Rummage Privacy Policy
Last updated: [DATE]
Draft. This document is being finalised and may change before Rummage launches.
1. Who we are
Rummage ("we", "us") is a kitchen app that helps you work out what to cook from what you already have. We are the controller of your personal data.
- Name: [LEGAL NAME], trading as Rummage
- Address: [BUSINESS ADDRESS]
- Contact for privacy matters: support@rummage.kitchen
- ICO registration number: [ICO REGISTRATION NUMBER]
This policy explains what personal data we collect, why, who we share it with, and your rights. It applies to the Rummage app and to rummage.kitchen.
Who can use Rummage: you must be 16 or over. We do not knowingly collect data from anyone younger. If you think a child has given us data, email us and we will delete it.
2. What we collect
Information you give us
- Account: your email address and a password (we store it hashed, never in plain text). Your name, if you choose to give it.
- Preferences: your cooking level, default servings and language.
- Allergies and dietary preferences (for example vegan, halal, kosher, gluten-free). See "Sensitive information" below.
- Your kitchen: pantry items and use-by dates, saved recipes, collections, meal plans and shopping lists.
- Photos you choose to take or upload: of your fridge, cupboard or a receipt (to identify ingredients), of a recipe (to import it), of a dish you're cooking (to get feedback), and photos you add to your cooking journal.
- Voice: if you use voice search or hands-free cooking, what you say.
- Journal entries: ratings and notes about meals you've cooked.
- Links you import from recipe websites or social posts.
Information collected automatically
- Usage information about how you use the app (which features, how often), tied to an anonymous account ID rather than your name or email, and only if you opt in. [See "Analytics" below.]
- Technical information: device type, app version, and standard server logs (including IP address) used for security and fixing faults.
- Purchase information: whether you subscribe and until when. We never see your card details; Apple handles payment.
3. Sensitive information (allergies and dietary preferences)
Allergies are health information, and dietary choices such as halal or kosher can reveal religious belief. The law treats both as "special category" data and requires your explicit consent to use them.
We ask for them only so we can avoid recipes that don't suit you. We collect them only with your explicit consent: the app asks before it saves your first allergy or dietary preference, and keeps a record of when you agreed. If you say no, nothing is saved and the app carries on. You can withdraw consent at any time by removing them in Profile; once you have removed them all, the record of your consent is cleared too, and we will stop using them. The app works without them, though recipes will then not be filtered for you.
Allergy filtering helps, but it is not a guarantee. See our Terms of Service. Always check ingredient labels yourself.
4. How and why we use your data (our lawful bases)
| What we do | Data | Lawful basis |
|---|---|---|
| Create and run your account; provide the features you use | Account, preferences, pantry, recipes, plans, lists, journal, photos | Contract — needed to provide the service |
| Filter recipes for your allergies and diet | Allergies, dietary preferences | Explicit consent |
| Identify ingredients, read receipts and import recipes using AI | Photos, ingredient lists, imported text | Contract |
| Take and manage subscription payments | Purchase information | Contract; legal obligation (tax records) |
| Apply fair-use limits and prevent abuse | Usage counters | Legitimate interests (keeping the service fair and affordable) |
| Keep the service secure and fix faults | Technical data, logs | Legitimate interests |
| Understand how the app is used so we can improve it | Usage information | Consent (opt-in, off by default) |
| Send account emails (sign-up confirmation, password reset) | Email address | Contract |
| Respond to your messages and requests | Email, message | Legitimate interests / legal obligation |
We do not sell your personal data. We do not use it for advertising and do not track you across other companies' apps or websites.
5. AI processing
Rummage uses AI to read your photos, write recipes and answer questions while you cook. To do this, we send the relevant information to AI providers (listed in section 6). Specifically:
- Photos you submit for scanning, importing or cook feedback, together with context that helps the result — your cooking level, language, and, if you have set them, your allergies and dietary preferences — are sent to our AI provider for analysis.
- Recipe titles and descriptions are sent to image-generation providers to create dish pictures. We do not intend these to contain personal data.
- We do not send your name or email address to AI providers.
- AI can make mistakes. Results are suggestions, not facts.
We do not use AI to make decisions about you that have legal or similarly significant effects.
[CONFIRM against each provider's current API terms and state accurately whether they train on API data — as of drafting, our understanding is that API data is not used for training by default, but this must be verified before publishing.]
6. Who we share data with
We use trusted providers ("processors") who handle data only on our instructions:
| Provider | Why | Where |
|---|---|---|
| Supabase | Hosting, database, sign-in and file storage | EU (Ireland) |
| Anthropic | AI analysis of photos and writing recipes | United States |
| Google (Gemini) | Recipe image generation | United States |
| fal.ai | Recipe image generation | United States |
| RevenueCat | Managing subscriptions | United States |
| PostHog | Usage analytics | EU |
| Resend | Sending account emails | EU (Ireland) |
| [ImprovMX — CONFIRM] | Receiving support emails | [CONFIRM] |
We also use services that act independently:
- Apple processes your payment and subscription under its own privacy policy.
- Open Food Facts receives a product's barcode number and your device's IP address when you scan a barcode, because the app looks the product up directly.
- Apple (and on Android, Google) may process your voice to turn it into text when you use voice search, depending on your device settings. [CONFIRM on-device vs server.]
We may disclose data if the law requires it, to protect our rights, or if the business is sold (in which case the new owner must honour this policy).
7. Transfers outside the UK
Some providers are in the United States. Where we transfer data outside the UK, we rely on appropriate safeguards — for example the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or the provider's certification under the UK extension to the EU–US Data Privacy Framework. [CONFIRM the mechanism for each US provider.] You can contact us for a copy of the safeguards.
8. How long we keep it
| Data | Kept for |
|---|---|
| Account and everything in it | Until you delete your account |
| Photos in your cooking journal | Until you delete them or your account |
| Photos sent for scanning | Not stored by us; held by the AI provider only as long as its terms state [CONFIRM] |
| Usage analytics | [CONFIRM PostHog retention] |
| Server logs | [CONFIRM] days |
| Billing and tax records | As required by law (typically six years) |
| Backups | Deleted data may remain in encrypted backups for up to [CONFIRM] days |
When you delete your account, we remove your account and the content you created, and the private photos you uploaded. A shared cache of AI-generated dish images is kept because it is not linked to you.
9. Your rights
Under UK data protection law you can:
- See the personal data we hold about you;
- Correct anything that is wrong;
- Delete your data (you can delete your account in the app: Profile → Account);
- Restrict or object to how we use it;
- Move your data to another service (portability);
- Withdraw consent at any time, where we rely on it.
To use any of these, email support@rummage.kitchen. We will reply within one month. We may ask you to confirm your identity.
You can also complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113). We would appreciate the chance to put things right first.
10. Security
We protect your data with encryption in transit, access controls on the database so you can only reach your own data, and private storage for your photos. No system is perfectly secure. If a breach is likely to risk your rights, we will tell you and the ICO as the law requires.
11. Analytics
Analytics are off unless you say yes. After you finish setting up, the app asks once whether you'd like to share anonymous usage data. If you decline, or dismiss the question, nothing is collected and nothing is stored on your device for analytics.
If you agree, we use PostHog (EU) to see which features are used. It stores an identifier on your device and links events to an anonymous account ID, not your name or email. We do not record the content of your recipes, searches or photos in analytics.
You can change your mind at any time in Profile → Privacy & legal → Share anonymous usage data. Turning it off stops collection immediately and resets the identifier on your device.
12. Changes
If we change this policy in a meaningful way we will tell you in the app or by email before it takes effect. The date at the top shows the latest version.
13. Contact
support@rummage.kitchen — [LEGAL NAME], [BUSINESS ADDRESS]