Privacy policy
Last updated 27 August 2026
This Privacy Notice for Hopper Labs, LLC ("we," "us," or "our") describes how and why we access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:
- Visit our website at https://tryspoonfed.com, or any website of ours that links to this Privacy Notice
- Download and use our mobile application (Spoonfed), or any other application of ours that links to this Privacy Notice
- Engage with us in other related ways, including any marketing or events
Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you have questions or concerns, contact us at support@spoonfed.app.
Summary of key points
This summary gives you the key points. The full notice follows, and the table of contents below links to each section.
What personal information do we process? We process the information you give us when you create an account and set up your cooking profile — your name and email address, your diet, your allergies, ingredients you would rather avoid, how many people you cook for, and the plans, recipes and grocery lists you build. We also process limited technical information about the device you use.
Do we process any sensitive personal information? Yes, in a limited way. The allergies and dietary restrictions you tell us about may be treated as health-related information in some jurisdictions. We process that information for one reason only: to write recipes and meal plans that are safe for you to eat. We do not process any other category of sensitive personal information, and we do not process your racial or ethnic origin, sexual orientation, religious beliefs, biometrics, or precise location.
Do we collect information from third parties? Only what is necessary to run the Services: profile details from the sign-in provider you choose, and subscription status from our subscription provider. We do not buy personal information from data brokers, marketing partners, or public databases.
Do we sell your personal information? No. We do not sell your personal information, and we do not share it for targeted or interest-based advertising. Spoonfed does not serve advertisements.
How do we process your information? To provide, improve, and administer the Services, to communicate with you, for security and fraud prevention, and to comply with law. We process your information only when we have a valid legal reason to do so.
What are your rights? Depending on where you live, applicable privacy law may give you rights over your personal information, including the right to access it, correct it, and delete it. You can delete your account and its content from within the app at any time.
Table of contents
- 1. What information do we collect?
- 2. How do we process your information?
- 3. What legal bases do we rely on to process your information?
- 4. When and with whom do we share your personal information?
- 5. Do we use cookies and other tracking technologies?
- 6. Do we offer artificial intelligence-based products?
- 7. How do we handle your social logins?
- 8. Is your information transferred internationally?
- 9. How long do we keep your information?
- 10. How do we keep your information safe?
- 11. Do we collect information from minors?
- 12. What are your privacy rights?
- 13. Controls for do-not-track features
- 14. Do United States residents have specific privacy rights?
- 15. Account and data deletion
- 16. Advertising disclosure
- 17. Do we make updates to this notice?
- 18. How can you contact us about this notice?
- 19. How can you review, update, or delete the data we collect from you?
1. What information do we collect?
Personal information you disclose to us
In short: we collect the personal information that you provide to us.
We collect personal information that you voluntarily provide when you register for the Services, set up your cooking profile, use the Services, or contact us. What we collect depends on how you interact with us and which features you use, and may include:
- Names
- Email addresses
- Contact preferences
- Authentication data
- Your diet type, allergies, and ingredients you have asked us to avoid
- The number of people you cook for, your household membership, your time zone, and your preferred measurement system
- The meal plans, recipes, grocery lists, favourites, and non-cooking days you create or save
- The messages you send to Sage, our in-app cooking assistant
- The contents of any support request you send us, including your name, email address, and message
There are no passwords in Spoonfed. You sign in either with a one-time six-digit code sent to your email address, or with Sign in with Apple or Sign in with Google. We never ask for, collect, or store a password.
Sensitive information. The allergies and dietary restrictions you give us may be considered health-related information in some jurisdictions. We process this information solely to generate meal plans and recipes that are safe for you, and to run the cooking-safety and allergen checks described in this notice. We do not use it for advertising, we do not sell it, and we do not share it except with the service providers listed in section 4 who need it to deliver the feature you asked for.
Building a plan without an account. You can build a week of meals on our website before you create an account. When you do, the plan and the preferences you entered are stored against an anonymous record so that the plan still exists when you come back. If you go on to create an account, that record becomes your account. If you do not, it is deleted on the schedule described in section 9.
Social media login data. If you register using Sign in with Apple or Sign in with Google, we collect certain profile information from that provider, as described in section 7.
Application data. If you use our mobile application, we may also collect:
- Device data. A device identifier, the platform you are on, the app version you are running, and when you last used the app. We collect this so that push notifications can be targeted correctly, so an unsupported app version can be told to update, and so support can see what you are running when you write in.
- Push notifications. We may ask to send you push notifications about your account or certain features of the app. You can turn these off at any time in your device settings.
We do not request access to your location, contacts, calendar, microphone, or email mailbox.
All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to it.
Information automatically collected
In short: some information — such as your IP address and browser and device characteristics — is collected automatically when you visit our Services.
We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity, but may include device and usage information such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, information about how and when you use our Services, and other technical information. It is needed primarily to maintain the security and operation of our Services and for our internal analytics and reporting.
- Log and usage data. Service-related, diagnostic, usage, and performance information our servers automatically record in log files. This may include your IP address, device information, browser type and settings, information about your activity in the Services, and error reports.
- Device data. Information about the computer, phone, tablet, or other device you use to access the Services, which may include your IP address, device and application identification numbers, browser type, hardware model, internet service provider or mobile carrier, operating system, and system configuration information.
We do not collect GPS or other precise location data, and we do not ask your device for permission to do so.
Information collected from other sources
In short: we collect limited information from the sign-in and subscription providers you choose.
We receive your name, email address, and a provider account identifier from Apple or Google if you choose to sign in that way, and we receive subscription status information — plan type, billing period, renewal date, and transaction history — from RevenueCat, our subscription management provider. We do not obtain personal information about you from data brokers, joint marketing partners, affiliate programs, or public databases.
2. How do we process your information?
In short: we process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.
We process your personal information for the following purposes:
- To create and manage your account. So you can create an account, sign in with a one-time code or a third-party sign-in provider, and keep your account in working order.
- To provide and operate core meal planning features. To build weekly meal plans around your diet, allergies, disliked ingredients, and household size; to save and organise your recipes and favourites; to build grocery lists from your plans; and to keep all of it in one place across your devices.
- To generate recipes, plans, and recipe images using AI. Your dietary constraints, preferences, plan details, and the messages you send to Sage are sent to our AI service providers so that they can generate meal plans, recipes, recipe images, and answers. See section 6.
- To run our cooking-safety and allergen checks. Every generated recipe is checked against safe cooking practice before it is shown to you, and ingredients that may hide an allergen are flagged. Doing this requires processing your stated allergies and diet on every request.
- To look up recipes in a third-party recipe database. We may send recipe and ingredient search terms to Spoonacular to find an existing recipe before generating a new one. We do not send your name, email address, or account identifier with those searches.
- To hand your grocery list to Instacart. If you choose to send a grocery list to Instacart, we send the contents of that list and a reference identifier to Instacart to create a shopping link for you. See section 4.
- To enable household sharing. To let the members of a household share meal plans, grocery lists, and favourites, and to let one Pro subscription cover everyone in it.
- To send you push notifications and service emails. To send sign-in codes, account notices, plan reminders, and other messages about your account or your plans.
- To process payments and manage your subscription. Payments are processed by the Apple App Store or Google Play Store. We do not collect or store your card or payment method details. We receive subscription status from RevenueCat in order to manage your access to Pro features.
- To provide customer support and respond to your inquiries. To answer your questions, troubleshoot issues, and resolve complaints.
- To identify usage trends and improve the Services. To understand how the Services are used so we can make them better.
- To send you marketing and promotional communications, where this is in accordance with your marketing preferences. You can opt out at any time.
- To request feedback about your use of our Services.
- To protect our Services, prevent fraud and abuse, and comply with our legal obligations.
3. What legal bases do we rely on to process your information?
In short: we only process your personal information when we believe it is necessary and we have a valid legal reason to do so under applicable law.
If you are located in the EU or UK, this section applies to you.
The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on to process your personal information. We may rely on the following:
- Consent. We process your information where you have given us permission to use it for a specific purpose. Because your allergy and dietary information may be treated as health-related data, we rely on your explicit consent to process it, which you give by entering it during onboarding or in your profile. You can withdraw your consent at any time by removing that information from your profile or by deleting your account.
- Performance of a contract. We process your information to deliver the service you signed up for — building meal plans and grocery lists, saving your recipes, and managing your subscription.
- Legitimate interests. We may process your information where it is reasonably necessary to achieve our legitimate business interests and those interests do not outweigh your rights and freedoms — for example, to analyse how the Services are used so we can improve them, to keep you informed about your plans and account, to prevent fraud and abuse, and to respond to support requests and identify recurring problems.
- Legal obligations. We may process your information where necessary to comply with our legal obligations, to cooperate with a law enforcement body or regulatory agency, or to exercise or defend our legal rights.
- Vital interests. We may process your information where necessary to protect your vital interests or those of a third party.
If you are located in Canada, this section applies to you.
We may process your information where you have given us express consent, or in situations where your permission can be inferred (implied consent). You can withdraw your consent at any time. In some exceptional cases we may be legally permitted to process your information without your consent — for example, for fraud detection and prevention, for investigations, where disclosure is required to comply with a subpoena, warrant, or court order, or where the information is publicly available and specified by the regulations.
4. When and with whom do we share your personal information?
In short: we share information with the service providers listed below, and in the specific situations described in this section. We do not sell your personal information.
We may share your data with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf and require access to that information to do so. We have contracts in place designed to safeguard your personal information: they cannot do anything with it unless we have instructed them to, and they commit to protecting it and retaining it only for the period we instruct.
The third parties we share personal information with are:
- AI service providers — Anthropic and OpenAI. Receive your dietary constraints, preferences, plan and recipe details, and the messages you send to Sage, in order to generate meal plans, recipes, recipe images, and responses.
- Sign-in providers — Apple and Google. Authenticate you when you choose Sign in with Apple or Sign in with Google.
- Subscription management — RevenueCat. Receives an account identifier and processes subscription status. Payment itself is handled by the Apple App Store or Google Play Store.
- Push notifications — OneSignal. Receives device tokens and an account identifier in order to deliver notifications.
- Product analytics — PostHog. Receives usage and device data for our internal analytics only.
- Email delivery — Postmark and Amazon Web Services. Deliver sign-in codes, account notices, and other transactional email.
- Hosting and storage — Amazon Web Services. Hosts our application and stores recipe images and other files.
- Recipe lookup — Spoonacular. Receives recipe and ingredient search terms. We do not send identifying information about you with those searches.
- Grocery ordering — Instacart. If you choose to send a grocery list to Instacart, we send the contents of that list and a reference identifier so a shopping link can be created. Once you follow that link, your activity on Instacart is governed by Instacart's own terms and privacy policy, not this notice.
We may also need to share your personal information in the following situations:
- Other members of your household. If you join or create a household, your name and the meal plans, grocery lists, and favourites belonging to that household are visible to every other member of it. Every member of a household has the same authority over its plans and lists.
- Business transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
- Legal requirements. We may disclose your information where required by law, regulation, subpoena, court order, or government request, or where necessary to protect our rights, your safety, or the safety of others.
5. Do we use cookies and other tracking technologies?
In short: we use cookies and similar technologies to keep you signed in, keep the Services secure, and understand how they are used.
We use cookies and similar technologies to gather information when you interact with our Services. These help us keep you signed in, maintain the security of our Services and your account, prevent crashes, fix bugs, save your preferences, and support basic site functions. We also use them for product analytics through PostHog so we can understand how the Services are used and improve them.
We do not permit third parties to use tracking technologies on our Services for advertising, and we do not use them for targeted advertising, interest-based advertising, or retargeting. Most browsers let you refuse or delete cookies through their settings; if you do, some parts of the Services may not work as intended.
6. Do we offer artificial intelligence-based products?
In short: yes. Meal plans, recipes, recipe images, and Sage are powered by artificial intelligence.
As part of our Services we offer products, features, and tools powered by artificial intelligence, machine learning, or similar technologies (collectively, "AI Products"). The terms in this Privacy Notice govern your use of the AI Products within our Services.
Use of AI technologies.
We provide the AI Products through third-party service providers ("AI Service Providers"), namely Anthropic and OpenAI. Your input, output, and the personal information described in this notice will be shared with and processed by these AI Service Providers to enable your use of our AI Products. You must not use the AI Products in any way that violates the terms or policies of any AI Service Provider.
Our AI Products are designed for the following functions:
- Generating weekly meal plans built around your diet, allergies, and household
- Generating and rewriting recipes, including scaling them and converting their measurements
- Generating recipe images
- Normalising and consolidating grocery list items
- Sage, our in-app cooking assistant, which answers questions and changes your plans on your behalf
How we process your data using AI.
All personal information processed using our AI Products is handled in line with this Privacy Notice and our agreements with our AI Service Providers. We do not use your personal information to train generalised artificial intelligence or machine learning models, and our agreements with our AI Service Providers do not permit them to train their models on it.
How to opt out.
Generating meal plans and recipes is the core function of the Services and cannot be provided without AI processing. If you do not wish your information to be processed this way, you should not use the Services, and you can delete your account at any time from your account settings.
7. How do we handle your social logins?
In short: if you choose to sign in using Apple or Google, we receive limited profile information about you.
Our Services let you register and sign in using Sign in with Apple or Sign in with Google. Where you choose to do this, we receive certain profile information from that provider, typically your name, your email address (or a private relay address, if you choose to hide it), and an account identifier. We use that information only for the purposes described in this Privacy Notice.
We do not control, and are not responsible for, other uses of your personal information by your sign-in provider. We recommend that you review their privacy notice to understand how they collect, use, and share your personal information, and how you can set your privacy preferences.
8. Is your information transferred internationally?
In short: yes. Our servers are in the United States, and your information is processed there.
Spoonfed is operated by Hopper Labs, LLC, based in the United States, and our servers are located in the United States. If you access or use our Services from outside the United States, your personal information will be transferred to, stored in, and processed in the United States, and may also be processed in the facilities of the third parties listed in section 4. The data protection and privacy laws of the United States may differ from those of your country of residence.
Transfers from the European Economic Area, United Kingdom, and Switzerland. If you are located in the European Economic Area (EEA), the United Kingdom (UK), or Switzerland, we rely on the following mechanisms to transfer your personal data outside your home jurisdiction: Standard Contractual Clauses approved by the European Commission or the UK Information Commissioner's Office, as applicable; your explicit consent, where applicable, after you have been informed of the possible risks; and, where the transfer is necessary to perform a contract with you, that necessity.
Data protection safeguards. Regardless of where your data is processed, we apply the same technical and organisational security measures described in this Privacy Notice. Where required by applicable law, we ensure appropriate safeguards are in place before transferring personal data to a country that has not been deemed to provide an adequate level of data protection.
Your rights. If you are located in the EEA, UK, or Switzerland, you retain all the rights described in section 12 regardless of where your data is processed. You may also lodge a complaint with your local data protection authority.
9. How long do we keep your information?
In short: we keep your information for as long as necessary to fulfil the purposes outlined in this Privacy Notice, unless otherwise required by law.
We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). No purpose in this notice will require us to keep your personal information for longer than the period in which you have an account with us.
A plan built on our website without an account is stored against an anonymous record. If that record is not claimed by creating an account, it and the plan attached to it are deleted once they are no longer needed to show you the plan you built.
When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymise it, or, if that is not possible — for example because it has been stored in backup archives — we will securely store it and isolate it from any further processing until deletion is possible.
10. How do we keep your information safe?
In short: we aim to protect your personal information through a system of organisational and technical security measures.
We have implemented appropriate and reasonable technical and organisational security measures designed to protect the security of any personal information we process. However, despite our safeguards, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorised third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.
11. Do we collect information from minors?
In short: we do not knowingly collect data from or market to children under 18 years of age.
We do not knowingly collect, solicit data from, or market to children under 18 years of age or the equivalent age as specified by law in your jurisdiction, nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 18 or the equivalent age as specified by law in your jurisdiction, or that you are the parent or guardian of such a minor and consent to that minor's use of the Services. If we learn that personal information from users under 18 has been collected, we will deactivate the account and take reasonable measures to promptly delete that data from our records. If you become aware of any data we may have collected from children under 18, please contact us at support@spoonfed.app.
12. What are your privacy rights?
In short: depending on your state or country of residence, you have rights that allow you greater access to and control over your personal information. You may review, change, or delete your account at any time.
In some regions — including the EEA, UK, Switzerland, and Canada — you have certain rights under applicable data protection laws. These may include the right (i) to request access to and obtain a copy of your personal information; (ii) to request rectification or erasure; (iii) to restrict the processing of your personal information; (iv) where applicable, to data portability; and (v) not to be subject to automated decision-making. In certain circumstances you may also have the right to object to the processing of your personal information. You can make such a request by contacting us using the details in section 18.
We will consider and act upon any request in accordance with applicable data protection laws.
If you are located in the EEA or UK and you believe we are unlawfully processing your personal information, you also have the right to complain to your Member State data protection authority or the UK Information Commissioner's Office. If you are located in Switzerland, you may contact the Federal Data Protection and Information Commissioner.
Withdrawing your consent. Where we rely on your consent to process your personal information, you have the right to withdraw that consent at any time. You can remove your allergy and dietary information from your profile, or delete your account entirely, at any time from your account settings, or contact us using the details in section 18. Withdrawing your consent will not affect the lawfulness of processing carried out before its withdrawal, nor will it affect processing conducted in reliance on lawful grounds other than consent. Please note that we cannot generate recipes that account for your allergies if you remove that information.
Opting out of marketing and promotional communications. You can unsubscribe from our marketing and promotional communications at any time by clicking the unsubscribe link in the emails we send, or by contacting us. You will then be removed from our marketing lists. We may still send you service-related messages that are necessary for the administration and use of your account, such as sign-in codes, or to respond to service requests.
Account information. If you would like to review or change the information in your account or delete your account, you can do so at any time in the app under Settings. Upon deletion we will delete your account and its content from our active databases as described in section 15. However, we may retain some information to prevent fraud, troubleshoot problems, assist with investigations, enforce our legal terms, and/or comply with applicable legal requirements.
If you have questions or comments about your privacy rights, email us at support@spoonfed.app.
13. Controls for do-not-track features
Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognising and implementing DNT signals has been finalised. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this Privacy Notice.
California law requires us to let you know how we respond to web browser DNT signals. Because there is currently no industry or legal standard for recognising or honouring DNT signals, we do not respond to them at this time.
14. Do United States residents have specific privacy rights?
In short: if you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have the right to request access to and receive details about the personal information we maintain about you and how we have processed it, correct inaccuracies, get a copy of, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law.
Categories of personal information we collect
The table below shows the categories of personal information we have collected in the past twelve months. For a comprehensive inventory of the personal information we process, please refer to section 1.
- A. Identifiers — contact details such as real name, unique personal identifier, online identifier, IP address, email address, and account name. Collected: YES
- B. Personal information as defined in the California Customer Records statute — name and contact information. Collected: YES
- C. Protected classification characteristics under state or federal law — gender, age, date of birth, race and ethnicity, national origin, marital status, and other demographic data. Collected: NO
- D. Commercial information — transaction information, purchase history, financial details, and payment information. Collected: NO
- E. Biometric information — fingerprints and voiceprints. Collected: NO
- F. Internet or other similar network activity — browsing history, search history, online behaviour, and interactions with our applications and systems. Collected: YES
- G. Geolocation data — device location. Collected: NO
- H. Audio, electronic, sensory, or similar information — images and audio, video or call recordings. Collected: NO
- I. Professional or employment-related information. Collected: NO
- J. Education information. Collected: NO
- K. Inferences drawn from collected personal information — for example, the taste preferences we learn from the recipes you swap, rate, or remove ingredients from. Collected: YES
- L. Sensitive personal information — the allergies and dietary restrictions you tell us about, which may be treated as health-related information. Collected: YES
We use and retain the collected personal information as needed to provide the Services, and for as long as you have an account with us.
We collect and use the sensitive personal information described above solely for the purpose of performing the Services you have asked for — generating meal plans and recipes that are safe for you to eat. We do not use or disclose it for the purpose of inferring characteristics about you, and we do not use it for advertising. California residents have the right to limit the use and disclosure of their sensitive personal information; you can exercise that right by removing that information from your profile or by contacting us.
We may also collect other personal information outside of these categories where you interact with us in the context of receiving help through our support channels, participating in customer surveys, and the delivery of our Services.
Will your information be shared with anyone else?
We may disclose your personal information to our service providers pursuant to a written contract between us and each service provider. The categories of third parties to whom we disclose personal information for a business or commercial purpose are described in section 4.
We may use your personal information for our own business purposes, such as undertaking internal research for technological development and demonstration. This is not considered "selling" of your personal information.
We have not sold or shared any personal information to third parties for a business or commercial purpose in the preceding twelve months, and we do not share personal information for cross-context behavioural or targeted advertising.
Your rights
You have rights under certain US state data protection laws. These rights are not absolute, and in certain cases we may decline your request as permitted by law. They include:
- Right to know whether or not we are processing your personal data
- Right to access your personal data
- Right to correct inaccuracies in your personal data
- Right to request the deletion of your personal data
- Right to obtain a copy of the personal data you previously shared with us
- Right to non-discrimination for exercising your rights
- Right to opt out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects
- Right to limit use and disclosure of sensitive personal data (as permitted by applicable law, including the privacy law in California)
Depending upon the state where you live, you may also have the following rights:
- Right to access the categories of personal data being processed (as permitted by applicable law, including the privacy law in Minnesota)
- Right to obtain a list of the categories of third parties to which we have disclosed personal data (as permitted by applicable law, including the privacy law in California, Delaware, and Maryland)
- Right to obtain a list of specific third parties to which we have disclosed personal data (as permitted by applicable law, including the privacy law in Minnesota and Oregon)
- Right to review, understand, question, and, depending on where you live, correct how personal data has been profiled (as permitted by applicable law, including the privacy law in Connecticut and Minnesota)
How to exercise your rights
To exercise these rights, email us at support@spoonfed.app, write to us through our support page, or use the contact details at the bottom of this document. Under certain US state data protection laws you can designate an authorised agent to make a request on your behalf. We may deny a request from an authorised agent who does not submit proof that they have been validly authorised to act on your behalf.
Request verification
Upon receiving your request, we will need to verify your identity to determine that you are the same person about whom we have information in our system. We will only use personal information provided in your request to verify your identity or authority to make the request. If we cannot verify your identity from the information we already hold, we may ask you to provide additional information for the purposes of verification and for security or fraud prevention.
Appeals
Under certain US state data protection laws, if we decline to take action regarding your request, you may appeal our decision by emailing us at support@spoonfed.app. We will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decision. If your appeal is denied, you may submit a complaint to your state attorney general.
California "Shine The Light" law
California Civil Code Section 1798.83, also known as the "Shine The Light" law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes, and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit it in writing using the contact details in section 18.
15. Account and data deletion
You may delete your Spoonfed account and associated personal data at any time.
In-app deletion. You can delete your account directly within the Spoonfed app under Settings. You will be asked to confirm before deletion is processed.
Email request. You may also request account deletion by emailing us at support@spoonfed.app from the email address associated with your account. We will process your request within 30 days of receipt.
What happens when you delete your account. When you request account deletion, we will: (a) permanently delete your account credentials and profile information, including your diet, allergies, and disliked ingredients; (b) permanently delete your meal plans, saved recipes, grocery lists, favourites, and preferences; (c) delete your conversations with Sage; (d) revoke any connected third-party sign-in; and (e) remove you from your household.
Household data. If you were a member of a household created by someone else, the meal plans and grocery lists belonging to that household remain available to its remaining members. Your name and profile information will no longer be associated with them. If you were the only member of a household, the household and its content are deleted with your account.
Data we may retain after deletion. In limited circumstances we may retain certain information after your account is deleted: (a) data required to comply with legal or regulatory obligations, such as tax, accounting, or financial reporting requirements; (b) data necessary to resolve pending disputes, enforce our terms, or prevent fraud; and (c) anonymised or aggregated data that can no longer be used to identify you, which we may retain for analytics and service improvement. Backup copies of your data may persist in our systems for up to 30 days after deletion before being permanently removed.
Third-party data. Deleting your Spoonfed account does not delete data independently collected or stored by third-party services you accessed through Spoonfed, such as Apple, Google, or Instacart. You may need to contact those services separately. For Google, you can manage app permissions at https://myaccount.google.com/permissions.
Subscription cancellation. Deleting your account does not automatically cancel an active subscription. To avoid future charges, cancel your subscription through the Apple App Store or Google Play Store before requesting account deletion. Any unused portion of a subscription period will not be refunded upon account deletion unless otherwise required by applicable law.
16. Advertising disclosure
Spoonfed does not serve advertisements and does not use cookies, tracking technologies, or personal information for the purpose of targeted advertising, interest-based advertising, or retargeting. The tracking technologies used by our Services are limited to authentication, security, and internal product analytics.
17. Do we make updates to this notice?
In short: yes, we will update this notice as necessary to stay compliant with relevant laws.
We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Last updated" date at the top of this Privacy Notice. If we make material changes, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Notice frequently.
18. How can you contact us about this notice?
If you have questions or comments about this notice, you may email us at support@spoonfed.app, write to us through our support page, or contact us by post at:
Hopper Labs, LLC
5008 111th Terrace E
Parrish, FL 34219
United States
19. How can you review, update, or delete the data we collect from you?
Based on the applicable laws of your country or state of residence, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law. To request to review, update, or delete your personal information, email us at support@spoonfed.app or write to us through our support page.
Questions about this policy? Get in touch.