Privacy Policy

What we store

Your email and a password hash. The profile you fill in: sex, age, height, weight, waist, health flags, goal, food preferences, kitchen settings. Weekly menus, grocery lists, ticks, swaps, your own dishes, dish ratings and Sunday weigh-ins. Technical data: a random device id, a hashed IP address and timestamps used to stop abuse of the free week.

• We do not collect your location, contacts or photos.
• We do not use advertising trackers or sell data.
• We do not store card numbers; Paddle does.

Why we store it

To build menus that fit you, to keep your weeks between devices, to bill the pass and to prevent repeated free weeks. The legal basis is the contract with you and our legitimate interest in keeping the service running.

Health data

Health flags (pregnancy, diabetes, digestive issues and similar) are special-category data. We process them only to adapt your menu and only with your explicit consent, which you give by filling in the health step. You can remove them at any time in the profile.

Who else sees it

A language-model provider (via OpenRouter) receives an anonymous description of your profile to build the menu: no email, no name, no device data. Paddle receives your email and the purchase. Our email provider sends confirmation and reset links. Google receives usage statistics (see below) and may process them outside the EU under standard contractual clauses. Our servers are in the EU.

How long

As long as your account exists. Deleting the account removes everything within 30 days. Anti-abuse hashes of the email and device are kept for 12 months so the free week cannot be claimed again. Invoices are kept as long as tax law requires.

Usage statistics

To see which screens people use and where they get stuck, we count visits and in-app actions with Google Analytics for Firebase (Google Ireland Ltd.). It receives the page address without personal links, language, theme, device type and approximate country. We never send your email, name, profile answers or menus. The legal basis is our legitimate interest in making the service easy to use. Google keeps this data for no longer than 14 months.

• Advertising is off: no ad cookies, no personalisation, no Google Signals.
• For visitors in the EU, the UK and Switzerland Google sets no cookies and receives only signals without a persistent identifier.
• If your browser sends Do Not Track or Global Privacy Control, nothing is collected at all.
• You can turn it off in the profile: “Help make Dishweek better”.

Your rights

You can view, export, correct and delete your data from the profile. You can also write to support@dishweek.app. If you are in the EU/EEA you may complain to your local data-protection authority.

Cookies

We use local storage for login, language and theme. Outside the EU, the UK and Switzerland, Google Analytics sets a _ga cookie to tell returning visits from new ones. No advertising cookies.