Privacy policy

SupperSmart is run by Richard, trading as RichDan Publications, in the UK. We are the “controller” of your personal data under UK data protection law (the UK GDPR and the Data Protection Act 2018). This page explains what we collect, why, and your rights. If you have any questions, email hello@richdanpublications.co.uk.

What we collect

• Your account: your email address and a password. Your password is stored scrambled (hashed), so we can't see it.
• What you put into the app: your settings (budget, number of people, dinners, food preferences), meal plans, pantry items, favourites and how many plans and swaps you've used each week.
• Basic technical data: our hosting and database providers keep short-term logs (such as IP addresses and times of visits) to keep the service secure and working.

• If you buy Premium: your payment is handled by Stripe, who collect your name, card details and billing information directly. We never see or store your card details. Stripe tells us your Stripe customer number, whether your subscription is active, and when it renews or ends.

Why we use it

• To create and run your account, and save your plans and pantry so they're there on any device. The legal basis is contract: we need this to provide the app you signed up for.
• To send emails you need, such as confirming your account or resetting your password. The legal basis is contract.
• To take payment for Premium and switch it on or off. The legal basis is contract.
• To keep payment records for tax purposes. The legal basis is legal obligation.
• To keep the service secure and fix problems. The legal basis is our legitimate interests.

We don't sell your data, show adverts, or use your data for marketing without asking you first.

Cookies and storage

SupperSmart doesn't use advertising or tracking cookies. It stores two things in your browser: your sign-in session, so you stay signed in, and a copy of your plan and pantry, so the app loads quickly. Both are strictly necessary for the app to work, so we don't need to ask for consent.

To see how many people visit and which pages are popular, we use Cloudflare Web Analytics. It counts visits without cookies, doesn't store your IP address, and doesn't follow you across other websites. The legal basis is our legitimate interests in understanding how SupperSmart is used.

Who we share it with

We use a small number of trusted providers to run SupperSmart. They only use your data to provide their service to us:

• Supabase: our database and sign-in provider, which stores your account and app data.
• Cloudflare: hosts the website and counts visits (without cookies).
• Stripe: takes payments for Premium. Stripe is also responsible for the payment data it collects; see Stripe's privacy policy.
• Our email provider: sends account emails such as sign-up confirmations and password resets.

Some of these providers may process data outside the UK. Where they do, they use legal safeguards approved under UK law, such as the UK International Data Transfer Addendum or the UK–US data bridge.

How long we keep it

We keep your account and app data for as long as you have an account. If you ask us to delete your account, we delete your data within 30 days. If an account isn't used for 2 years, we may delete it after emailing you first. If you've paid for Premium, we and Stripe keep payment records for 6 years, because UK tax law requires it.

Your rights

You have the right to:

• ask for a copy of your data
• ask us to correct it
• ask us to delete your account and data
• object to how we use it, or ask us to limit it
• ask for your data in a format you can take elsewhere

To do any of these, email hello@richdanpublications.co.uk from the email address on your account. We'll reply within one month. You can also clear your settings, plan and pantry yourself at any time in Settings → Start again.

If you're unhappy with how we've handled your data, please tell us first. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Children

SupperSmart is for adults planning household meals. It isn't aimed at children under 16.

Changes

If we change this policy, we'll update the date at the top. If the change is significant, we'll tell you in the app or by email.