DishDelightful
Privacy
This page describes verified product behavior. It is not a substitute for a lawyer-reviewed privacy policy.
Last updated: 17 July 2026 (product renamed to DishDelightful). DishDelightful is the product brand for this application. This outline is not professional legal advice.
Identity
Firebase Authentication handles sign-in identity (for example email/password or Google). DishDelightful maps verified Firebase users to internal account records.
Account-owned data
The DishDelightful API (FastAPI) and PostgreSQL store account-owned data such as generated recipes, weekly plans, preferences, usage, and entitlement state. Personal cookbook documents and embeddings are private to the authenticated account that uploaded them.
AI processing
When you generate recipes, plans, embeddings, or grounded results, request content needed for those features is processed by configured AI providers (for example OpenAI) through the DishDelightful backend.
Payments
Payment details are collected on Stripe-hosted Checkout and Customer Portal pages. DishDelightful does not directly store card numbers. Premium may be billed monthly or annually; subscription status is synchronized to your account after Stripe confirms events. Cancellation and refund questions can go through Contact — see also the beta support/refund outline in project operations docs.
Product analytics
When enabled, DishDelightful sends privacy-safe product funnel events to PostHog (for example sign-in, generation started/completed, pricing viewed, checkout started). Events use an opaque hashed account identifier — not your email, display name, or Firebase token. We do not send recipe text, ingredients, allergies, preferences, cookbook document contents, filenames, prompts, model responses, or payment card data. Session replay and advertising pixels are disabled. Analytics never blocks cooking workflows if the provider is unavailable.
Local development keeps analytics off by default. Staging and production use separate PostHog projects when configured.
Closed-beta feedback uses your email client (mailto) with category and safe metadata only. Do not paste recipe text, prompts, or document contents into support messages.
Data deletion
Self-serve account deletion is not fully productized yet. Data deletion requests are currently support-assisted. Contact us via the Contact page.
AI and allergy limitations
Nutrition notes are estimates. Allergy guidance supplements — and never replaces — checking product labels. DishDelightful does not guarantee allergen-free food or medical advice.
Final legal copy for broad public launch requires professional review.