Privacy Policy

MoodyFoodie (“the app”, “we”, “us”) is a personal cookbook app that lets you save recipes, share them with private groups, and vote on what to eat. This policy explains what data we collect, why, who we share it with, and the choices you have. By using MoodyFoodie you agree to this policy.

Who we are

MoodyFoodie is operated by Biscuit Byte Labs. For any privacy question or request, contact us at info@biscuitbytelabs.com.

Data we collect

Category	What	Why
Account	Email address and a password (stored only as a secure hash). If you sign in with Google, we receive your name, email address and profile picture from Google.	To create and secure your account and let you sign in.
Profile	Display name, optional avatar photo, optional age, optional description, and optional dietary lists (food preferences, allergies, favourite tags).	To personalise your profile. Dietary lists are private unless you switch a given list to public.
Content you create	Recipes (titles, ingredients, instructions, nutrition, photos), tags, group names and images, group membership and join codes, and votes you cast in polls.	To provide the core features of the app and to share content with the groups you choose.
Photos	Images you choose to upload for recipes, groups or your avatar.	To display them in the app. We access your photo library or camera only when you pick or take a photo.
Technical	Authentication session tokens and basic server logs (e.g. request times) kept by our infrastructure provider.	To keep you signed in and to operate and secure the service.

We do not use third-party advertising or analytics SDKs, and we do not sell your personal data.

How your content is shared

Recipes are private to you by default. Content becomes visible to others only when you choose to: add it to a group (visible to that group's members), mark a recipe public, or create a share link (anyone with the secret link can view that one recipe). Other members of a group can see your display name and avatar.

Service providers we use

• Supabase — hosts our database, authentication and file storage. Your account, profile, recipes and photos are stored here on our behalf.
• Google — provides Google Sign-In (optional), and the Gemini AI API. When you use the “Import recipe” or nutrition “Guess” features, the recipe text, URL or photo you provide is sent to Google's Gemini API through our servers to extract the recipe or estimate nutrition. Do not submit content you are not comfortable processing this way.
• Cloudflare Pages — serves our public link landing page. No personal data is submitted to it.

These providers process data only to deliver their service to us and may store data on servers outside your country.

Data retention

We keep your data for as long as your account exists. When you delete your account, your profile, recipes, photos and related content are permanently deleted from our systems (backups roll off on a short cycle). See “Deleting your account” below.

Your rights and choices

• Access or correct your profile and content directly in the app.
• Make dietary lists or recipes public or private at any time.
• Delete individual recipes, photos, tags or groups in the app.
• Delete your entire account and associated data (see below).
• Depending on where you live (e.g. EEA/UK, California), you may have additional rights to access, port or object to processing. Email us to exercise them.

Deleting your account

You can request deletion of your account and all associated data at any time. Visit moodyfoodie.pages.dev/delete-account or email info@biscuitbytelabs.com from your account email address. We will permanently delete your account, profile, recipes, photos, tags and votes. Content you contributed to a shared group may be removed or anonymised.

Children

MoodyFoodie is not directed to children under 13 (or under the minimum age required in your country). We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

Security

Data is encrypted in transit (HTTPS). Access to your content is enforced by row-level security so that only you and the groups you share with can read it. Passwords are stored only as salted hashes.

Changes to this policy

We may update this policy from time to time. We will revise the “Last updated” date above and, for material changes, notify you in the app.

Contact

Questions or requests: info@biscuitbytelabs.com.