Privacy Policy

Last updated

This policy explains what personal data Suppercharge collects when you use our website at suppercharge.com and our apps for iPhone and Android, why we collect it, who processes it, and the choices and rights you have. Our Terms of Use cover the rest of the service.

In short: we collect what we need to plan your meals and run your account. We do not sell your data, we do not show ads, and you can export or delete your data at any time from Settings.

What we collect and why

We collect what you give us and what the service needs to work. You can use the core of Suppercharge as a guest, without giving an email address.

DataWhat it includesWhy we use it
AccountEmail address, first name if you give it, how you sign in, your password as a one-way hash (never the password itself), language and country settings, and your marketing and notification choices.To create your account, sign you in on each device and contact you about your account.
Eating preferencesDiet type, allergies and other restrictions, dislikes and ingredients you avoid, serving size, units, and, with Pro, daily targets and planning settings.To choose recipes that suit you and your household. Allergies and diets can reveal something about your health or beliefs, so we use them only to plan your meals.
Plans and grocery listsMeal plans and plan history, which meals you cooked, grocery list items you add or check off, and pantry items.To run the planner and the list and keep them in sync across your devices and household.
Your recipes and notesRecipes you create or import (with the web address you imported from), notes, ratings, favourites and recipe feedback.To keep them for you and improve our recipes.
HouseholdThe household name, who is a member and their role, and invite links.To share plans and one grocery list with the people you live with.
Device and notificationsA random device id created by the app or browser, platform (iPhone, Android or web), app version, time zone, a push token if you allow notifications, and your reminder settings.To keep you signed in on each device, send the reminders you turn on at the right local time, and fix problems.
PurchasesWhether you have Pro, the plan, its status, renewal and end dates, and offer codes you redeem. Purchase status comes from RevenueCat, which checks App Store and Google Play purchases. We never receive card details.To unlock Pro on every device and for your household, and to keep records the law requires.
ActivityWhen you build a plan, add or cook a meal, or check off an item, stored as part of your plans and lists. We do not run a separate analytics or tracking service; if we add one, we will update this policy before we do.To show your history, avoid repeating recent meals and fix problems.
Server logsIP address, time, the request made, and browser or app details. Kept for 30 days.To keep the service secure, limit abuse such as repeated sign-in attempts, and troubleshoot.
Messages to usWhat you send us by email or through feedback forms.To answer you and improve the service.

We do not collect your precise location, your contacts, advertising identifiers or data from health apps, and we do not use advertising trackers.

How we use your data

  • To provide the service you asked for: plans, lists, recipes, household sharing, Pro and syncing between devices. Where the law asks for a legal basis, this is our contract with you.
  • To send reminders and notifications you turn on, by push or email. You can turn each one off in Settings or in your device settings. This is based on your consent.
  • To send account emails, such as sign-in links, email confirmation and password resets. These are part of the service.
  • To send news and offers by email, only if you opt in. You can opt out in Settings or from any such email.
  • To keep the service secure and improve it, using logs, your activity in the service, ratings and feedback. This is based on our legitimate interest in running a safe, working product.
  • To meet legal obligations, such as tax and accounting records and responding to lawful requests.

We do not sell your personal data, share it for targeted advertising, or use it to make decisions about you that have legal or similarly significant effects.

Who we share it with

We use these service providers to run Suppercharge. They process personal data on our behalf and only for the purposes described here.

ProviderWhat they doData involved
Cloud hosting providerRuns our servers and the PostgreSQL database that stores your account and planning data.Everything you store in Suppercharge, and server logs with IP addresses.
ResendSends transactional email: sign-in links and codes, email confirmation, password resets, reminders you turn on, and data export notices.Your email address and the content of those emails.
RevenueCatChecks App Store and Google Play purchases so Pro works on every device.Your Suppercharge account id and your purchase and subscription status. RevenueCat does not receive your email from us.
Apple (App Store) and Google (Google Play)Sell and bill Pro subscriptions, handle trials, cancellations and refunds, and deliver push notifications on their devices.Your payment and store account details, which they hold under their own privacy policies. We never see your card details.
Expo push serviceDelivers push notifications to the Suppercharge app.Your device push token and the notification text.

We also share data in these cases:

  • Your household: members see the plans, grocery list and household recipes you add to the household.
  • People you send a share link to: anyone with the link sees that grocery list or plan and the household name, until a member turns the link off.
  • When the law requires it, or to protect the rights, property or safety of our users, the public or us.
  • If Suppercharge is sold or merged, your data may pass to the new owner under this policy. We will tell you before that happens.

International transfers

Suppercharge is operated from India. Our service providers may store or process data in other countries, including the United States. When we transfer personal data out of the European Economic Area, the United Kingdom or Switzerland, we rely on safeguards the law recognises, such as the European Commission's standard contractual clauses.

How long we keep it

  • Your account and everything in it: for as long as you keep your account. Guest accounts are kept the same way until they are deleted.
  • After you delete your account: erased 7 days after you ask, and removed from backups within 30 days after that.
  • Server logs: 30 days.
  • Data exports: the download link works for 7 days.
  • Purchase records: as long as tax and accounting law requires, even after you delete your account.

Deleting your account

You can delete your account yourself in Settings, in the app or on the website. When you do, you are signed out on every device and your account is scheduled for deletion. After a 7-day grace period we permanently erase your account, preferences, plans, grocery lists, recipes, notes, ratings, favourites and device records. To stop a deletion during the grace period, or to ask us to delete your account for you, email hello@suppercharge.com.

Before you delete, you can download everything with the data export in Settings. Deleting your account does not cancel a subscription bought through the App Store or Google Play; cancel it in the store first so you are not charged again.

Your rights and choices

Wherever you live, you can:

  • see and correct your details and preferences in Settings;
  • download a copy of your data at any time with the data export in Settings;
  • delete your account in Settings;
  • turn reminders, push notifications and marketing emails on or off;
  • ask us for access to, correction of, deletion of or a portable copy of your personal data, object to or ask us to restrict how we use it, and withdraw consent you gave.

Send requests to hello@suppercharge.com. We may need to confirm it is you before acting. We answer within 30 days, free of charge, and we will not treat you differently for using your rights.

European Economic Area and United Kingdom

You have the rights under the GDPR and UK GDPR listed above, and you can complain to your local data protection authority.

California and other US states

You have the right to know what personal information we collect, use and disclose, and to ask us to delete or correct it. We collect the categories described in this policy: identifiers such as your email address and device id, purchase status, and usage information. We do not sell or share personal information for cross-context behavioural advertising.

India

Under the Digital Personal Data Protection Act, 2023, you can ask for a summary of your personal data and how we use it, have it corrected, completed or erased, nominate another person to act for you if you die or become unable to act, and raise a grievance with us at hello@suppercharge.com. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.

Children

Suppercharge is not directed at children under 13, and we do not knowingly collect personal data from them. If you are under 18, you may use Suppercharge only with the consent of a parent or guardian. If you believe a child under 13 has given us personal data, contact hello@suppercharge.com and we will delete it.

Security

We encrypt data in transit, store passwords only as one-way hashes, use short-lived sign-in tokens that rotate, encrypt uploaded import files, limit who on our team can access personal data, and limit repeated sign-in attempts. No system is completely secure. If a breach affects your personal data, we will tell you and the authorities as the law requires.

Cookies and storage on your device

We do not use advertising or analytics cookies. The website keeps your sign-in tokens, device id and recently opened recipes in your browser's local storage, and keeps copies of pages, plans and lists in the browser's cache so they open offline. The apps keep similar data on your device. Signing out removes the sign-in tokens; clearing the site's data in your browser removes the rest.

Some pages, such as Kitchen essentials, may link to products on Amazon as an affiliate. If you follow one of those links, Amazon may set its own cookies under its own privacy notice. We receive only commission reports that do not identify you.

Waitlist and data rescue tool

Before launch, the website offered a waitlist and a rescue tool for saving your data from the meal-planning app you used before. If you used them:

  • Waitlist: we hold your email, your eating preferences (diet type, restrictions, dislikes, servings and units), your platform, your country if you gave it, and whether you used another meal-planning app.
  • Rescue upload (optional): the file produced by the rescue snippet, which contains your account data from that app with credential fields removed. We store it encrypted (AES-256-GCM) and record only counts (plans, favourites, notes and recipes) alongside it.
  • Import: when you import a rescued file into your Suppercharge account, we copy your preferences, plans, favourites, notes, ratings and recipes from it into your account. Sign-in tokens in the file are removed and never stored.

We never collect your password or session token for the other app. The rescue snippet runs in your browser and strips token fields before saving the file, and we do not connect to that app's servers on your behalf.

We use this data to set up your Suppercharge account already configured, to import what you rescued when you ask us to, and to email you about the beta and launch. Your manage link lets you view and delete your waitlist entry and rescue file at any time. Rescue files that were never imported are deleted 12 months after launch.

Changes to this policy

We will update this policy when the service or the law changes, and change the date at the top. If a change is significant, we will tell you in the service or by email before it takes effect.

Contact

Suppercharge, based in India, is responsible for your personal data (the data controller, or data fiduciary under Indian law). For privacy questions, requests or grievances, email hello@suppercharge.com.