Privacy Policy

Effective date: July 12, 2026 · Applies to the Diabetic Dish iOS app and this website

Diabetic Dish ("we", "us", or "our") respects your privacy. This Privacy Policy explains what information we collect, how we use it, and what choices you have when you use the Diabetic Dish mobile application for iOS (the "App") and our website at diabetic-dish.web.app (the "Website").

By using the App or Website, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use our services.

1. Who we are

Diabetic Dish is a recipe and meal-planning app designed to help people find diabetes-friendly dishes. For privacy-related questions or requests, contact us at:

diabetic.dish.sup@gmail.com

2. Scope

This policy covers:

  • The App — available on the Apple App Store (bundle ID: com.dref.Diabetic-Dish).
  • The Website — our marketing site, support information, and Universal Links that open recipes in the App.

The App is the primary service. Most data described below is collected and processed through the App. The Website is largely informational and does not require an account.

3. Information we collect

3.1 Account and authentication data

You can browse recipes without creating an account. The App may sign you in anonymously so that basic features work offline and across sessions. Creating an account is optional and lets you sync favorites, likes, shopping lists, and comments across devices.

If you choose to sign in, we may collect:

  • Email address — when you register with email and password, or when provided by a sign-in provider.
  • Authentication identifiers — a unique user ID assigned by Firebase Authentication, and provider information (Apple, Google, or email/password).
  • Account creation date — stored with your profile in our database.

When you use Sign in with Apple or Google Sign-In, we receive only the information those providers share with us according to your settings. We do not receive your Apple or Google password.

3.2 App activity and user content

When you use signed-in features, we store the following in Firebase Realtime Database:

  • Favorites and likes — recipe IDs you save or like.
  • Shopping list — ingredients and items you add from recipes.
  • Comments — text you post on recipes, along with your display name, user ID, and email address associated with your account.
  • Recipe interaction counts — aggregated like counts on recipes (not tied to your identity unless you like a recipe while signed in).

3.3 Data stored on your device

Certain information stays on your iPhone or iPad and is not sent to our servers unless you use a cloud-synced feature:

  • Recipe cache — downloaded recipes for offline access.
  • App preferences — such as language, appearance (light/dark mode), and health-reminder schedules.
  • Active recipe timers — timer state saved locally so timers survive app restarts.
  • Recently viewed recipes — stored locally for convenience.

3.4 Notifications

If you allow notifications, the App can send local notifications for recipe timers and optional health reminders (meals, blood sugar checks, activity). These reminders are scheduled on your device. We do not use notifications for advertising.

3.5 Information we do not collect

  • We do not access Apple Health or HealthKit data.
  • We do not collect precise location data.
  • We do not show ads or use advertising identifiers.
  • Firebase Analytics is disabled in our App configuration.
  • We do not knowingly collect sensitive medical records, glucose readings, or insulin dosing information.

4. How we use your information

We use the information described above to:

  • Provide and maintain the App and Website.
  • Authenticate you and sync your favorites, likes, shopping list, and comments.
  • Display recipe content, nutrition information, and community comments.
  • Cache recipes locally so you can browse offline.
  • Deliver local notifications you have enabled (timers and health reminders).
  • Respond to support requests you send us by email.
  • Protect the security and integrity of our services, including preventing abuse of comments.
  • Comply with applicable legal obligations.

We do not sell your personal information. We do not use your data for cross-app tracking or targeted advertising.

6. Third-party services

We rely on trusted service providers to operate the App. They process data on our behalf as described below:

  • Google Firebase — Authentication and Realtime Database hosting. Data is stored in Google Cloud infrastructure (database region: Europe). See Firebase Privacy.
  • Apple Sign In — optional authentication. See Apple Privacy Policy.
  • Google Sign-In — optional authentication. See Google Privacy Policy.
  • Apple App Store — app distribution and updates. See Apple Privacy Policy.
  • Firebase Hosting — serves this Website.

These providers may process data in countries other than your own. Where required, we rely on appropriate safeguards such as standard contractual clauses.

7. Data storage and security

Account-linked data is stored in Firebase Realtime Database. We use industry-standard security measures provided by Firebase and Apple platforms, including encrypted connections (HTTPS/TLS) for network traffic.

No method of transmission or storage is completely secure. While we work to protect your information, we cannot guarantee absolute security.

8. Data retention

  • Account data — kept until you delete your account or ask us to delete it.
  • Comments — may remain visible on recipes after account deletion because they are stored under recipe records. We can remove specific comments upon request.
  • Local device data — remains on your device until you delete the App or clear app data.
  • Support emails — retained as long as needed to resolve your request and for our legitimate business records.

9. Your choices and rights

Depending on where you live, you may have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data.
  • Delete your data.
  • Restrict or object to certain processing.
  • Withdraw consent where processing is based on consent (for example, notifications).
  • Request a portable copy of your data.
  • Lodge a complaint with your local data protection authority.

California residents may have additional rights under the CCPA/CPRA, including the right to know what personal information is collected and the right to delete personal information, subject to legal exceptions. We do not sell or share personal information for cross-context behavioral advertising.

To exercise your rights, email us at diabetic.dish.sup@gmail.com. We may need to verify your identity before fulfilling a request.

10. Account and data deletion

Signed-in users can delete their account directly in the App: open Profile → Delete Account. This permanently removes your Firebase Authentication account and deletes your user profile data (favorites, likes, shopping list, and related records) from our database.

Account deletion cannot be undone. If you signed in with Apple or Google, you may need to re-authenticate before deletion for security reasons.

You can also email us to request deletion if you cannot access the App.

11. Children's privacy

The App and Website are not directed at children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.

12. This Website

The Website is a static marketing and support page. We do not use analytics cookies, advertising cookies, or third-party tracking pixels on this site.

When you visit a Universal Link such as /dish/<recipe-id>, your browser may attempt to open the Diabetic Dish App. If the App is not installed, you may be redirected to the App Store. That redirect happens in your browser; we do not collect personal data from this flow beyond standard server logs maintained by Firebase Hosting (such as IP address and requested URL), which we do not use to identify individual visitors.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Effective date" at the top of this page. Material changes may also be communicated in the App or on the Website. Continued use of the App or Website after changes take effect means you accept the updated policy.

14. Contact us

If you have questions about this Privacy Policy or our data practices, contact us:

Medical disclaimer. Diabetic Dish provides general recipe and nutrition information for educational purposes only. It is not medical advice and does not replace guidance from your doctor, diabetes educator, or other qualified healthcare professional. Always follow personalized medical advice when managing diabetes.