Privacy Policy

Introduction

TF Halibut ("we", "us", or "our") operates the Dishy Delishy mobile application (the "App"). This Privacy Policy explains how we collect, use, store, and protect your information when you use the App.

By using Dishy Delishy, you agree to the collection and use of information as described in this policy.

Information We Collect

Account Information

When you sign in using Google, Apple, or email authentication through Firebase Auth, we collect:

• Your display name
• Your email address
• Your authentication provider identifier

Meal Data

When you log meals, we collect and store the information you provide:

• Meal names and types (e.g., Breakfast, Lunch, Dinner, Snack)
• Dates and times
• Notes and descriptions
• Tags you assign to meals

Photos

If you upload photos of your meals, these images are stored in Firebase Storage and associated with your meal entries.

AI Analysis Data

If you use the AI photo scan feature, we collect and store:

• AI-generated meal name suggestions and tag suggestions derived from your photos
• Scan usage counts to manage your weekly quota (number of scans used and quota reset dates)

Group Membership Data

When you create or join a group, we store your membership information, including your role (owner or member) and the date you joined.

Device and Local Data

The App stores certain data locally on your device:

• App preferences such as theme selection and view mode
• Cached data for offline functionality
• Authentication tokens stored securely using encrypted device storage

How We Use Your Information

We use the information we collect solely to:

• Provide and operate the Dishy Delishy service
• Display your meal history and planned meals
• Enable group-based meal sharing with other members
• Authenticate your identity and secure your account
• Store and display your meal photos
• Analyse your meal photos using AI to suggest meal names and tags (when you opt to use this feature)
• Track your AI scan usage to enforce weekly quota limits
• Maintain your app preferences and settings

Data Storage and Security

Your data is stored using Google Firebase infrastructure (Google Cloud Platform). We take reasonable measures to protect your information:

• Authentication tokens are stored using encrypted device storage
• All data transmission uses HTTPS encryption
• Firestore security rules enforce group-level access control
• All user data is cleared from the device when you sign out

Data Sharing and Third-Party Services

We do not sell, trade, or share your personal information with third parties for marketing or advertising purposes. Specifically:

• We do not use analytics or tracking services
• We do not serve advertisements
• We do not share data with data brokers or marketing platforms

We use the following third-party service providers to operate the App:

• Firebase (Google Cloud): Provides data storage, authentication, and file storage infrastructure
• RevenueCat: Manages in-app subscriptions and purchases. RevenueCat receives your anonymized user identifier and purchase/subscription data to process and verify transactions. RevenueCat's privacy policy is available at revenuecat.com/privacy
• OpenAI: Provides AI-powered meal photo analysis. When you choose to scan a meal photo, the image is sent to OpenAI's API for processing. OpenAI receives only the photo and your group's existing tag names (no personal identifiers). OpenAI's privacy policy is available at openai.com/policies/privacy-policy

Your meal data is shared only with other members of groups you voluntarily join.

Your Rights

You have the following rights (including under GDPR and CCPA) regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate personal data
• Deletion: Request deletion of your personal data and account
• Portability: Request your data in a portable format
• Withdraw Consent: Withdraw your consent to data processing at any time by deleting your account

You can delete your account directly within the App through Settings. To exercise any other rights, please contact us at the email address below.

Data Retention

We retain your personal data for as long as your account is active. When you delete your account, your personal data and associated meal entries are deleted. Photos stored in Firebase Storage associated with your account are also removed upon account deletion.

Children's Privacy

Dishy Delishy is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us so we can promptly delete it.

International Data Transfers

Your data is stored on Firebase (Google Cloud Platform) servers, which may be located in various regions worldwide. By using the App, you consent to the transfer of your information to facilities outside your country of residence, which may have different data protection laws.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last Updated" date at the top of this page. We encourage you to review this Privacy Policy periodically for any changes.

Contact Us

If you have questions or concerns regarding this Privacy Policy, please contact us at:

Email: dishydelishy@tfhalibut.com