Privacy Policy

Who we are

Mangiare is run by an individual based in Western Australia, Australia. There is no company behind it yet. To contact us about anything in this policy, email contact@mangiare.com.au.

What we collect

• Account details: your email address and a password. We store only a scrambled (hashed) version of your password, never the password itself.
• Your profile and household: the name you choose to display, which households you belong to, and your role in them. Anyone in your household can see your display name and the content you add to it.
• What you save: recipes (text, ingredients, the web address they came from), photos you upload or that we fetch from a recipe, meal plans, grocery lists, what is in your fridge and pantry, and your cook log, including ratings, notes and photos.
• Invitations: the email address of anyone you invite to your household.
• Technical data: your IP address and browser details appear in the logs our hosting and security tools keep. We also receive error reports when the app fails, with emails, tokens and web address query strings removed before they are sent.

We do not collect payment details (the app is free), and we do not ask for your location or your contacts.

How we use it

• To run Mangiare: sign you in, keep your household’s recipes, plans and lists in sync, and send you the emails the app needs (confirming your email, resetting a password, household invitations).
• To import recipes you ask us to import, including reading text, captions, transcripts and photos with the AI services below.
• To keep the service safe and affordable: preventing abuse, limiting how much automated work any one account can trigger, and fixing errors.
• To answer your requests, including requests to see, correct or delete your information.

We do not sell your information and we do not use it for advertising. We do not use cookies for advertising or tracking. The only cookies are the ones that keep you signed in.

AI services and your content

When you import a recipe, we send the relevant content to an AI service so it can pull out the title, ingredients and steps. That content can include the text of a web page, a social-media caption, an audio transcript, and photos you upload or that come with the recipe. We send it through OpenRouter, a service in the United States that passes it to the underlying AI model provider (currently Google’s Gemini models). We do not control how those providers handle data once they receive it, so please do not import anything you would not want processed this way, and do not upload photos of people or documents.

Imported results can be wrong. Always check quantities, steps and allergens yourself.

Who else sees your information, and where

Your database and uploaded photos are stored on a server we rent in Australia. We use the following other services, and some are outside Australia, so your information can be sent overseas:

• Vercel (United States): hosts the app and runs it. It sees your requests as you use Mangiare.
• OpenRouter (United States) and the AI model provider it uses (currently Google, United States): recipe imports, as described above.
• Zyte (Spain): fetches some web pages when a recipe site blocks a normal request. It receives the web address and page content, not your account details.
• Jina (United States and Singapore): reads some TikTok pages. It receives the video address and page content.
• Purelymail (United States): sends our emails, so it handles the recipient’s email address and the message.
• Sentry (United States): receives error reports, scrubbed as described above.
• Cloudflare (R2 storage): holds encrypted backups and a deletion log, described below.

We may also disclose information where the law requires it, or to protect people from serious harm. We do not otherwise give your information to third parties.

How long we keep it

• Your content and account stay until you delete them or delete your account.
• Server and error logs: a short period, generally between 7 and 30 days.
• A log of AI and page-fetch usage (counts and cost, no recipe content): about 90 days.
• Encrypted backups of the database and photos: up to about 30 days, which means deleted information can remain in a backup until it expires.
• A deletion record: when an account or household is deleted we keep only the internal IDs and the date, for up to 3 years, so a restored backup can be cleaned up again. It contains no name, email or content.

Your choices and rights

• Download your data: in Settings, under “Your account”, choose “Download my data (JSON)”. It covers your account, household and recipes. It does not include photos; email us and we will send them.
• Delete your account: also in Settings. This removes your sign-in, your membership, the personal information we hold about you and your photos, and signs you out everywhere. If you are the only member, the household and everything in it is deleted. If other people share your household, you must make someone else the admin first, and the household stays with them.
• See or correct your information, or make a complaint: email contact@mangiare.com.au. We aim to reply within 30 days. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Mangiare is built for people in Australia. If you use it from the European Union or United Kingdom you may have extra rights under your local law; email us and we will do what we reasonably can.

Security and problems

Access to each household’s data is restricted to its members, traffic is encrypted, and backups are encrypted before they leave our server. No system is perfectly secure. If a breach is likely to cause you serious harm, we will tell you and the regulator as the law requires.

Age

You must be at least 16 to use Mangiare. It is not aimed at children. If you think a child has given us their information, email us and we will delete it.

Changes to this policy

We will update this page when what we do changes, and change the date at the top. If a change matters to you, such as a new place we send your data, we will say so in the app or by email.