Privacy Policy

Effective date: August 19, 2026 · Last updated: August 19, 2026

The short version: Dishcover collects your email, the content you save, and basic usage data to run the app. We do not sell your data. You can delete your account and all associated data at any time from within the app.

This Privacy Policy describes how Dishcover ("we," "us," or "our") collects, uses, stores, and shares information about you when you use the Dishcover mobile application, website, and related services (collectively, the "Service"). It also describes your rights and choices regarding your personal information.

By creating an account or using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

1. Information We Collect

We collect information you provide directly, information generated automatically when you use the Service, and in some cases information from third-party platforms you connect to Dishcover.

1.1 Information You Provide

Account information: When you register, we collect your name and email address. If you sign up via a third-party provider (e.g., Google), we receive the basic profile information you authorize that provider to share.
Profile information: Any optional profile details you choose to add (display name, profile photo).
Content you save: Recipes, dishes, videos, meal plans, notes, and any other content you save or create within the app. This data is stored on our servers so it syncs across your devices.
Imported content: When you use our TikTok or other platform import features, we receive the content metadata (title, URL, thumbnail, creator information) from those platforms as authorized by you.
Communications: If you contact us for support or feedback, we retain those communications and your contact details to respond to you and improve the Service.
Payment information: If you subscribe to Dishcover Premium, payments are processed by Apple (App Store) or Google (Play Store). We do not receive or store your full payment card number. We receive a subscription status indicator from the platform to unlock premium features.

1.2 Information Collected Automatically

Usage data: We collect information about how you interact with the Service, including which features you use, content you view or save, searches you perform, and meal plans you create. We use this to personalize your discovery feed and improve the Service.
Device information: We collect your device type, model, operating system version, unique device identifiers, mobile network information, and time zone.
Log data: Our servers automatically record information when you use the Service, including your IP address, browser or app version, pages or screens viewed, timestamps, and error logs. We use this data for security monitoring and debugging.
Crash reports and diagnostics: We collect anonymized crash reports and performance metrics to identify and fix bugs. These reports may include device state at the time of the crash but are designed to exclude personally identifiable information.
Cookies and similar technologies: Our web properties use cookies and similar tracking technologies. See Section 9 (Cookies) for details.

1.3 Information from Third Parties

Third-party sign-in: If you use "Sign in with Google" or another provider, we receive your name, email address, and profile photo from that provider, subject to your consent.
Platform integrations: When you connect a third-party platform (such as TikTok) to import content, we access only the data necessary for that import and as authorized by the platform's API terms and your explicit consent.

1.4 Information We Do NOT Collect

We do not collect your precise GPS location, your device contacts or address book, photos from your camera roll (except what you explicitly upload to your profile), private messages, financial account details, health or fitness data, or biometric identifiers.

2. How We Use Your Information

We use the information we collect for the following purposes:

Purpose	Information Used	Legal Basis (GDPR)
Create and manage your account	Email, name, password hash	Contract performance
Provide the Service (sync saves, meal plans)	Content you save, usage data	Contract performance
Personalize your discovery feed	Saved content, interactions	Legitimate interests
Send transactional emails (password reset, account notices)	Email address	Contract performance
Send optional product update emails	Email address	Consent (opt-out anytime)
Improve and develop new features	Aggregated usage data	Legitimate interests
Detect, investigate, and prevent fraud and abuse	Log data, IP address, device info	Legitimate interests / Legal obligation
Comply with legal obligations	As required by law	Legal obligation
Enforce our Terms of Service	Account info, usage logs	Legitimate interests / Contract

We do not use your personal information to serve you advertising from third parties, and we do not build advertising profiles based on your Dishcover activity.

3. How We Share Your Information

We do not sell your personal information to third parties. We share your data only as described below.

3.1 Service Providers

We share data with third-party vendors who help us operate, improve, and protect the Service. These providers are contractually required to process data only as directed by us and to maintain appropriate security measures. Our service providers include:

Cloud hosting and infrastructure: We host our services on cloud infrastructure providers. Your data is stored on encrypted servers in secure data centers.
Email delivery: We use a transactional email provider to send account-related emails.
Crash reporting and diagnostics: We use a third-party crash reporting tool to receive anonymized crash logs.
Analytics: We may use analytics tools to understand aggregate usage patterns. We configure these tools to minimize data collection and do not share personally identifiable information with analytics providers beyond what is necessary.

3.2 Legal Requirements

We may disclose your information if required to do so by law, court order, or government regulation, or if we believe in good faith that disclosure is necessary to: (a) comply with a legal obligation; (b) protect the rights, property, or safety of Dishcover, our users, or the public; or (c) detect, prevent, or address fraud, security, or technical issues.

3.3 Business Transfers

If Dishcover is involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website before your information becomes subject to a materially different privacy policy, and you will have the opportunity to delete your account before the transfer takes effect if you choose.

3.4 With Your Consent

We may share your information for purposes not described above when we have your explicit consent to do so.

3.5 Aggregated or Anonymized Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you. For example, we may publish aggregate statistics about how users interact with certain features.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service. The following retention periods apply:

Account and profile data: Retained until you delete your account, after which it is permanently deleted within 30 days.
Content you save (recipes, meal plans): Deleted within 30 days of account deletion.
Server log data and IP addresses: Retained for up to 90 days for security monitoring, then deleted or anonymized.
Crash reports: Anonymized upon receipt; retained for up to 12 months for debugging purposes.
Support communications: Retained for up to 3 years to maintain a record of issue resolution, then deleted.
Billing records: Retained for up to 7 years as required by applicable financial regulations.

We may retain certain information for longer periods if required by law or for legitimate business purposes such as fraud prevention.

5. Data Security

We take the security of your personal information seriously and implement a range of technical and organizational measures to protect it:

All data transmitted between your device and our servers is encrypted using TLS (Transport Layer Security).
Passwords are hashed using a strong cryptographic algorithm; we never store plaintext passwords.
Access to production systems and personal data is restricted to authorized personnel on a need-to-know basis.
We regularly review and update our security practices.

Despite these measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security. If you have reason to believe that your interaction with us is no longer secure (for example, if you believe your account has been compromised), please notify us immediately at contactdishcover@gmail.com.

6. Children's Privacy

The Service is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child under 13 has provided us with personal information without your consent, please contact us at contactdishcover@gmail.com. We will investigate and, if confirmed, delete the information promptly.

If you are between 13 and 18 years old, you may use Dishcover only with the involvement and consent of a parent or legal guardian who agrees to our Terms of Service on your behalf.

7. Your Rights and Choices

Depending on where you live, you may have certain rights regarding your personal information. We honor these rights regardless of your location.

7.1 Access

You have the right to request a copy of the personal information we hold about you. We will provide this in a commonly used electronic format.

7.2 Correction

You have the right to request that we correct inaccurate or incomplete information about you. You can update your name and email directly in your account settings. For other corrections, contact us.

7.3 Deletion

You have the right to delete your account and associated personal data. You can do this directly within the Dishcover app (Settings → Account → Delete Account). Upon deletion, your account and personal data will be permanently removed within 30 days. Note that we may retain certain anonymized or aggregate data and records we are legally required to keep.

7.4 Data Portability

You have the right to receive a copy of your personal data in a structured, machine-readable format so you can transfer it to another service. Contact us to make a portability request.

7.5 Objection and Restriction

You may object to or request that we restrict certain processing of your personal data, in particular processing based on our legitimate interests. We will comply unless we have compelling legitimate grounds to continue.

7.6 Opt Out of Marketing Emails

You can unsubscribe from marketing and product update emails at any time by clicking the "Unsubscribe" link in any such email, or by contacting us. You will still receive transactional emails related to your account (e.g., password reset, security notices).

7.7 How to Submit a Request

To exercise any of the rights above, email us at contactdishcover@gmail.com with the subject line "Privacy Request" and a description of your request. We will respond within 30 days. We may ask you to verify your identity before processing your request.

8. Jurisdiction-Specific Rights

California Residents (CCPA / CPRA)

California residents have specific rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected it, our business purpose for collecting it, and the categories of third parties with whom we share it.
Right to Delete: You may request deletion of personal information we have collected from you, subject to certain exceptions.
Right to Correct: You may request correction of inaccurate personal information.
Right to Opt Out of Sale or Sharing: We do not sell or share personal information for cross-context behavioral advertising. No opt-out action is necessary.
Right to Limit Use of Sensitive Personal Information: We do not collect sensitive personal information as defined by CPRA beyond what is necessary to provide the Service.
Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights.

To exercise your California rights, contact us at contactdishcover@gmail.com. You may also designate an authorized agent to make a request on your behalf.

Virginia, Colorado, Connecticut, Texas, and Other U.S. States

Residents of these states may have similar rights to access, correct, delete, and obtain a portable copy of their personal data, and to opt out of certain processing. We extend these rights to all users regardless of location. Contact us to exercise your rights.

EEA, UK, and Switzerland Residents (GDPR)

If you are located in the European Economic Area, United Kingdom, or Switzerland, the following applies:

Data Controller: Dishcover is the data controller for personal information you provide through the Service.
Legal bases for processing: We process your data based on contract performance (to provide the Service you signed up for), legitimate interests (to improve and secure the Service), consent (for marketing emails), and legal obligation (to comply with applicable laws).
International transfers: Your data may be transferred to and processed in countries outside the EEA, including the United States. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.
Right to lodge a complaint: You have the right to lodge a complaint with your local data protection supervisory authority if you believe we have not handled your personal data in accordance with applicable law.
Withdrawal of consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

9. Cookies and Tracking Technologies

Our website (dishcover.food) uses cookies and similar tracking technologies to operate and improve the site.

What are cookies?

Cookies are small text files stored on your device by your browser. They allow us to recognize your device and remember certain information about your visit.

Types of cookies we use

Essential cookies: Required for the website to function (e.g., keeping you logged in, maintaining your session). You cannot opt out of these without disabling the Service.
Analytics cookies: Help us understand how visitors interact with our site (e.g., which pages are most visited). We use this data in aggregate and anonymized form only.
Preference cookies: Remember your settings and choices (e.g., theme preferences).

How to control cookies

You can manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or receive a notification when a new cookie is set. Note that disabling cookies may affect the functionality of parts of the website. Our mobile app does not use browser cookies; it uses app-based session tokens instead.

Do Not Track

Some browsers offer a "Do Not Track" (DNT) signal. We currently do not respond to DNT signals because there is no industry-wide standard for interpreting them. We will update this policy if that changes.

10. Third-Party Links and Services

The Service may allow you to import or link to content from third-party platforms such as TikTok, Instagram, or YouTube. Dishcover is not responsible for the privacy practices of these platforms. When you interact with a third-party platform through Dishcover, that platform's own privacy policy governs the collection and use of your information on their platform. We encourage you to review the privacy policies of any third-party services you use.

Any links to third-party websites from our website or app are provided for your convenience. Visiting those sites is at your own risk, and this Privacy Policy does not apply to them.

11. International Data Transfers

Dishcover is based in the United States. If you are accessing the Service from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. Data protection laws in those countries may differ from the laws of your country.

For users in the EEA, UK, or Switzerland, where we transfer personal data to countries not recognized as providing adequate data protection, we implement appropriate safeguards (such as Standard Contractual Clauses) to protect your information in accordance with applicable law.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other reasons. When we make material changes, we will:

Update the "Last updated" date at the top of this page.
Notify you by email (sent to the address associated with your account) or via a prominent in-app notice.
For material changes, provide at least 14 days' notice before the changes take effect.

Your continued use of the Service after the effective date of the revised policy constitutes your acceptance of the changes. If you do not agree, you should stop using the Service and delete your account before the effective date.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, please contact us:

Dishcover
Email: contactdishcover@gmail.com
Website: dishcover.food

We aim to respond to all privacy-related inquiries within 30 days. For urgent matters related to account security, please include "URGENT" in your email subject line.