Privacy Policy

1. About SpoonDish

SpoonDish is a community food marketplace that connects local home cooks ("Chefs") with neighbors who want to order authentic homemade meals ("Patrons"). This Privacy Policy explains how SpoonDish, Inc. ("SpoonDish," "we," "us," or "our") collects, uses, shares, and protects your personal information when you use our website, mobile applications, and services (collectively, the "Service").

2. Information We Collect

Account Information

When you create a SpoonDish account, we collect:

• Your name and display name
• Date of birth (new accounts only; stored separately from your public profile)
• Email address
• Password (stored securely using industry-standard hashing)
• Profile photo (optional)

Google Sign-In

If you choose to sign in with Google, we receive your Google account email address, name, and profile picture from Google. We use this information to create and manage your SpoonDish account. We do not receive or store your Google password.

Location Information

With your permission, we collect your location to:

• Show you nearby Chefs and available dishes
• Enable delivery distance calculations
• Display pickup locations on maps

We use Google Maps services for mapping and geocoding. Your location data is processed in accordance with Google's Privacy Policy.

Order and Transaction Information

When you place or receive orders, we collect:

• Order details (dishes, quantities, special instructions)
• Pickup or delivery addresses
• Transaction history and amounts
• Communication between Chefs and Patrons about orders

Chef Information

If you register as a Chef, we additionally collect:

• Information about your dishes and cooking
• Pickup location details
• Availability schedules
• Business information required for payment processing

Usage Information

We automatically collect certain information when you use the Service:

• Pages viewed and features used
• Session identifiers
• Device type and browser information
• Referring URLs

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Process orders and payments
• Connect Chefs with Patrons
• Send order confirmations, updates, and reminders
• Respond to your inquiries and provide customer support
• Send promotional communications (with your consent)
• Detect and prevent fraud or abuse
• Comply with legal obligations

4. Payment Processing

We use Stripe to process payments. When you make a purchase or receive payments as a Chef, your payment information (such as credit card numbers) is collected and processed directly by Stripe. We do not store your full payment card details on our servers.

Stripe's collection and use of your information is governed by their Privacy Policy.

Chefs who receive payments connect their Stripe accounts to SpoonDish through Stripe Connect. This allows us to facilitate payments while Stripe handles the financial processing and compliance requirements.

5. Email Communications

We use Resend to send transactional emails (order confirmations, password resets, account notifications). Your email address is shared with Resend solely for the purpose of delivering these communications. Those messages include our postal address. They are not promotional mail and do not include an unsubscribe link.

We do not send marketing email. If we do later, each message will include an unsubscribe link and our postal address.

6. Cookies and Session Data

We use cookies and similar technologies to:

• Keep you signed in to your account
• Remember your preferences
• Understand how you use the Service

We use session storage for analytics session identifiers. These are temporary and are cleared when you close your browser.

7. Information Sharing

We share your information with:

• Other Users: Chefs see Patron names and order details. Patrons see Chef profiles and pickup locations.
• Service Providers: Including Stripe (payments), Resend (email), Supabase (database and authentication), and Google (maps).
• Legal Requirements: When required by law, court order, or governmental authority.

We do not sell your personal information to third parties.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (HTTPS/TLS)
• Secure password hashing
• Access controls and authentication
• Regular security reviews

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

9. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the Service. We may retain certain information as required by law or for legitimate business purposes (such as resolving disputes or enforcing our agreements).

You can request deletion of your account and associated data by contacting us at the address below.

10. Your Rights

Depending on your location, you may have certain rights regarding your personal information, including:

• Access to your personal information
• Correction of inaccurate information
• Deletion of your information
• Data portability
• Withdrawal of consent

To exercise these rights, please contact us using the information below.

11. Children's Privacy

The Service is not intended for children under 13 years of age. New accounts must enter a date of birth, and we do not create an account when that date shows the person is under 13. We do not store a rejected date. If you believe we have collected information from a child under 13, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at: