IngredientsMatter Privacy Notice

Who we are

IngredientsMatter is a meal-planning and ingredient-intelligence service that helps households manage pantry items, dietary profiles, product reviews, and weekly meal plans.

Privacy contact: use the secure contact form.

What this notice covers

This notice explains what personal data we collect, why we use it, how long we keep it, who we may share it with, and what rights are available to people who use the service.

The personal data we collect

• Account and household data such as username, display name, membership role, and invitation status.
• Pantry, recipe, meal-plan, shopping, and product-scan data entered while using the service.
• Dietary and profile data such as ingredient avoid lists, allergy flags, and household meal preferences.
• Technical and security data such as session events, rate-limit data, audit events, cookie preferences, and error telemetry where enabled.

Why we use personal data

• To create and secure accounts.
• To manage households and invitations.
• To deliver pantry, planning, recipe, and ingredient-review features.
• To protect the service, investigate abuse, and respond to support or legal requests.
• To improve the service where optional analytics or testing has been chosen.

Lawful bases

• Contract, where processing is needed to provide the service requested by the user.
• Legitimate interests, where processing is needed to secure, operate, and improve the service responsibly.
• Consent, where optional cookies, analytics, or similar non-essential features are used.
• Legal obligation, where retention or disclosure is required by law.

Dietary and allergy-related data

Dietary and allergy-related profile data can reveal health-related information. We therefore treat that data conservatively, minimise access, and keep it separate from optional analytics or marketing.

Children and household profiles

Child profiles should only be created and managed by an adult account holder or household admin. We do not use child profile data for advertising or behavioural profiling.

Sharing personal data

We may use hosting, deployment, support, security, and similar processors to run the service. Where processors are used, we expect contracts and due diligence to be in place.

Retention

We keep personal data only for as long as necessary for the purposes described here. Operational detail is summarised in the retention schedule shown in the compliance surface.

Your rights

• Access your data.
• Correct inaccurate data.
• Request deletion or restriction where appropriate.
• Object to processing where the law allows.
• Withdraw consent for optional processing that relies on consent.

Security

We use layered controls including authentication, role-based access, tenant isolation, audit logging, rate limiting, secure sessions, and hardened upload handling. No system can be guaranteed to be 100 percent secure, but the service is built to reduce risk and respond quickly to incidents.

Contact and complaints

Contact us through the secure contact form. You may also complain to the UK Information Commissioner's Office if you believe data protection law has been breached.