Privacy Policy

1. Introduction

Welcome to BiteBuddy ("we", "our", or "us"). We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This Privacy Policy explains how we collect, use, and protect your personal information when you use our website.

By using BiteBuddy, you agree to the collection and use of information in accordance with this policy.

2. Data Controller

The data controller responsible for your personal data is BiteBuddy.

3. Information We Collect

3.1 Information You Provide

When you use certain features of our website, you may provide us with:

• Email address (for account registration and newsletter subscriptions)
• Account information (username, preferences)
• Recipes you save or create using our AI generator
• Any other information you choose to provide

3.2 Automatically Collected Information

When you visit our website, we may automatically collect:

• Device information (type, operating system, browser type)
• Usage data (pages visited, time spent, navigation patterns)
• IP address (anonymized for EU users)
• Cookie data (see Cookie Policy section below)

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to improve your experience and understand how our website is used.

4.1 Types of Cookies We Use

4.2 Managing Your Cookie Preferences

When you first visit our website, you'll see a cookie consent banner with two options:

• Accept All: Allows all cookies including analytics and advertising
• Essential Only: Only allows necessary cookies for site functionality

You can change your cookie preferences at any time by clearing your browser's site data and revisiting our website.

5. Third-Party Services

5.1 Google Analytics

We use Google Analytics to analyze website usage. Google Analytics uses cookies to collect information about how visitors use our site. This information is aggregated and anonymous. Google may use this data in accordance with their Privacy Policy.

Learn more: Google Privacy Policy

5.2 Google AdSense

We use Google AdSense to display advertisements on our website. Google may use cookies and similar technologies to:

• Personalize ads based on your interests (if you consent)
• Measure ad performance and effectiveness
• Show you relevant advertisements
• Prevent fraud and abuse

Google is a data controller for any personal data collected through their services. They process data in accordance with their own privacy policy.

Learn more: How Google uses data when you use our partners' sites or apps

5.3 Affiliate Links

We may include affiliate links to retailers (such as Tesco, Asda, Sainsbury's) where you can purchase ingredients. When you click these links and make a purchase, we may earn a commission at no extra cost to you. We track these clicks anonymously to measure effectiveness.

6. How We Use Your Information

We use the information we collect for the following purposes:

• To provide and maintain our website and services
• To improve and personalize your experience
• To send you newsletters and updates (if you've subscribed)
• To analyze website usage and trends
• To detect, prevent, and address technical issues
• To display relevant advertisements (if you consent)
• To comply with legal obligations

7. Legal Basis for Processing (GDPR)

Under GDPR, we process your personal data based on the following legal grounds:

• Consent: For analytics and advertising cookies (you can withdraw consent at any time)
• Legitimate Interests: For essential cookies, security, and fraud prevention
• Contract: To provide services you've requested (e.g., account features)
• Legal Obligation: To comply with applicable laws and regulations

8. Data Sharing and Disclosure

We do not sell your personal information. We may share your information with:

• Service Providers: Google (Analytics, AdSense), Supabase (database), Vercel (hosting)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

All service providers are required to maintain appropriate security measures and only process your data according to our instructions.

9. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy. Analytics data is typically retained for 26 months. Account data is retained until you request deletion. You can request deletion of your data at any time by contacting us.

10. Your Rights Under GDPR

If you are in the European Economic Area (EEA) or UK, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for analytics/advertising at any time
• Right to Lodge a Complaint: File a complaint with your local data protection authority

To exercise any of these rights, please contact us using the details below.

11. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

12. International Data Transfers

Your information may be transferred to and processed in countries outside the EEA/UK. When we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

13. Children's Privacy

Our website is not intended for children under 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Significant changes will be prominently announced on our website.

15. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

We aim to respond to all requests within 30 days.