Privacy Policy

1. Data we collect

DishCrib may collect account information such as email address, username, language preferences, profile details, recipes, shopping list data, uploads, comments, monetization status, subscription status, and activity needed to provide core product features.

We may also process device-level and technical information such as app version, operating system, crash and diagnostic events, authentication events, consent state, and advertising or subscription-related metadata needed to operate DishCrib securely and reliably.

2. Controller and contact details

DishCrib is responsible for the processing of personal data described in this policy. For privacy questions or requests, contact support@dishcrib.com.

3. How we use data

We use your data to operate the app, keep your account secure, personalize the experience, support recipe creation and discovery flows, and improve reliability and usability over time.

This includes supporting offline access to recipes and shopping lists on your device, syncing queued changes when the device reconnects, managing subscription entitlements, handling account deletion requests, and serving or measuring ads for users on the free plan.

4. Legal bases

Depending on the feature involved, we process personal data to provide the service you requested, comply with legal obligations, protect the security and integrity of DishCrib, and pursue legitimate interests such as preventing abuse, maintaining reliability, and improving the product.

5. Public content

Recipes and profile activity remain private unless you explicitly publish or share them. Public content can be visible to other users inside DishCrib.

If you delete your account, public visibility of your content may be removed and account-identifying information may be anonymized as part of our deletion workflow.

6. Sharing data with service providers

We may share personal data with service providers that help us operate DishCrib. At this stage, this includes Namecheap for hosting and database infrastructure, Resend for transactional email delivery, OpenAI for AI-assisted recipe features, Google AdMob for advertising on the free plan, RevenueCat for subscription entitlement and purchase state management, and Google for Google Analytics website measurement after consent. These providers may access data only as needed to perform services for DishCrib.

Depending on platform and feature, app stores and payment providers such as Apple and Google may also process billing, renewal, restore, refund, or subscription-management events under their own policies.

7. AI and processing

When you use AI-assisted features, uploaded inputs and recipe data may be processed to generate structured recipe results, imports, and suggestions.

This can include ingredient lists, recipe text, images, and related metadata required to transform your input into recipe drafts, structured fields, or cooking suggestions.

During account registration, DishCrib asks for your permission before enabling these AI-powered features. Depending on the feature you use, data shared with OpenAI can include ingredient lists, recipe text, recipe URLs, uploaded or captured images, dietary restrictions or preferences, and your selected app language when needed to fulfill your request.

We only send the data needed to complete the AI request, and we require third-party providers we use for this processing to protect shared data with the same or equivalent safeguards required by DishCrib.

8. International transfers

Some service providers may process data outside your country, including outside the European Economic Area. Where required, we rely on appropriate safeguards for international transfers.

9. Security and retention

We aim to protect account and recipe data using reasonable technical and organizational safeguards. Data may be retained for as long as needed to operate the service, meet legal obligations, and maintain account continuity.

In general, account data is kept while your account remains active. Recipes, uploads, and profile content are kept while they remain associated with your account or until deletion is requested. Security logs and technical records may be kept for limited periods where needed for abuse prevention, troubleshooting, and legal compliance.

Some recipe and shopping-list data may also be stored locally on your device to support offline use and later sync. Local device storage remains under the control of your device and app installation.

10. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or request portability of your personal data. You may also have the right to complain to your local data protection authority.

You can update profile details, preferences, and recipe visibility in the app. For privacy-related questions or requests, contact support@dishcrib.com.

To exercise your rights, contact us at support@dishcrib.com. We may ask for information necessary to verify your identity before completing your request.

If you believe your data protection rights have been infringed, you may lodge a complaint with the Portuguese data protection authority, the CNPD, or with the supervisory authority in the country where you live.

You can also start account deletion directly inside the app from your account settings. If you need additional help with deletion, removal, or anonymization of associated data, contact support@dishcrib.com.

11. Automated decision-making

DishCrib uses AI-assisted features to help generate and structure recipe content, but does not use solely automated decision-making that produces legal or similarly significant effects on users.

12. Website cookies and analytics

DishCrib's public website can use Google Analytics to understand pageviews and key navigation actions such as CTA clicks. Google Analytics is only enabled after you accept the analytics banner on the website. If you reject analytics, those measurements remain disabled. We do not use website analytics to collect the contents of your DishCrib account or recipe data.

Inside the mobile app, advertising and consent technologies may process identifiers, consent choices, ad delivery, and related measurement signals needed to support the free plan and comply with applicable privacy rules.