Privacy Policy

theDINNER.ai ("we," "our," or "us") respects your privacy. This policy explains what we collect, how we use it, and the choices you have. Questions? Email support@thedinnerai.com.

1. Who we are

theDINNER.ai is a mobile meal-planning app for iOS and Android that helps you plan meals, save recipes, generate grocery lists, and interact with an AI cooking assistant. The app is published by Luis Oppenheimer, reachable at loppenheimer@carbuyinghub.com.

2. Information we collect

Information you provide

• Account info: email address and password (processed by Supabase Auth — passwords are hashed, we never see them).
• Profile info: optional household name, size, dietary restrictions, cuisine preferences, cooking skill level.
• Content you create: saved recipes, meal plans, grocery lists, messages with the AI co-pilot, meals you dislike.
• Zip code (optional): for the Shop the Sales feature, so we can match you to local grocery deals. We do not collect precise GPS location.

Information collected automatically

• Subscription status: managed by RevenueCat. We store whether you have an active Pro subscription and its expiration date.
• Usage events: which features you use, frequency of AI calls (used for rate limiting and abuse prevention).
• Device info: app version, OS version, device model, crash logs (only if a crash occurs).

Information we do NOT collect

3. How we use your information

• Provide core app features (meal plans, AI chat, grocery lists).
• Personalize recommendations (e.g., never suggesting meals you've disliked).
• Process subscription payments via Apple, Google, and RevenueCat.
• Enforce fair usage limits (free users: 3 AI calls per hour; Pro users: up to 60).
• Communicate important service updates (rare emails; we do not send marketing).
• Diagnose crashes and improve the app.

4. How your data is shared

We share limited data only with providers that power the app:

We do not sell, rent, or share your personal data with advertisers or data brokers.

5. AI interactions

When you use the AI co-pilot:

• Your messages are sent from the app to our Supabase server, then proxied to Anthropic's Claude API.
• Our server includes your household profile (family size, dietary restrictions, disliked meals, saved recipe titles) as context so Claude can give relevant suggestions.
• API keys are stored only on our server — they are never embedded in the app.
• Claude's API does not train models on customer API traffic.
• Message history is trimmed to the most recent 12 messages to limit data sent.

6. Data retention

• Account data: retained until you delete your account.
• Recipes, meal plans, grocery items: retained until you delete them or your account.
• AI conversation logs: stored on your device and in your Supabase row. You can clear chat history in-app at any time.
• Subscription records: retained as required by Apple, Google, and financial record-keeping laws.

7. Your rights

Regardless of where you live, you can:

• Access your data — email us and we'll send a copy.
• Delete your account — from Profile → Delete Account, or email us.
• Correct your data — edit directly in the app or email us.
• Export your data — email us to export your recipes, meal plans, and grocery history.
• Opt out of AI personalization — disable household profile fields.

If you are in the EU/EEA, UK, California, or other jurisdictions with privacy laws (GDPR, UK GDPR, CCPA, etc.), you also have the right to lodge a complaint with your local data protection authority, request data portability, and object to or restrict certain processing.

To exercise any right, email support@thedinnerai.com. We respond within 30 days.

8. Children's privacy

theDINNER.ai is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

9. Security

• Transport encryption (TLS) on every API call.
• Row-Level Security (RLS) in Supabase — each user can only access their own data.
• Server-side API keys — Anthropic and other provider keys are never in the client app.
• Password hashing — handled by Supabase Auth; we never see your plaintext password.

No system is 100% secure. If we become aware of a breach affecting your data, we'll notify you promptly as required by applicable law.

10. International data transfers

Our servers are hosted in the United States (Supabase) and Anthropic processes AI requests in the United States. By using the app, you consent to your data being processed in the US and other countries where our providers operate. Where required, transfers are covered by Standard Contractual Clauses or equivalent safeguards.

11. Subscriptions, refunds, cancellation

Subscriptions are billed through the App Store (iOS) or Google Play (Android) at the price shown in the app. Free trials convert to paid subscriptions unless canceled at least 24 hours before trial end. Refunds are handled by Apple and Google per their policies — we cannot issue direct refunds.

Cancel or manage anytime:

• iOS: Settings → [your name] → Subscriptions → theDINNER.ai
• Android: Google Play Store → Menu → Subscriptions → theDINNER.ai

12. Changes to this policy

We may update this policy as the app evolves. If changes are material, we'll notify you in-app or by email before they take effect. The "Last updated" date always reflects the current version.

13. Contact

Privacy questions, data requests, or concerns:

• Email: support@thedinnerai.com
• Publisher: Luis Oppenheimer — loppenheimer@carbuyinghub.com
• Website: thedinnerai.com