Privacy Notice

1. Who we are

Fix My Dish is operated by Hope White ("we", "us"). We act as the data controller for personal data processed through the Service.

2. What data we collect

• Account data: email address, display name, avatar (if provided), authentication credentials.
• Content you submit: dish descriptions, photos, ingredient queries, and saved favorites/history.
• Usage data: feature usage counts, timestamps, basic device and browser information.
• Support communications: messages you send us.

3. Why we use it

• To create and maintain your account (contract performance).
• To provide AI rescue and substitution features (contract performance).
• To enforce free-tier limits and Pro entitlements (contract performance, legitimate interests).
• To prevent fraud and secure the Service (legitimate interests, legal obligation).
• To improve the Service (legitimate interests).
• To respond to support requests (contract performance).

4. Who we share data with

• Hosting and infrastructure: Lovable Cloud (database, authentication, file storage).
• AI providers: dish descriptions and photos are sent to AI model providers to generate rescues and substitutions.
• Payment processing: Paddle.com Market Limited acts as our Merchant of Record for all paid transactions, handling payments, subscription management, tax compliance, invoicing, and refunds.
• Email delivery: our email infrastructure provider for transactional and authentication emails.
• Authorities: where required by law.

5. International transfers

Some of our service providers are located outside your country, including in the United States and the European Economic Area. Where data is transferred internationally, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

6. Data retention

We keep your account data for as long as your account is active. Rescue history and favorites are retained until you delete them or close your account. Usage logs are kept for up to 12 months. We delete or anonymize data once it is no longer needed.

7. Your rights

Depending on your location, you may have the right to access, correct, delete, restrict, or port your personal data, to object to processing, to withdraw consent, and to lodge a complaint with your data protection authority. We respond to verified requests within one month.

8. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and regular review of our providers.

9. Cookies

We use essential cookies and local storage to keep you signed in and to operate the Service. We do not use advertising cookies.

10. Contact

For privacy questions or to exercise your rights, contact us through the support channel in the app.