Privacy Policy

1. Introduction

Welcome to SuperGousto. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how SuperGousto ("we", "us", or "our") collects, uses, shares, and protects your personal data when you use our website, mobile applications, and services (collectively, the "Service").

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Information You Provide to Us

We collect information that you provide directly to us:

• Account Information: Name, email address, password, and profile information when you create an account
• Profile Data: Dietary preferences, allergies, household size, cooking preferences, and other personalization settings
• Content: Recipes you create or modify, meal plans, shopping lists, notes, reviews, and comments
• Payment Information: Payment card details, billing address (processed securely through third-party payment processors)
• Communications: Messages you send us, customer support inquiries, survey responses, and feedback
• Social Media: Information from social media accounts if you choose to connect them to your account

2.2 Information Collected Automatically

When you use our Service, we automatically collect certain information:

• Usage Data: Pages viewed, features used, time spent on pages, recipes browsed, searches performed, and interaction patterns
• Device Information: Device type, operating system, browser type and version, device identifiers, screen resolution, and mobile network information
• Location Data: Approximate location based on IP address (we do not collect precise GPS location unless you explicitly grant permission)
• Cookies and Tracking: Information collected through cookies, web beacons, and similar technologies (see our Cookie Policy for details)
• Log Data: IP addresses, browser types, referring URLs, pages visited, timestamps, and error logs

2.3 Information from Third Parties

We may receive information from third-party sources:

• Authentication Providers: Information from social login services (e.g., Google, Apple, Facebook)
• Data Partners: Recipe information, nutritional data, and product pricing from our partners and suppliers
• Analytics Providers: Aggregated analytics and demographic information
• Public Sources: Publicly available information that helps us improve our recipe database and recommendations

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Service Delivery and Improvement

• Provide, maintain, and improve our Service
• Create and manage your account
• Process your meal plans and shopping lists
• Provide personalized recipe recommendations
• Display price comparisons across supermarkets
• Save your preferences and settings
• Generate AI-powered meal plan suggestions

3.2 Communication and Support

• Send you service-related notifications and updates
• Respond to your inquiries and provide customer support
• Send you newsletters and promotional materials (with consent)
• Conduct surveys and gather feedback
• Notify you of changes to our terms or policies

3.3 Analytics and Research

• Analyze usage patterns and trends
• Monitor and improve Service performance
• Conduct research to improve our features
• Test new features and functionality
• Generate aggregated, anonymized statistics

3.4 Security and Compliance

• Detect, prevent, and address fraud and security issues
• Enforce our Terms of Service
• Comply with legal obligations
• Protect our rights and property
• Resolve disputes

3.5 Marketing and Personalization

• Show you relevant content and advertisements
• Personalize your experience based on your preferences
• Measure advertising campaign effectiveness
• Recommend recipes and meal plans tailored to you

4. Legal Bases for Processing (GDPR)

If you are in the European Economic Area (EEA), UK, or Switzerland, we process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to provide the Service you requested
• Consent: You have given explicit consent for specific processing activities (e.g., marketing communications)
• Legitimate Interests: Processing necessary for our legitimate business interests (e.g., improving our Service, security, analytics) that do not override your rights
• Legal Obligation: Processing required to comply with legal obligations

5. Data Sharing and Disclosure

We may share your information in the following circumstances:

5.1 Service Providers

We share data with third-party service providers who help us operate our Service:

• Cloud hosting and storage providers (e.g., Supabase, AWS)
• Analytics services (e.g., Google Analytics)
• Email service providers
• Payment processors
• Customer support tools
• Authentication services

These providers are contractually obligated to protect your data and use it only for the purposes we specify.

5.2 Business Partners

We may share aggregated, anonymized data with supermarkets and food retailers to improve pricing accuracy and product availability. We do not share your personal information with these partners.

5.3 Legal Requirements

We may disclose your information if required to:

• Comply with legal obligations, court orders, or subpoenas
• Enforce our Terms of Service or other agreements
• Protect our rights, property, or safety
• Prevent fraud, security issues, or illegal activities
• Protect the rights and safety of our users and the public

5.4 Business Transfers

If SuperGousto is involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you of any such change and your choices regarding your data.

5.5 With Your Consent

We may share your information for other purposes with your explicit consent or at your direction.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Account Data: Retained while your account is active and for a reasonable period afterward to allow reactivation
• Transaction Records: Retained for accounting and legal compliance purposes (typically 7 years)
• Marketing Data: Retained until you withdraw consent or opt out
• Analytics Data: Aggregated data may be retained indefinitely as it cannot identify you
• Support Communications: Retained for customer service purposes (typically 2-3 years)

When we no longer need your information, we securely delete or anonymize it.

7. Your Rights and Choices

You have certain rights regarding your personal information:

7.1 Access and Portability

• Request a copy of the personal data we hold about you
• Receive your data in a structured, commonly used format (data portability)
• View and update your account information in your settings

7.2 Correction and Deletion

• Correct inaccurate or incomplete information
• Request deletion of your personal data (right to be forgotten)
• Delete your account through your account settings

Note: We may retain certain information as required by law or for legitimate business purposes.

7.3 Objection and Restriction

• Object to processing based on legitimate interests
• Restrict processing in certain circumstances
• Opt out of marketing communications at any time

7.4 Withdraw Consent

Where processing is based on consent, you can withdraw your consent at any time. This does not affect the lawfulness of processing before withdrawal.

7.5 Cookie Management

You can control cookies through your browser settings. See our Cookie Policy for more information.

7.6 How to Exercise Your Rights

To exercise any of these rights, please contact us at privacy@supergousto.com. We will respond to your request within 30 days (or as required by applicable law).

8. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

• Encryption of data in transit and at rest (TLS/SSL)
• Secure authentication mechanisms
• Regular security audits and vulnerability assessments
• Access controls and authentication requirements
• Employee training on data protection and security
• Secure cloud infrastructure with reputable providers
• Regular backups and disaster recovery procedures

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws different from those in your country.

When we transfer data from the EEA, UK, or Switzerland to other countries, we ensure appropriate safeguards are in place:

• Standard Contractual Clauses approved by the EU Commission
• Adequacy decisions by the EU Commission
• Other legally approved transfer mechanisms under applicable law

Our primary data hosting is provided by Supabase, which uses secure cloud infrastructure with appropriate data protection measures.

10. Children's Privacy

Our Service is not intended for children under the age of 16 (or the applicable age of consent in your jurisdiction). We do not knowingly collect personal information from children.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@supergousto.com. We will promptly delete such information from our systems.

11. Third-Party Links

Our Service may contain links to third-party websites, including supermarkets and retailers. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify you by:

• Posting the updated policy on our website
• Updating the "Last updated" date at the top of this policy
• Sending you an email notification (for significant changes)
• Displaying a prominent notice on our Service

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

13. Your California Privacy Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request information about the categories and specific pieces of personal information we have collected
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt out of the sale of personal information (we do not sell personal information)
• Right to Non-Discrimination: Not be discriminated against for exercising your privacy rights

To exercise these rights, contact us at privacy@supergousto.com.

14. Contact Us and Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

14.1 Supervisory Authority

If you are in the EEA, UK, or Switzerland, you have the right to lodge a complaint with your local data protection authority if you believe we have not handled your personal data in accordance with the law.