Privacy Policy

Introduction

Seven Southgate ("we", "our", or "us"), an independent software studio based in New Zealand, operates the Dindins - Family Meal Planner mobile application (the "App"). This Privacy Policy explains how we collect, use, and protect your personal information when you use our App.

We are committed to protecting your privacy and ensuring you have a positive experience when using Dindins. This policy outlines our data handling practices and your privacy rights.

Data We Collect

Dindins collects the following types of information to provide our meal planning services:

Personal Information

• Name: Your display name and names of family members for identification within your family group
• Email: Your email address (provided via Apple Sign-In) for account identification
• User ID: A unique identifier for your account
• Profile Information: Optional details like avatar emoji, color preference, and birth date

User Content

• Recipes: Recipes you create, import, or save to your collection, including images
• Meal Plans: Your weekly meal schedules and meal assignments
• Shopping Lists: Generated shopping lists from your meal plans
• Family Information: Family member profiles, dietary preferences, allergies, and cooking skills
• Voting Data: Meal preferences and votes within your family group
• Cooking Schedules: Meal assignments and cooking responsibilities

Device Information

• Push Notification Tokens: Device tokens for delivering push notifications
• Device Type: Basic device information for app compatibility

How Your Data is Stored

Dindins uses Firebase, a Google cloud platform, as our primary backend to enable family collaboration and real-time syncing across devices.

Firebase Services We Use

• Firebase Authentication: Manages secure sign-in via Apple Sign-In. Your Apple identity token is used to create a secure Firebase account.
• Cloud Firestore: Stores your user profile, recipes, meal plans, shopping lists, voting data, and family collaboration data. This enables real-time syncing between family members.
• Firebase Cloud Storage: Stores profile photos and recipe images you upload.
• Firebase Cloud Messaging: Delivers push notifications for voting reminders, cooking assignments, and family updates.

Data Security

• All data is encrypted in transit using TLS/SSL
• Data is encrypted at rest on Firebase servers
• Access is controlled by security rules that ensure users can only access their own data and shared family data
• Firebase infrastructure is protected by Google's security measures

Legacy iCloud Support

Some features may still use Apple's iCloud for backward compatibility during our transition period. Any data in iCloud is protected by Apple's security measures and your Apple ID credentials.

Third-Party Services

Dindins uses the following third-party services to operate:

Firebase (Google)

Firebase is our primary backend infrastructure provider. By using Dindins, your data is processed and stored on Google's servers in accordance with Firebase's Privacy Policy and Google's Privacy Policy.

Apple Services

We use Apple Sign-In for authentication and Apple Push Notification service (APNs) for delivering notifications. These are governed by Apple's Privacy Policy.

Data Sharing

We do not sell your personal data to anyone.

Your data is shared only in the following circumstances:

• With your family members: When you join or create a family group, relevant data (recipes, meal plans, shopping lists, voting) is shared with other family members. You control what you share by adjusting recipe visibility settings.
• With service providers: Your data is processed by Firebase (Google) to provide the app's functionality. These providers are contractually obligated to protect your data.
• As required by law: We may disclose data if required by law or to protect our rights.

We do not share data with:

• Advertisers or ad networks
• Data brokers
• Marketing companies

Advertising and Tracking

Dindins contains no advertising and performs no behavioral tracking.

• No advertisements are displayed in the app
• No advertising identifiers are collected
• No behavioral analytics or user tracking is performed
• No cross-app tracking occurs
• Firebase Analytics is disabled in our app

Crash Reporting (Optional)

Dindins may use Firebase Crashlytics to collect crash reports and diagnostic information when the app encounters errors. This helps us identify and fix bugs.

If enabled, Crashlytics may collect:

• Crash logs and stack traces
• Device state at the time of a crash
• Basic device information (model, OS version)
• App state information to help diagnose issues

Crashlytics does not collect personal content like your recipes or meal plans. This feature can be disabled in the app settings.

Push Notifications

Dindins uses push notifications to keep you informed about:

• Voting deadlines and reminders
• Cooking schedule assignments
• Family activity updates
• New meal suggestions

To deliver notifications, we store your device's push notification token securely. You can disable notifications at any time in your device's Settings app.

Your Rights

You have full control over your data:

Data Access

All your data is accessible directly through the Dindins app. You can view your profile, recipes, meal plans, and all other content you've created.

Data Export

You can export your recipes and meal plans from within the app at any time.

Data Deletion

You can delete your data at any time:

• Delete individual items (recipes, meal plans) directly within the app
• Delete your entire account and all associated data through the app settings
• Contact us to request complete data deletion

Data Portability

Your data belongs to you. You can export your recipes and meal plans in standard formats for use elsewhere.

New Zealand Privacy Act 2020

As a New Zealand business, we handle your personal information in accordance with the Privacy Act 2020 and its Information Privacy Principles. Under the Act you have the right to:

• Access: Ask for a copy of the personal information we hold about you
• Correction: Ask us to correct information that is wrong or out of date

To make a request, contact us at the email address below. If you are not satisfied with how we handle a privacy concern, you can raise it with the Office of the Privacy Commissioner (privacy.org.nz).

GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate personal data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation of data processing
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to processing of your personal data

To exercise these rights, contact us at the email address below. We will respond to your request within 30 days.

Legal Basis for Processing: We process your data based on:

• Contract performance (providing the app's services)
• Legitimate interests (improving the app, security)
• Consent (optional features like crash reporting)

CCPA Compliance (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to Know: What personal information is collected and how it is used
• Right to Delete: Request deletion of personal information
• Right to Opt-Out: Opt out of the sale of personal information (we do not sell any personal information)
• Right to Non-Discrimination: Not be discriminated against for exercising your privacy rights

We do not sell personal information to third parties.

Children's Privacy

Dindins is designed to be family-friendly and is rated 4+ on the App Store. The app may be used by families with children, with parents/guardians managing family accounts. We do not knowingly collect personal information from children under 13 without parental consent. Family member profiles for children should be created and managed by parents or guardians.

Data Retention

We retain your data for as long as your account is active or as needed to provide you services. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal purposes.

International Data Transfers

Your data may be transferred to and processed in countries other than your own, including the United States where Firebase servers are located. By using Dindins, you consent to this transfer. We ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top.

For significant changes, we may also notify you through the app or via email. You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Email: hello@sevensouthgate.com
• Website: sevensouthgate.com
• Support: sevensouthgate.com/dindins/support