Privacy notice

Who is responsible

[to be confirmed] is the controller of your personal information. Contact us at [to be confirmed] or [to be confirmed]. ICO registration number: [to be confirmed].

What we hold

Account details: your name, email address, a securely hashed password if you set one, and sign-in records.

Household details: the people you plan for, their protein and calorie targets, which meals they eat, settings, recipes, plans, shopping lists, ratings, pantry and freezer contents.

Allergies and dietary rules. Hard allergens are health information, so we store them only with your explicit consent, which you can withdraw in Settings at any time; withdrawing deletes them.

Technical information: error logs and security records such as failed sign-in attempts. We do not use advertising or tracking cookies.

Why we use it

To provide the service you asked for (our contract with you): planning, lists, price comparison, notifications you have switched on, and billing if you subscribe.

To keep the service secure and working (our legitimate interests): preventing abuse, fixing faults, and keeping backups.

With your consent: storing allergy information, and recording prices on supermarket pages you visit if you switch that on in the extension.

Who we share it with

Only the providers needed to run the features you use, under data processing agreements: the AI provider that writes and reads recipes (Google Gemini, or Anthropic if chosen), Stripe for payments, an email delivery service, an error monitoring service, and our hosting and database providers. Each is used only when switched on.

Free-tier AI services may use what is sent to them to improve their models. Louben Shop sends recipe requests, not your name or email, and never uses a free-tier AI key for a paying household.

We do not sell your information or share it for advertising.

Where it is kept, and for how long

Your information is stored in the UK or the European Economic Area. Where a provider processes data elsewhere, appropriate safeguards are in place.

We keep your information while you have an account. When you delete your account or household it is deleted straight away from the live service and from backups as they age out, within 30 days. Error logs are kept for 90 days.

Your rights

You can see, correct, export and delete your information yourself in Account settings. You also have the right to object, to restrict processing and to withdraw consent. Write to us to use any of these rights; we reply within a month.

If you are unhappy with how we handle your information, you can complain to the Information Commissioner’s Office (ico.org.uk).