Privacy Policy
Effective August 29, 2026 · Last updated August 29, 2026
This policy explains what data dishd collects, why, and what control you have over it. The short version: we collect only what the app needs to work, we don't sell your data, and you can start account deletion in the app. Some safety records, backups, or provider logs may follow their stated retention periods.
What we collect
- Account info — your name, username, email address, and password (stored as a secure hash; we never see it in plain text).
- Age and terms attestations — at sign-up or login, we store only timestamps confirming your 16+ self-attestation and the version of the Terms/EULA you accepted. We do not collect or retain your date of birth.
- Content you create — recipe links you save, reviews, ratings, photos you post, your profile photo, follows, likes, and blocks.
- Cooking goals — if you set them, how often you want to cook and how many new recipes you want to try in a year. Goals are private to you; other users never see them or your progress.
- Usage data — in-app events (like "saved a recipe" or "posted a review") tied to your account, used to understand how dishd is used and improve it.
We do not collect your contacts, precise location, phone number, or any payment information. We don't track you across other apps or websites, and we don't show ads.
How we use it
- To run the app: show your reviews to your followers, build your feed, and sync your saved recipes.
- To keep dishd safe: act on reports, enforce blocks, and moderate content.
- To improve the product, using aggregated usage data.
- To assist recipe entry: when you submit a link for extraction, we may send the normalized link and caption or recipe-page metadata to Anthropic to identify a title, ingredients, and steps. This output is advisory and can be edited or ignored.
Who can see your content
Your reviews and profile are visible to other dishd users. If your account is private, your reviews are visible only to followers you've approved — everywhere in the app. Blocking a user hides your content from them and theirs from you, completely.
Where your data lives
Your data is stored and processed by Supabase, our backend and infrastructure provider, on servers in the United States. We also share the minimum data necessary with Apple to operate account sign-in and app distribution through iOS. We do not sell your data, and we don't share it with data brokers or advertisers. For recipe extraction, Anthropic processes the submitted link/caption as our service provider. Anthropic receives no password, birth date, profile, review photo, or social graph data through extraction. Provider terms and retention controls apply to those processors. Questions about processors can be sent to dishdsupport@gmail.com.
Deleting your data
Settings → Delete account starts a server-side deletion workflow that removes your profile, reviews, photos, saves, follows, personal recipes, and other account data, then deletes the authentication account. Storage cleanup is checked before account deletion; if a temporary failure occurs, the app reports that deletion is incomplete and the operation can be retried. You can also email us to request deletion.
How long we keep it
We keep your data for as long as your account exists. After a successful deletion workflow, account data and storage objects are removed from active systems. Reports and moderation records may be retained for safety, abuse prevention, or legal compliance, with reporter identity removed where appropriate. Backups and provider logs may retain limited copies until their normal expiration. Aggregated, non-identifying usage counts may also remain in analytics.
Security
Access to your data is enforced at the database level: you must be signed in to read anything, and a private account's content is served only to followers you've approved. Passwords are hashed by our auth provider and never visible to us. No system is perfectly secure, but we design for the principle that the app should only ever be able to fetch what you're allowed to see.
Children
dishd is for people aged 16 and older. We require an explicit self-attestation at sign-up or login and block accounts that do not provide it. We don't knowingly collect data from children under 16; if you believe someone under 16 has an account, contact us and we'll delete it.
Your rights
Depending on where you live (including California and the EU), you may have rights to access, correct, export, or delete your personal data. Deletion and correction are available directly in the app; for anything else, email us and we'll respond within the time your local law requires.
California (CCPA/CPRA)
If you're a California resident, you have the right to know what personal information we collect, to request its deletion or correction, and to opt out of the "sale" or "sharing" of personal information. We do not sell or share your personal information for cross-context behavioral advertising. We have not made a legal determination about which thresholds or exemptions apply to this service; we will handle requests in good faith and update this notice if that changes. To exercise any right today, email dishdsupport@gmail.com.
Europe, the UK, and Switzerland
If you're in the EEA, UK, or Switzerland, our lawful basis for processing your account and content is performance of our agreement with you (the Terms of Service); for usage analytics, it's our legitimate interest in improving the app, which you may object to at any time by emailing us. Because our infrastructure provider stores data in the United States, international transfers rely on our provider's standard contractual clauses. You have the right to lodge a complaint with your local data protection authority. dishd does not currently have a dedicated EU representative under Article 27 GDPR; if that changes, we'll list their contact details here.
Automated processing
dishd uses an algorithm-first extractor and, for captions that need more structure, may use Anthropic to suggest a title, ingredients, and steps from the submitted link's caption or page metadata. Extraction does not decide account access, moderation, ranking, or who can see your content. Suggestions can be inaccurate and are shown for convenience; verify them against the original source. You may skip extraction and enter recipe details manually. We do not send review photos or age/terms attestations to the extraction provider.
Changes
If we make material changes to this policy, we'll notify you in the app before they take effect.