, storage places and notes, shopping lists, scanned barcode values and reminder settings which the user, or a person with whom the user has elected to share a location in the manner contemplated by section 05, enters into the Application.
  • Authentication records. Technical data generated in the course of authenticating a user and of maintaining an authenticated session, processed for the purposes of session management, the detection of unauthorised access, and enabling a user to identify and to revoke a session which that user does not recognise, and retained for no longer than is necessary for those purposes.

No category of personal data other than those enumerated above is collected, and no such data is obtained from any source other than the user, save for the product descriptions referred to in section 04, which do not relate to any identified or identifiable person.

Information not collected

The Service does not carry advertising of any description, does not request or process advertising identifiers, and does not construct behavioural profiles of the persons who use it. The Application neither requests access to, nor records, the geographic location of the device upon which it is installed, the contents of the address book of that device, or the photograph library of that device.

Personal data processed in connection with the Service is not sold, rented, licensed or otherwise traded, and is not disclosed to any third party for the purposes of advertising or of marketing, whether that third party is related to us or not. Disclosure occurs only to the extent necessary to the provision of the Service as described in section 04, to a person with whom the user has elected to share a location as described in section 05, or where disclosure is compelled by law or by the order of a competent authority.

Device permissions, scanning and reminders

The camera permission requested by the Application is used for a single purpose, namely the operation of the integrated barcode scanner. Frames captured by the camera are processed locally upon the device and are at no point stored, transmitted or otherwise made available to us. Where a barcode is successfully decoded, the numeric value of that barcode alone is transmitted to our systems, which query it against one or more third-party public product reference databases in order to propose a corresponding product description. Such queries carry that value and nothing further: they are unaccompanied by the name, the electronic mail address, the account identifier or any other identifying attribute of the user, and the operators of those databases are accordingly not placed in a position to associate a query with any individual. Descriptions so obtained are retained by us in order that an identical barcode need not be queried a second time.

Reminders concerning the expiry of goods are composed and scheduled locally, by the device, from the dates entered by the user. No push notification service is operated and no push notification token is issued or held; no information relating to a reminder is therefore transmitted from the device at any time.

Both the camera permission and the notification permission are optional. Either may be withheld at the moment it is requested, or revoked thereafter through the settings of the operating system, without consequence for the remainder of the Service; every entry which the scanner would otherwise create may equally be created by hand.

Shared locations and access by other users

A storage location created within the Application may, at the election of the user who owns it, be shared with other users of the Service. A user admitted as a member of a shared location is thereby able to view and to modify the entirety of the contents of that location, including entries created by other members, and is able to view the names of those other members. Membership is not partial and cannot be confined to a subset of the contents of a location or to a particular class of operation upon them.

The owner of a location may withdraw the membership of any member at any time, whereupon the access of that member ceases; entries created by that member during the subsistence of the membership remain within the location. A location should accordingly be shared only with persons to whom the access described in this section is intended to be granted, and the decision to share, together with its consequences for the data thereby made accessible, rests with the user who makes it.

Custody, security and retention

Personal data processed in connection with the Service is held within our own databases and is accessible only to us. Communications between the Application and our systems are transmitted over encrypted connections; passwords are stored exclusively as salted cryptographic hashes; and authenticated sessions expire and may be revoked. Because the infrastructure upon which the Service depends is operated internationally, personal data may be processed or stored in a jurisdiction other than that in which the user resides, and remains subject to this policy wherever it is so processed.

No arrangement for the security of information is capable of affording absolute protection, and no representation to that effect is made or should be inferred from this section. Users are accordingly encouraged to select a password which is not employed in connection with any other service.

Personal data is retained for so long as the account to which it relates subsists. Individual entries, products, lists and locations may be deleted from within the Application at any time, and such deletion takes effect immediately. Erasure of an account in its entirety, and of the data associated with it, may be obtained upon written request to contact@zolfer.com, sent from the electronic mail address to which that account is registered; upon receipt of such a request the account and its data are erased without undue delay and in any event within such period as applicable law prescribes. Copies subsisting within routine backups of our databases are extinguished as those backups are rotated out of use in the ordinary course.

Rights of the user, minors, and amendment of this policy

A user may request confirmation as to whether personal data concerning that user is processed, a copy of any such data, the rectification of data which is inaccurate or incomplete, or the erasure of that data in the manner contemplated by section 06. Requests of this description should be addressed to contact@zolfer.com and are answered without undue delay and in any event within such period as applicable law prescribes. Depending upon the jurisdiction in which the user resides, these entitlements may be conferred expressly by statute; where they are not so conferred they are nonetheless extended, this policy being applied uniformly to every user irrespective of place of residence.

The Service is not directed to, nor intended for use by, children under the age of thirteen (13) years, or such greater minimum age as the law of the jurisdiction in which the user resides may establish, and personal data is not knowingly collected from any such person. Where it comes to our attention, whether upon the notification of a parent or guardian or otherwise, that an account has been created by a person below that age, that account and the data associated with it are erased.

This policy may be amended from time to time so as to reflect changes to the Service or to the requirements of applicable law. Where it is amended, the date stated at the head of this document is amended accordingly, and that date constitutes the authoritative indication of the version then in force. An amendment which materially alters the manner in which personal data is processed is additionally notified within the Application before it takes effect, and continued use of the Service following such notification constitutes acknowledgement of the policy as amended.

Contact

Enquiries concerning this policy, and requests made under sections 06 and 07, should be addressed to the controller at contact@zolfer.com.

End · Privacy policy

Terms & Conditions

Last updated: 2 September 2026

Acceptance, parties and scope of these terms

These terms and conditions ("these terms") govern the use of Despensado ("the Application") and of this website (together, "the Service"), which are made available by the operator of the Service ("we", "us"). By creating an account, by accessing the Service or by otherwise using it, the user signifies acceptance of these terms and thereby enters into a binding agreement with us upon them; a person who does not accept these terms should not use the Service.

The privacy policy set out alongside these terms forms part of them and is incorporated by reference. The manner in which personal data is processed is governed by that policy and is not restated here; where these terms and that policy address the same matter, the policy prevails in respect of the processing of personal data.

Licence to use the Application

Subject to continued compliance with these terms, we grant to the user a limited, personal, revocable, non-exclusive, non-transferable and non-sublicensable licence to install and to run the Application upon a mobile device which the user owns or controls, and to use the Service for the private household purposes for which it is provided. Where the Application has been obtained from an application store, this licence is further subject to the usage rules established by that store, and any conflict between those rules and these terms is resolved in favour of the rules.

The Application is licensed and not sold, and no right of ownership in it passes to the user. All right, title and interest in and to the Application, the Service, and the software, designs, text, graphics, name and marks comprised in them remain with us or with our licensors, and nothing in these terms is to be construed as conferring any right in them beyond the licence expressly granted above.

The account, eligibility and security

An account is required in order to use the Application. The user undertakes to supply information which is accurate and complete upon registration and to keep it so, and warrants being of at least the minimum age stated in section 07 of the privacy policy, the Service being neither directed to nor intended for use by any person below that age.

The credentials of an account are personal and are not to be disclosed to or shared with any other person. The user is responsible for maintaining the confidentiality of those credentials and for every act performed by means of the account, whether or not that act was authorised by the user, and undertakes to notify us without delay upon becoming aware of any unauthorised use of it. Authenticated sessions may be reviewed and revoked from within the Application, and a user who suspects that a session is not their own should revoke it and change the password of the account.

Acceptable use, and locations shared with others

The user undertakes not to:

  • use the Service for any unlawful purpose, or in a manner which contravenes any applicable law or infringes the rights of another person;
  • access, or attempt to access, the Service otherwise than through the interfaces which we provide, or employ any automated system in order to access the Service or to extract data from it;
  • reverse engineer, decompile, disassemble or otherwise attempt to derive the source code of the Application, save to the extent that such a restriction is prohibited by applicable law;
  • copy, modify, adapt, translate, distribute, sell, let, lend or sublicense the Application or any part of it;
  • interfere with, disrupt or place an unreasonable load upon the Service, or defeat or attempt to defeat any measure of security or of rate limitation which protects it; or
  • submit any content which the user is not entitled to submit, or which is unlawful, deceptive or infringing.

Where a storage location is shared in the manner described in section 05 of the privacy policy, the user who owns that location determines who is admitted to it, and is responsible both for that decision and for the content thereby made accessible to the members admitted. Every member of a shared location is able to view and to modify the entirety of its contents; content which is not intended to be so accessible should not be placed within a shared location. We are not a party to the arrangements subsisting between the members of a shared location and do not arbitrate between them.

Content supplied by the user

The storage locations, products, inventory entries, lists, notes and other material which the user enters into the Application ("user content") remain those of the user, and we claim no ownership in them. The user grants to us a non-exclusive and royalty-free licence to host, store, reproduce, transmit and display user content, exercisable solely to the extent necessary in order to operate the Service, to make that content available to the user and to the members of any location which the user has shared, and to maintain routine backups. That licence subsists for so long as the content does and terminates upon its deletion, subject to the extinction of backup copies described in section 06 of the privacy policy.

The user warrants being entitled to submit the user content which the user submits. We neither monitor user content nor assume any obligation to do so; we may nonetheless remove content which we consider, acting reasonably, to be unlawful or to contravene these terms.

Absence of any warranty as to the information presented

The Application records and displays information; it does not verify it. Dates of expiry, quantities, storage places and notes are those which the user, or a member of a shared location, has entered, and are displayed as entered. Product descriptions proposed following the decoding of a barcode are obtained from third-party public reference databases, are supplied by the operators of those databases and not by us, and may be inaccurate, incomplete, outdated or attributed to the wrong article.

No representation or warranty is accordingly made that any date, description, quantity, allergen indication or nutritional statement presented by the Application is accurate, current or complete. The Application is an aid to the organisation of a household and is not an instrument of food safety: it must not be relied upon in determining whether any article is fit for consumption. That determination rests at all times with the user, who should have regard to the packaging of the article itself, to its condition and to the conditions in which it has been kept, and who, where any doubt subsists, should not consume it.

Reminders are composed and scheduled by the device, and depend upon the settings of that device, upon the permissions granted to the Application and upon the operating system delivering them. No undertaking is given that a reminder will be delivered, that it will be delivered at any particular moment, or that it will be delivered at all. A reminder is a convenience and not a safeguard.

Availability, modification and discontinuance of the Service

We do not undertake that the Service will be available without interruption or free from error. Access may be suspended, whether upon notice or otherwise, for maintenance, for the correction of a fault, for reasons of security, or by reason of any matter beyond our reasonable control, including the unavailability of a third party upon which the Service depends (among them the reference databases referred to in section 06, the operators of the application stores, and the operating system of the device).

We may add to, alter, restrict or withdraw any feature of the Service, and may discontinue the Service in its entirety. Where the Service, or a feature of it upon which a user materially relies, is to be discontinued, we shall endeavour to give reasonable notice within the Application. The Service is presently furnished without charge; should a charge be introduced in respect of any feature, it will not be applied without prior notice and without the user having had an opportunity to decline it.

Disclaimer of warranties and limitation of liability

To the fullest extent permitted by applicable law, the Service is furnished "as is" and "as available", without warranty or condition of any description, whether express, implied or statutory, and every such warranty and condition (including those of satisfactory quality, of fitness for a particular purpose, of accuracy and of non-infringement) is excluded.

To the fullest extent permitted by applicable law, we shall not be liable for any indirect, incidental, special, consequential or punitive loss, nor for any loss of profit, of revenue, of goodwill or of data, nor for any loss arising from the deterioration, the spoilage or the discarding of any article, from the consumption of any article, from a reminder which was not delivered or was delivered late, from a description which proved inaccurate, or from the act or omission of a member of a shared location; and this whether the liability is founded in contract, in tort, in negligence or otherwise, and whether or not the possibility of such loss had been made known to us.

To the fullest extent permitted by applicable law, our aggregate liability arising out of or in connection with the Service is limited to the amount, if any, paid by the user to us in respect of the Service in the twelve (12) months preceding the event giving rise to the liability; and where no such amount has been paid, to the resupply of the Service or to the cost of that resupply.

Nothing in these terms operates to exclude or to limit any liability which cannot lawfully be excluded or limited, or to exclude or to limit any right which applicable law confers upon a consumer and does not permit to be waived. Where any provision of this section is unenforceable as against a particular user, it applies to that user only to the extent that it is enforceable.

Suspension, termination and survival

The user may cease to use the Service at any time, and may obtain the erasure of the account and of the data associated with it in the manner set out in section 06 of the privacy policy.

We may suspend or terminate an account, or access to the whole or any part of the Service, where the user is in material breach of these terms, where suspension or termination is necessary in order to comply with a legal obligation or to protect the Service or the persons who use it, or where the Service is discontinued. Save where the giving of notice would defeat the purpose of the measure or is impracticable, we shall give notice of the measure and, where the breach admits of remedy, an opportunity to remedy it.

Upon termination, the licence granted by section 02 ceases and the right to access the Service is extinguished; data is thereafter dealt with as the privacy policy provides. Sections 05, 06, 08 and this section, together with any other provision which by its nature is intended to do so, survive the termination of this agreement.

The application stores as third parties

This agreement is concluded between the user and us alone, and not with the operator of any application store through which the Application is distributed. We, and not that operator, are solely responsible for the Application, for its contents, for its maintenance and support, and for any claim that the Application fails to conform to a warranty or infringes the intellectual property rights of another person; no application store operator is under any obligation to furnish maintenance or support in respect of the Application. A request for a refund is a matter for the store from which the Application was obtained.

Where the Application has been obtained from the App Store, the use of it is further subject to the usage rules of that store; the licence granted by section 02 is confined to use upon an Apple-branded product which the user owns or controls, save as those usage rules otherwise permit; and Apple Inc. and its subsidiaries are third-party beneficiaries of these terms and are entitled, upon the acceptance of these terms by the user, to enforce them against the user as such. Where the Application has been obtained from Google Play, its distribution is additionally governed by the terms which Google imposes in respect of that store.

Amendment of these terms, and general provisions

These terms may be amended from time to time so as to reflect changes to the Service or to the requirements of applicable law. Where they are amended, the date stated at the head of this document is amended accordingly, and that date constitutes the authoritative indication of the version then in force. An amendment which materially alters the rights or the obligations of the user is additionally notified within the Application before it takes effect, and continued use of the Service following such notification constitutes acceptance of these terms as amended; a user who does not accept them should cease to use the Service, and may obtain the erasure of the account as section 09 provides.

These terms, together with the privacy policy, constitute the entire agreement between the user and us in respect of the Service, and supersede any prior understanding upon that subject. A failure or a delay on our part in enforcing any provision is not a waiver of it. Where any provision is held to be invalid or unenforceable, it is severed to the extent of that invalidity and the remaining provisions continue in force. The user may not assign or transfer any right arising under these terms; we may assign our rights and obligations in connection with a transfer of the Service, upon terms no less protective of the user.

Enquiries concerning these terms should be addressed to contact@zolfer.com.

End · Terms and conditions