Privacy

Identity

Firebase Authentication handles sign-in identity (for example email/password or Google). DishDelightful maps verified Firebase users to internal account records.

Account-owned data

The DishDelightful API (FastAPI) and PostgreSQL store account-owned data such as generated recipes, weekly plans, preferences, usage, and entitlement state. Personal cookbook documents and embeddings are private to the authenticated account that uploaded them.

AI processing

When you generate recipes, plans, embeddings, or grounded results, request content needed for those features is processed by configured AI providers (for example OpenAI) through the DishDelightful backend.

Payments

When mobile billing is enabled, payment details are collected by Apple or Google through the App Store or Play Store. DishDelightful does not directly store card numbers. Free, Premium, and Premium Unlimited plan status is synchronized to your account after the store confirms events. Cancellation and refund questions can go through Contact — store purchases also follow Apple or Google policies.

Product analytics

When enabled, DishDelightful sends privacy-safe product funnel events to PostHog (for example sign-in, generation started/completed, pricing viewed, checkout started). Events use an opaque hashed account identifier — not your email, display name, or Firebase token. We do not send recipe text, ingredients, allergies, preferences, cookbook document contents, filenames, prompts, model responses, or payment card data. Session replay and advertising pixels are disabled. Analytics never blocks cooking workflows if the provider is unavailable.

Local development keeps analytics off by default. Staging and production use separate PostHog projects when configured.

Closed-beta feedback uses your email client (mailto) with category and safe metadata only. Do not paste recipe text, prompts, or document contents into support messages.

Data deletion

You can request permanent account deletion from account settings, the account deletion page, or via support. Once accepted, product access stops immediately and cleanup completes asynchronously. Account-associated DishDelightful data — including personal recipes and cookbook content, meal plans, favorites/history, grocery/pantry, preferences, and related user-owned content — is removed according to our backend policy.

Records needed for billing, tax, fraud/security, or legal obligations may be retained. Encrypted backups may retain copies until normal backup retention expires. Deleting your DishDelightful account does not automatically cancel App Store or Google Play subscriptions — manage those in the store account settings.

Questions: Contact.

AI and allergy limitations

Nutrition notes are estimates. Allergy guidance supplements — and never replaces — checking product labels. DishDelightful does not guarantee allergen-free food or medical advice.