Privacy Policy

At Mandu, we take your privacy seriously. This Privacy Policy outlines our practices concerning the handling of user data.

Data Collection and Storage

Mandu is designed with privacy at its core. Your meal plans, grocery lists and personal content are stored securely in our secure cloud database. We use strong encryption in transit (HTTPS) and at rest to protect your data.

User Authentication

Mandu requires user authentication to provide a personalized experience, securely store user preferences, sync meal plans, recipes, and grocery lists across devices, and manage household-sharing functionality. Authentication also allows us to correctly associate subscription entitlements with each user account.

Our app offers multiple authentication options, including Sign In with Apple. We include Sign In with Apple to comply with Apple's requirement for apps that support third-party login. Sign In with Apple provides strong privacy protections and a seamless login flow for users on Apple devices.

When you use Sign In with Apple, Apple may provide us with:

• Your Apple ID email address (or a private relay email if you choose to hide your email)
• Your name (if you choose to share it)
• A unique identifier to associate your account with your Apple ID

We use this information solely for authentication and account management purposes. Sign In with Apple allows you to use a private relay email address, which helps protect your privacy. We do not receive your actual Apple ID email address when you choose to hide your email.

There is no guest mode available in the app. All users must sign in to access the app's features and functionality.

We collect and store the following types of data:

• Account information (email, password, profile details)
• Meal plans, recipes, and grocery lists
• Dietary preferences
• Chat conversations with Manny, including messages you send, Manny’s responses, generated recipes, and optional images you upload for recipe or ingredient assistance
• AI consent status and consent date
• Message count information used to enforce free and paid feature limits
• App usage data to improve your experience

Data We Do NOT Collect

Mandu does not collect:

• Contacts
• Photos, except optional images you upload for Manny recipe or ingredient assistance
• Location data beyond general website analytics
• Health data
• Advertising identifiers

We do not track you across apps or websites.

Website Analytics

Our website uses privacy-focused analytics to collect anonymous usage data. This helps us understand how visitors interact with our website. The analytics data collected includes: page views, referring websites, and general location data. This data is anonymized and cannot be used to identify individual users.

Cookies

Our website may use cookies necessary for basic functionality. We do not use advertising cookies or tracking cookies.

Subscription and Payment Data

When you purchase a subscription, the payment processing is handled by our payment processor. We do not store your payment information. We only maintain necessary subscription status information to validate your access to premium features.

Payment data is processed securely through the App Store, and we do not have access to your credit card or payment details.

Data Usage

Your data is stored securely and is used to:

• Provide and maintain the Mandu service
• Sync your data across your devices
• Improve app functionality and user experience
• Provide Manny AI cooking assistance, including chat responses, recipe generation, image-based ingredient assistance, and personalized suggestions
• Enforce Manny usage limits for free accounts and subscription entitlements
• Provide customer support when needed

You maintain complete control over your data, and you can delete your account and all associated data at any time.

Manny AI Assistant

Mandu includes Manny, an AI-powered cooking assistant that can help with recipe ideas, cooking techniques, substitutions, meal inspiration, and recipe generation.

When you use Manny, we may process:

• Messages you send to Manny
• Recent conversation history, so Manny can respond with context
• Dietary preferences and cooking notes you have provided
• Pantry items you have marked as available
• Optional images you upload for ingredient or recipe assistance
• Recipes generated by Manny
• Your AI consent status and the date consent was given

Manny conversations are stored securely in our cloud database so you can have effective and helpful chat conversations. If you upload an image for Manny to analyze, the image may be stored in our cloud storage and referenced by URL so the AI service can process it.

Manny is powered by third-party AI services. When you send a message or image to Manny, relevant content is sent to our AI provider solely to generate a response. We do not sell Manny conversations, and we do not use your Manny conversations to train AI models.

Manny may generate inaccurate or incomplete information. You should use your own judgment when following cooking, food safety, dietary, or allergy-related suggestions.

Third-Party Services

Mandu uses the following third-party services to operate the app:

• Supabase (data storage, authentication)
• Sign In with Apple (authentication service provided by Apple)
• Apple App Store (subscription processing)
• Superwall (paywall presentation and subscription flow)
• OpenAI or other AI service providers (AI-powered Manny responses and optional image analysis)
• Unsplash (recipe image search, when Manny generates recipes)

These services may process data solely to provide their features. For example, when you use Manny, relevant messages, recent chat context, dietary preferences, pantry items, and optional uploaded images may be processed by our AI service provider to generate a response. No third-party receives your personal data for advertising.

We do not sell your personal data and never will.

Data Sharing

We do not sell your personal data. We only share personal data with service providers as needed to operate Mandu, including cloud hosting, authentication, subscriptions, AI-powered Manny responses, and related app functionality. Your meal plans, recipes, and personal information remain private.

Anonymous analytics data may be processed by our analytics provider under strict privacy agreements to help us improve the app.

International Data Transfers

Your data may be stored and processed on servers located in the United States or other countries. We ensure all transfers comply with applicable data protection laws.

Data Retention

We retain your data only as long as your account is active. When you delete your account, all personal data and stored content are permanently deleted from our systems within 30 days.

Manny chat conversations, generated recipes, and uploaded chat images are retained while your account is active unless deleted through available app functionality or account deletion. When you delete your account, Manny conversations and associated personal data are deleted from our systems within 30 days.

Legal Basis for Processing

Our legal bases for processing data include contract performance (providing the service), legitimate interests (improving the app), and user consent (when required).

Automated Decision-Making

Manny uses AI to generate cooking-related responses, suggestions, and recipes based on the information you provide. Mandu does not use automated decision-making or profiling that produces legal or similarly significant effects about you.

Data Security

We implement industry-standard security measures to protect your data, including:

• Strong encryption in transit (HTTPS) and at rest
• Secure database with regular security updates
• Secure authentication and authorization systems
• Regular security audits and monitoring
• Limited access controls for our development team

Children's Privacy

Our service is not directed to children under 13 years of age. We do not knowingly collect any data from children under 13. If you are under 13, please do not use Mandu.

Your Rights

You have the right to:

• Access your personal data stored in our systems
• Request correction of inaccurate data
• Request deletion of your account and all associated data

You can delete your account at any time from within the app under More → Account → Delete Account.

Changes to Privacy Policy

If we make material changes to this privacy policy, we will notify users 30 days in advance via email and/or in-app notifications. We encourage you to review this policy periodically for any updates.

We reserve the right to make changes for legal compliance purposes, which may be implemented with shorter notice as required by law.

Contact Information

If you have any questions about this Privacy Policy, please contact us at: hello@studionoo.com