Privacy Policy

At DeenDiet.com, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. Please read this policy carefully. If you do not agree with the terms of this privacy policy, please do not access the service.

1. Information We Collect

Account Information

When you register for an account, we collect:

• Name and email address (via Google OAuth)
• Profile picture (if provided by your Google account)
• Account preferences and settings

Usage Data

We automatically collect information about your interaction with our service:

• Recipe generation history and preferences
• Saved recipes and collections
• Device information and browser type
• IP address and general location data
• Usage patterns and feature interactions

Payment Information

Payment processing is handled securely by Stripe. We do not store your credit card information. We receive only limited payment information such as the last four digits of your card and billing details necessary for subscription management.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Maintain your session and keep you logged in
• Remember your preferences and settings
• Analyse service usage and improve performance
• Provide personalised content and recommendations

Google Analytics

We use Google Analytics to understand how visitors use our site and to improve our service. Google Analytics collects information such as:

• Page views and navigation patterns
• Events (such as recipe generation and interactions)
• Device information (browser type, operating system, screen resolution)
• General location data (country, city - not precise location)
• Traffic sources (how you found our website)

Our Google Analytics implementation is privacy-focused:

• IP addresses are anonymised
• We respect browser Do Not Track (DNT) settings
• We do not collect personally identifiable information (PII)
• Cookies use modern security standards (SameSite=None;Secure)

You can opt out of Google Analytics tracking by:

• Enabling Do Not Track (DNT) in your browser settings
• Installing the Google Analytics Opt-out Browser Add-on
• Using browser extensions that block analytics scripts

For more information about how Google collects and processes data, please review Google's Privacy Policy.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our service
• Process your subscription and manage your account
• Generate personalised recipe recommendations
• Send you service-related communications and updates
• Respond to your enquiries and provide customer support
• Monitor and analyse usage patterns to improve our service
• Detect, prevent, and address technical issues or security vulnerabilities
• Comply with legal obligations and enforce our terms

2A. Email Communications

Types of Emails We Send

We may use your email address to send you the following types of communications:

• Essential Service Emails: Account verification, password resets, subscription confirmations, billing notifications, and critical service updates (you cannot opt out of these)
• Product Updates: Information about new features, improvements, and changes to our service
• Recipe Newsletters: Curated recipe collections, seasonal recipe ideas, and cooking tips
• Feature Announcements: Updates about new functionality and enhancements to DeenDiet.com
• Educational Content: Halal cooking guides, ingredient information, and Islamic dietary practices
• Usage Notifications: Monthly recipe generation limits, subscription reminders, and account activity alerts

Email Frequency

We respect your inbox and will not overwhelm you with emails. You can expect:

• Essential service emails only when necessary
• Feature updates and newsletters at most once per week
• The ability to control which types of emails you receive through your account preferences

Managing Email Preferences

You have full control over the emails you receive from us:

• Update your email preferences in your account settings at any time
• Unsubscribe from marketing emails using the link at the bottom of any promotional email
• Contact us to completely opt out of all non-essential communications
• Essential service emails (such as billing notifications and security alerts) cannot be disabled as they are necessary for account operation

Your Email Privacy

We are committed to protecting your email privacy:

• We will never sell, rent, or share your email address with third parties for their marketing purposes
• Your email is used exclusively for DeenDiet.com communications
• We do not use your email for advertising purposes outside of our own service
• We implement security measures to protect your email address from unauthorised access

3. Data Sharing and Disclosure

We will never sell, trade, rent, or share your personal information (including your email address) with third parties for their marketing or advertising purposes. We may share your information only in the following limited circumstances:

Service Providers

We may share your information with trusted third-party service providers who assist us in operating our service:

• Supabase (database and authentication services)
• Stripe (payment processing)
• Anthropic (AI recipe generation)
• OpenAI (AI image creation)
• Vercel (hosting and infrastructure)

These service providers are bound by confidentiality agreements and are only permitted to use your information to perform services on our behalf.

Legal Requirements

We may disclose your information if required by law or in response to valid requests by public authorities, including to meet national security or law enforcement requirements.

Business Transfers

If DeenDiet.com is involved in a merger, acquisition, or asset sale, your personal information may be transferred. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

4. Data Security

We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using SSL/TLS
• Secure authentication via Google OAuth
• Regular security assessments and updates
• Access controls and authentication requirements
• Secure backup and recovery procedures

However, no method of transmission over the internet or electronic storage is 100% secure. Whilst we strive to protect your personal information, we cannot guarantee its absolute security.

5. Your Rights Under UK GDPR

Under the UK General Data Protection Regulation (UK GDPR), you have the following rights:

• Right of Access: Request a copy of the personal information we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete information
• Right to Erasure: Request deletion of your personal information ("right to be forgotten")
• Right to Restriction: Request restriction of processing in certain circumstances
• Right to Data Portability: Receive your data in a structured, commonly used format
• Right to Object: Object to processing of your personal information
• Right to Withdraw Consent: Withdraw consent for data processing at any time

To exercise any of these rights, please contact us through our contact page. We will respond to your request within one month.

6. Data Retention

We retain your personal information for as long as necessary to provide our service and fulfil the purposes outlined in this privacy policy. When you delete your account, we will delete or anonymise your personal information, except where we are required to retain it for legal or legitimate business purposes.

7. International Data Transfers

Your information may be transferred to and processed in countries other than the United Kingdom. We ensure that such transfers comply with UK GDPR requirements through appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

8. Children's Privacy

Our service is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us immediately so we can delete such information.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us through our contact page.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection authority, if you believe we have not handled your personal information appropriately.