Dinner Dough Privacy Policy

Dinner Dough is an app for running a household's food and money: meals, stock, the shopping list, the grocery budget and a monthly report. It is made by Maxme Digital Media Limited ("we", "us"), Yoomo Dede Ahento Street, Accra, Ghana.

We are the data controller for the information the app holds about you. That means we decide how it is used, and we are responsible for looking after it.

Dinner Dough is in beta. It is a test version for a small group of households in Ghana, the United Kingdom, the United States, Nigeria and Kenya. This policy covers the app only. Our website has its own privacy policy.

We collect what the app needs to work. Most of it is what you and the people in your household type in.

• Your account. Your email address, so we can send you a sign-in code and keep you signed in. Our sign-in service also records when you joined and when you last signed in, and, for security, details of each session such as the IP address and the type of device. If you choose to add a name, we keep it and show it to the people in your households.
• Household settings. The household's name, country, currency, language, time zone, the day your week starts, metric or imperial units, favourite cuisines, pantry staples, the number of adults, allergens to avoid, diets, food notes and the grocery budget.
• Household records. Items you keep at home (name, category, unit, restock levels, price and store), every change to stock (amount, expiry date and time), purchases (date, amount, price and store), other spending (date, amount, note, category and store) and the week plan. Each entry records who in the household made it.
• People in a household. Who belongs to each household, their role (owner, member or viewer) and when they joined. For invites, we keep the role, when it expires, who made it and who used it. We keep the invite code itself only in a scrambled form that cannot be read back.
• Children. The household owner can add a child as an age band only, such as "5 to 8". We never ask for or keep a child's name, birthday or photo.
• Your plan. Which plan each household is on: Free, Plus or Family. Apple or Google takes the payment, and RevenueCat tells us which plan is active. We never see your card or bank details.
• AI requests. When someone asks for meal ideas or a week plan, we keep the request (which meals or which days), the answer and who asked. For each request we also record the month, how much of the household's monthly allowance it used, which AI model answered, its size in tokens and what it cost us.
• Reports of AI meals. If you report a meal from the app, we receive the meal as it was shown to you, the reason you picked, any note you add, your household and account, the time and which AI model wrote it. We use reports only to review and improve the meal ideas.
• The launch waitlist on dinnerdough.com. If you ask us to tell you when Dinner Dough launches, we collect your email address, the country your request came from (worked out by our web host, Vercel, from your connection), when you signed up, when we emailed you and when you confirmed. We use it only to send one confirmation email and then to tell you when Dinner Dough is available. We do not add it to the app, use it for anything else, or share or sell it. The legal basis is your consent, given when you confirm. Supabase (database, London), Resend (sends the email, US) and Vercel (runs the website and checks the form is not used by bots) handle it for us. Your IP address is held in our web server's memory for up to 10 minutes to stop abuse and is never stored.
• Crash reports. If the app crashes or hits an error, it sends a report so we can fix it: the error, where in the app's code it happened, the app version, the phone model and system version, and the steps that led to it. The app removes email addresses, item names and anything else you typed before the report is sent, and our crash reporting service does not store IP addresses for Dinner Dough.
• Beta usage counts. To learn whether the app helps, it counts a few things per household per day: stock changes, purchases, other spending and meals cooked, reminders shown and acted on (with the type of reminder), and AI requests. Each count holds only the household, the kind of count, the day and the number. It never includes an item or meal name, an amount, anything you typed or who did it. Counts wait on your phone until they can be sent.

On your phone. The app keeps a copy of your households' records on your phone, so it works without a connection and catches up when you are back online. Reminders are made on your phone, not sent by our servers, and your reminder settings stay on your phone. Only the counts described above, such as how many reminders of each type were shown and acted on, leave the phone.

• No location. The app does not use GPS or work out where you are. Your country is the one you choose in settings.
• No contacts, photos, camera or microphone.
• No advertising IDs, no ads in the app, and no tracking of you across other apps or websites.
• No third-party analytics or advertising tools in the app.
• We do not sell your information, and we do not share it for advertising.

Some privacy laws ask us to name a legal basis for each use. Ours are:

• To run the app for you (your account, sign-in, households, syncing between phones, sharing, meal ideas, the report and your plan): because it is needed to provide the service you signed up for (contract).
• To keep the app safe and working (security records, crash reports, fixing faults, preventing misuse and enforcing AI allowances): our legitimate interest in a secure, reliable app.
• To learn whether the beta works (usage counts and AI cost per household): our legitimate interest in improving the app and pricing it fairly. We use counts only, and you can object at any time.
• Reminders: your consent. The app asks before it sends any, and you can turn them off in the app or in your phone's settings.
• Allergens and diets: these can say something about health or religion. We use them only to shape meal ideas, and only because the household owner chose to add them (explicit consent). The owner can remove them in household settings at any time.
• To follow the law, for example to answer a lawful request from a regulator or a court (legal obligation).

We use a small number of service providers. Each one handles your information only to provide its service to us.

• Supabase: our database, sign-in and server functions. It holds your account and all household information, stored in London, United Kingdom.
• PowerSync: keeps the copy on each phone in step with our database. It handles household records, in the European Union.
• Resend: sends the emails with your sign-in code. It handles your email address and the code, in the United States.
• RevenueCat: manages subscriptions. It receives your account ID (a random code, not your email address), purchase details from Apple or Google, and basic device details, in the United States.
• Apple App Store and Google Play: take payment, and renew, cancel and refund subscriptions, under their own privacy policies. They work worldwide.
• Sentry: receives the crash reports described above, in the European Union.
• Anthropic: its Claude Haiku 5.5 model writes meal ideas and week plans. It receives only what is listed under "AI meal ideas" below, in the United States.

Our server functions, which talk to Anthropic and RevenueCat, run on Supabase's network, which may handle a request in a region near you.

We are based in Ghana. Your information is stored in the United Kingdom, and some of it is handled in the European Union and the United States, as listed above. Apple and Google work worldwide. So your information may be handled in a country other than yours, where privacy laws can be different.

When information leaves the UK or the European Economic Area, we aim to use the safeguards those laws expect, such as approved standard contract clauses, or a provider's certification under the EU-US Data Privacy Framework and its UK extension. For Ghana, Nigeria and Kenya, we aim to move information abroad only where the law of that country allows it, with suitable protection in place. You can ask us for details.

Meal ideas and week plans are written by an AI model, Claude Haiku 5.5 from Anthropic. The app never talks to the model itself: it asks our server, and our server builds the request from your household's records.

What is sent: today's date; the household's country, cuisines, language and units; the number of adults and the children's age bands; allergens, diets, pantry staples and food notes; the food and drink in stock (name, how much, and days until it expires, with an internal reference); and for a week plan, the days and meals to fill and the meals already planned or to leave out.

What is never sent: anyone's name or email address, the household's name, your budget or spending, or who did what.

Item names and food notes are your own words, so please keep personal details out of them. We save each answer for the household, so opening it again does not send a new request.

Anthropic handles these requests under its commercial terms, which say it does not use them to train its models. It may keep them for a limited time to check for misuse.

Not medical or allergy advice. Suggestions come from a computer model and can be wrong, even when allergens are set. Always check labels and ingredients yourself. If someone in your household has a serious allergy or a medical diet, follow the advice of a doctor or dietitian.

We do not use AI or any other automated process to make decisions about you that have legal or similarly important effects. Meal ideas are suggestions only.

• While you use the app. We keep your account while it exists, and a household's records while the household exists, so the report can show past months.
• When you delete your account. Your account, email address, name and memberships are removed from our database straight away. A household you own alone is deleted with everything in it. In households you share, your entries stay so the household's stock and reports stay right, but your name is removed from them. See Delete your account.
• When an owner deletes a household. Everything in it is deleted for everyone: records, children's age bands, invites, saved meal ideas, AI request records, reports of AI meals and usage counts.
• Reports of AI meals are deleted automatically 12 months after they are sent.
• The launch waitlist. If you do not confirm within 7 days, we delete your address. If you confirm, we keep it until the launch emails are sent and then delete it, and never longer than 12 months after you signed up. The remove link in our email deletes your address at once, or write to support@maxmegroup.com.
• Crash reports are deleted automatically by our crash reporting service after a limited period, at most 90 days. They do not include your account.
• Sign-in emails. Our email service keeps a record of the emails it sent for a limited time, then deletes it.
• Purchases. Apple, Google and RevenueCat keep subscription records under their own rules and for tax and legal reasons. Ask us and we will ask RevenueCat to delete its record of you.
• Backups. Our database provider keeps backups for a limited number of days. Deleted information leaves the backups when they expire. If we ever have to restore one, we will delete again anything you had asked us to delete.
• Your phone. Deleting your account or a household in the app clears the app's copy on that phone. Uninstalling the app removes it too.

Depending on where you live, privacy laws give you rights over your information. These include the UK GDPR and the Data Protection Act 2018, the EU GDPR, Ghana's Data Protection Act, 2012 (Act 843), the Nigeria Data Protection Act 2023, Kenya's Data Protection Act, 2019, and the consumer privacy laws of several US states. We offer the same rights to everyone who uses Dinner Dough:

• to know what we hold about you and get a copy
• to take your information with you in a common format
• to correct anything that is wrong
• to have your information deleted
• to object to, or ask us to limit, how we use it
• to withdraw consent at any time, for example by turning off reminders or removing allergens
• to complain to a data protection regulator

In the app. "Your data" lets you take a copy (stock and purchases as spreadsheets, everything as a backup file) and delete your account or household. Copies are made on your phone and not sent anywhere. You can change settings and entries in the app at any time.

By email. Write to support@maxmegroup.com from the email address on your account. We may ask you to confirm it is you. We aim to reply within one month, or sooner where your local law asks for it, and we will not charge you for a reasonable request.

If you live in the US. We do not sell personal information, share it for cross-context behavioural advertising, or use it for targeted advertising or for profiling that has legal or similarly important effects. Allergens and diets are used only to provide the app. You can use your rights yourself or through an authorised agent, and we will not treat you differently for doing so. If we turn down a request, you can appeal by replying to our answer.

Regulators. You can complain to the Information Commissioner's Office in the UK, your local data protection authority in the EU, the Data Protection Commission in Ghana, the Nigeria Data Protection Commission, the Office of the Data Protection Commissioner in Kenya, or your state attorney general in the US. We would like the chance to put things right first, so please contact us.

Dinner Dough accounts are for adults aged 18 or over. Children appear in the app only as age bands, added by the household owner so meal ideas suit them. We do not knowingly collect personal information from children. If you think a child has made an account, email us and we will delete it.

Information travels between the app and our servers over encrypted connections. Access rules in the database mean only the people in a household can read its records, and only its owner and members can change them. Invite codes are kept only in scrambled form. The keys for the AI and billing services stay on our server and are never in the app.

The copy on your phone is protected by your phone's own security, so please keep a screen lock on. No system is perfectly secure. If a breach puts your information at risk, we will tell you, and the regulator, where the law requires it.

We will update this policy as the app changes, and change the date at the top. If a change affects how we use your information in a way that matters, we will tell you in the app or by email before it takes effect.

For anything about this policy or your information:

Email: support@maxmegroup.com

Post: Maxme Digital Media Limited, Yoomo Dede Ahento Street, Accra, Ghana

Phone: +233 55 750 2075