Privacy Policy
This Privacy Policy explains how Pomegranate ("we," "our," "us") collects, uses, and protects your information when you use our mobile application (the "App").
1. Information We Collect
Account Information
When you create an account, we collect the information required to authenticate you, which may include your email address and, if you sign in with Google, basic profile information (name, email, profile photo) provided by Google.
Recipe & User Content
We store the recipes, notes, tags, meal plans, and shopping lists you create or import within the App.
Photos
If you upload or scan photos (e.g., of recipes or dishes), we store these images to display them within your account.
AI Feature Data
If you use AI-powered features (e.g., "Make It Healthier" ingredient suggestions), the relevant recipe/ingredient text is sent to our AI processing provider (OpenAI) to generate a response. We do not send your account credentials or payment information to this provider.
Subscription & Payment Information
If you subscribe to a premium plan, payment is processed by Apple App Store, Google Play, or our subscription management provider (RevenueCat). We do not directly collect or store your full payment card details.
Device Information
We may collect basic device information (device type, operating system version, unique device identifiers) for troubleshooting and analytics purposes.
2. How We Use Your Information
We use the information we collect to:
- Create and maintain your account
- Sync your recipes, meal plans, and shopping lists across devices
- Provide AI-powered features you choose to use
- Process subscription payments and manage your subscription status
- Diagnose technical issues and improve App performance
- Communicate with you about your account or the App
- Comply with legal obligations
We do not sell your personal information to third parties.
3. Third-Party Services
We use the following third-party services to operate the App. Each has its own privacy policy governing how they handle data:
| Service | Purpose | Data Shared |
|---|---|---|
| Supabase | Authentication, database, photo storage | Account info, recipe content, photos |
| OpenAI | AI-powered recipe suggestions | Recipe/ingredient text you submit to AI features |
| RevenueCat | Subscription management | Subscription status, purchase events |
| Apple App Store / Google Play | Distribution, payment processing | Purchase/subscription data |
4. Data Storage & Security
Your data is stored using Supabase's infrastructure, which employs industry-standard security measures including encryption in transit. While we take reasonable steps to protect your information, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.
5. Data Retention
We retain your account and content data for as long as your account is active. If you delete your account, we will delete your personal data and user content within 90 days, except where retention is required for legal or fraud-prevention purposes.
6. Advertising
This app currently does not display advertising. If that changes in the future, this section will be updated to disclose any advertising partners and the data shared with them.
7. Your Rights & Choices
Depending on your location, you may have the right to access, correct, delete, or export the personal data we hold about you, and to withdraw consent for optional data processing (e.g., analytics).
Account Deletion: You can delete your account and associated data directly within the App under Settings > Account > Delete Account, or by contacting us at tishox.apps@gmail.com.
8. Children's Privacy
The App is not directed at children under 13, and we do not knowingly collect personal information from children. If we learn we have collected such information, we will delete it promptly.
9. International Data Transfers
Your information may be processed and stored in countries other than your own, including the United States, depending on the location of our service providers (Supabase, OpenAI, RevenueCat). We take steps to ensure appropriate safeguards are in place where required by law.
For Users in the European Economic Area (EEA) and UK
You have rights under the General Data Protection Regulation (GDPR), including the right to access, rectify, erase, restrict, or port your data, and to object to certain processing. Where we transfer your data outside the EEA/UK, we rely on appropriate safeguards such as Standard Contractual Clauses. You also have the right to lodge a complaint with your local data protection authority.
For Users in California and Other US States
If you are a California resident, you have rights under the CCPA/CPRA, including the right to know what personal information we collect, request deletion, and opt out of the "sale" or "sharing" of personal information (we do not sell personal information).
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Effective Date" above and, where appropriate, through an in-app notice.
11. Contact Us
Email: tishox.apps@gmail.com