ParArtu Privacy Policy

Last Updated: [DATE]

This Privacy Policy explains how [LEGAL ENTITY NAME] ("ParArtu," "we," "us") collects, uses, and shares information when you use the ParArtu website, web application, and mobile applications (the "Service").

1. Information We Collect

1.1 Information You Provide

• Account information: Name, email address, and authentication credentials.
• Household information: Household name, members you invite, and household size.
• Meal preferences and feedback: Dietary preferences, restrictions, allergies you choose to record, meal ratings, tags, and notes.
• Email signup: If you give us your email address before the Service launches — for example, to be notified when it is available — we store that address to send you launch and product updates. You can unsubscribe at any time using the link in any such email.
• Communications: Messages you send us (e.g., support requests).

1.2 Information Collected Automatically

• Usage data: Features used, pages viewed, meal plans generated, and interactions with the Service.
• Session data: We use analytics tools (including PostHog) that may record session replays — reconstructions of how you interact with the Service (clicks, scrolls, navigation). We configure these tools to mask sensitive input fields where feasible.
• Device and log data: IP address, browser type, operating system, device identifiers, and timestamps.
• Cookies and similar technologies: Used for authentication, preferences, and analytics. You can control cookies through your browser settings; disabling them may limit functionality.

1.3 Information from Household Members. When a household member invites you, we receive your email address to send the invitation. Household members can see shared household data such as meal plans, preferences, and feedback within the household.

2. How We Use Information

We use your information to:

• Provide, maintain, and improve the Service;
• Generate personalized meal plans and suggestions, including sending relevant household preferences and feedback to our AI provider to produce meal plans;
• Authenticate you and secure your account;
• Send transactional emails (e.g., account verification, invitations, password resets);
• Send product updates and marketing communications, which you may opt out of at any time;
• Analyze usage to understand and improve how the Service works;
• Comply with legal obligations and enforce our Terms of Service.

3. AI Processing

Meal plans are generated using Anthropic's Claude API. To generate suggestions, we send relevant data — such as your household's dietary preferences, restrictions, and meal feedback — to Anthropic for processing. Per Anthropic's commercial API terms, data submitted via the API is not used to train Anthropic's models by default. We do not sell your data to AI providers.

4. Service Providers We Share Data With

We share information with service providers who process it on our behalf:

These providers are bound by contractual obligations to protect your data and use it only to provide services to us.

We may also disclose information: (a) to comply with law or valid legal process; (b) to protect the rights, safety, or property of ParArtu, our users, or others; (c) in connection with a merger, acquisition, or sale of assets (we will notify you of any such change); or (d) with your consent.

We do not sell your personal information, and we do not share it with third parties for their own advertising purposes.

5. Children's Privacy

ParArtu is a household app, and we understand families include children. Our approach:

• Accounts may only be created by individuals 13 or older.
• Children under 13 do not create their own accounts. A parent or guardian may record a child's meal preferences (e.g., "the 8-year-old won't touch mushrooms") within the parent's own household data. This information is provided by and controlled by the parent.
• We do not knowingly collect personal information directly from children under 13. If you believe a child under 13 has provided us personal information directly, contact us at [SUPPORT EMAIL] and we will delete it.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. When you delete your account, we delete or de-identify your personal information within 30 days, except where retention is required for legal, security, or backup-integrity purposes. Analytics data may be retained in aggregated or de-identified form.

7. Your Rights and Choices

Depending on your location, you may have the right to:

• Access the personal information we hold about you;
• Correct inaccurate information;
• Delete your personal information;
• Export your data in a portable format;
• Opt out of marketing communications (via the unsubscribe link in any marketing email);
• Object to or restrict certain processing.

To exercise these rights, contact us at [SUPPORT EMAIL] or use the tools in your account settings. We will respond within the timeframe required by applicable law. We will not discriminate against you for exercising your rights.

California residents: You have rights under the CCPA/CPRA, including the rights described above. We do not sell or "share" (as defined by the CPRA) your personal information.

EEA/UK residents: Our legal bases for processing are performance of a contract (providing the Service), legitimate interests (improving and securing the Service), consent (marketing), and legal obligations. You may lodge a complaint with your local supervisory authority.

8. Data Security

We use commercially reasonable technical and organizational measures to protect your information, including encryption in transit, access controls, and reputable infrastructure providers. No system is completely secure; we cannot guarantee absolute security.

9. International Transfers

Our service providers may process data in the United States and other countries. By using the Service, you understand your information may be transferred to and processed in countries with different data protection laws than your own.

10. Third-Party Links

The Service may link to third-party websites (e.g., recipe sources). We are not responsible for their privacy practices. Review their policies before providing information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or in-app notice before the changes take effect. The "Last Updated" date reflects the latest revision.

12. Contact Us

Questions or requests regarding this Privacy Policy:

[LEGAL ENTITY NAME]
[SUPPORT EMAIL]
[MAILING ADDRESS]