Dinnerkin Privacy Policy

Last updated: [DATE]

This policy explains what personal data Dinnerkin collects, why, who we share it with, how long we keep it, and your rights. Dinnerkin is a meal-planning app for households in the UK.

1. Who we are

The controller of your personal data is [COMPANY NAME], a company registered in [England and Wales] (company number [COMPANY NUMBER]). Registered office: [ADDRESS]. ICO registration number: [ICO REG NUMBER].

Contact us about privacy at [CONTACT EMAIL] or by post to the address above. You can also use our privacy request form at [PRIVACY FORM URL].

2. The short version

• We use your household details, including each person's diets and allergens, to plan meals that suit everyone. Allergen and some diet information is health data, so we only use it with your explicit consent. You can withdraw that consent at any time.
• We do not sell your data. We do not use allergen or health data for advertising.
• Payments are handled by Apple or Google. We never see your card details.
• Advertising measurement (to know which ads brought you to us) only runs if you allow it.
• You can delete your account and data in the app, under Settings → Delete account, or at dinnerkin.com/delete-account.

3. What we collect

We do not collect your payment card details, precise location, contacts or photos.

3.1 Health and other sensitive information

Allergens, intolerances (for example "no lactose", "gluten-free" because of coeliac disease) and anything health-related you type into free-text fields can be data concerning health. That is "special category" data under UK GDPR Article 9. Some diet choices could also suggest religious or philosophical beliefs.

• We process this data only with your explicit consent, which we ask for on a separate screen before you add any allergen or diet. (UK GDPR Art. 9(2)(a).)
• You do not have to give it. Without it, the app can still plan meals, but it cannot filter for allergens or diets.
• You can withdraw consent at any time in Settings → Privacy → Health & diet data. We will then delete the allergens and diets stored for your household. Plans already made will stop being filtered for them.
• We use this data only to choose and filter recipes and shopping lists for your household. It is never used for advertising, never sent to our analytics or advertising partners, and never sold.

3.2 Information about other people in your household

When you add household members, you are giving us information about them, which may include children. Please:

• only add people you cook for, and use a nickname if you prefer (we do not need full names, ages or dates of birth);
• tell other adults that you have added their dietary information, and point them to this policy;
• only add a child's information if you are their parent or guardian or are otherwise responsible for their meals.

4. Why we use your data, and our lawful bases

Automated decisions. Our meal planner automatically picks recipes using your household's settings. These decisions do not have legal or similarly significant effects on you. You can always swap meals or change your settings.

5. Who we share data with

We use service providers ("processors") who act on our instructions under written contracts. They may not use your data for their own purposes, except where stated below.

Independent controllers (they decide how to use the data under their own privacy policies):

• Apple and Google process your payment and subscription, and the sign-in you choose, under their own terms. See Apple's privacy policy at https://www.apple.com/legal/privacy/ and Google's at https://policies.google.com/privacy.
• Google (Firebase / Google Ads) and Meta (Facebook SDK) receive advertising-attribution data only if you allow tracking. ⚠️ Meta and Google act partly as controllers for advertising measurement. Confirm roles under their business terms: https://www.facebook.com/legal/terms/businesstools ; https://business.safety.google/adscontrollerterms/.

We may also disclose data if the law requires it, to protect our rights or users' safety, or to a buyer if our business is sold (we would tell you first).

6. International transfers

Some providers are in the USA or other countries outside the UK. When data leaves the UK, we rely on UK adequacy regulations (including the UK–US "data bridge" for certified US companies) or on the ICO's International Data Transfer Agreement / Addendum. Contact us for a copy of the relevant safeguards.

7. How long we keep data

If you have not used the app for [24] months and have no active subscription, we may delete your account after warning you by [email/push].

8. Security

We encrypt data in transit (TLS) and at rest, limit staff access, and keep health data in separate fields used only by the meal planner. No system is perfectly secure. If a breach is likely to put you at risk, we will tell you and the ICO as the law requires.

9. Your rights

You have the right to:

• access your data and get a copy;
• correct inaccurate data;
• delete your data;
• restrict or object to our use of it, including analytics based on legitimate interests;
• data portability (receive data you gave us in a machine-readable format);
• withdraw consent at any time, for health data, tracking or notifications. This does not affect processing before you withdrew.

Contact [CONTACT EMAIL] or use [PRIVACY FORM URL]. We reply within one month. This can be extended by two more months for complex requests, in which case we will tell you. We may need to confirm your identity.

Delete your account: in the app under Settings → Delete account, or at dinnerkin.com/delete-account. Deleting your account does not cancel your subscription. Cancel it in your App Store or Google Play settings.

10. Complaints

Please contact us first at [CONTACT EMAIL] or [COMPLAINT FORM URL]. We will acknowledge your complaint within 30 days and tell you what we are doing about it.

You can also complain to the UK regulator, the Information Commissioner's Office (ICO): https://ico.org.uk/make-a-complaint/ · 0303 123 1113 · Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

11. Children

Dinnerkin is for adults who plan meals for a household. It is not directed at children under 13, and you must be 18 or over to subscribe. We do not knowingly let children create accounts. Parents and guardians may add a child as a household member (see 3.2). If you believe a child has created an account, contact us and we will delete it.

12. Tracking, advertising and your choices

• iPhone: we ask through Apple's App Tracking Transparency prompt. If you choose "Ask App Not to Track", our advertising SDKs do not get your advertising identifier. You can change this in iOS Settings → Privacy & Security → Tracking.
• Android: we ask in the app before advertising measurement starts. You can change your choice in Settings → Privacy, or reset or delete your advertising ID in Android settings.
• Analytics: you can turn off analytics in Settings → Privacy.
• Notifications: manage them in your device settings. If you turn them off, we will show the trial-ending reminder inside the app instead.

13. Changes to this policy

We will post any update here and change the date at the top. If a change is significant, we will tell you in the app before it takes effect.