This Privacy Policy explains how Poach Apps Ltd ("Poach", "we", "us", or "our") collects and uses personal information when you use the Poach Recipes mobile application, visit poachapp.com, or otherwise interact with us (together, the "Services").

Poach Apps Ltd is responsible for deciding how personal information is processed. If you have questions or want to exercise a privacy right, email privacy@poachapp.com.

1. Information we collect

We may collect the following categories of information:

Information you provide. This includes information and content you submit through the Services or when contacting us, requesting support, providing feedback, or suggesting a feature. Submitted content may be processed by Poach's servers and service providers to provide, parse, and classify recipes.
Usage and diagnostic information. This includes interactions with the Services and their features, app and website activity, feature usage, performance information, errors, crash reports, and related technical data.
Device and network information. This may include a Poach-assigned user identifier, device and application identifiers, device type, operating system and app version, language, IP address, and approximate location derived from an IP address.
Attribution and marketing information. This may include advertising identifiers where available and permitted, installation and referral information, campaign information, and selected app events used to attribute installs and measure campaign performance.
Subscription information. This may include the subscription product, subscription status, purchase or restoration events, and related transaction information. Payments are processed by the relevant app store, and we do not receive your full payment card details.
Information from third parties. We may receive attribution, campaign, installation, subscription, and transaction information from app stores, advertising networks, attribution providers, and subscription-management providers.

We do not collect precise GPS location for analytics or advertising attribution.

Certain information is required for Poach and its features to function.

2. How and why we use information

We use personal information to:

provide, operate, maintain, and improve the Services and their features;
provide AI-enabled features, including parsing, structuring, and classifying recipe content;
administer subscriptions and confirm access to paid features;
understand how the Services are used and evaluate feature performance;
diagnose errors, monitor performance, and protect the security and integrity of the Services;
respond to support requests, feedback, and other communications;
attribute app installations and measure the effectiveness of marketing campaigns;
comply with legal obligations and establish, exercise, or defend legal claims; and
support a merger, acquisition, financing, sale, or other business transaction where necessary.

Where UK or European data protection law applies, we rely on the following legal bases:

Performance of a contract: where processing is necessary to provide requested features, administer a subscription, or otherwise provide the Services.
Legitimate interests: where necessary to operate and improve Poach, understand usage, monitor performance, provide support, maintain security, and measure our marketing. We consider the effect of this processing on users before relying on this basis.
Legal obligations: where processing is necessary to comply with applicable law.
Legal claims: where necessary to establish, exercise, or defend legal claims.

You may object to processing based on legitimate interests by emailing privacy@poachapp.com.

3. Analytics, attribution, and similar technologies

We use cookies, mobile software development kits, and similar technologies to understand use of the Services, manage features, monitor performance, attribute installations, and measure external marketing campaigns.

Our principal analytics and attribution providers are:

PostHog, for product analytics and feature management;
Sentry, for error monitoring, diagnostics, and performance monitoring;
AppsFlyer, for mobile attribution and campaign analytics; and
RevenueCat, for subscription management and conversion measurement.

AppsFlyer helps us measure advertising campaigns. When someone installs or uses Poach after interacting with one of our ads, AppsFlyer and the relevant advertising platform — currently Meta, TikTok, Google, or OpenAI — may exchange limited identifiers, campaign information, and selected conversion events to attribute and measure that campaign. These advertising platforms do not receive recipe content through this integration.

Poach does not display third-party or personalised advertising within the Services.

4. When we share information

We may disclose personal information to:

analytics, attribution, diagnostics, subscription-management, cloud-hosting, API, and feature-management providers that process information on our behalf;
AI gateway and model-hosting providers, including Vercel and the third-party AI providers it routes requests to, which process content to provide AI-enabled features;
advertising partners for campaign attribution and measurement;
app stores and payment platforms involved in distributing Poach and processing subscriptions;
professional advisers, regulators, courts, law-enforcement bodies, or other parties where disclosure is reasonably necessary to comply with law or protect legal rights; and
a potential buyer, investor, or successor in connection with a merger, acquisition, financing, reorganisation, or sale of all or part of our business.

Where required, we enter into data-protection terms with service providers and require them to protect personal information and use it only for agreed purposes. Service providers may use subprocessors in accordance with those terms.

5. International transfers

We and our providers may process personal information in countries other than the country where you live, including the United States and other countries whose data protection laws may differ from those in the United Kingdom or European Economic Area.

Where required, we use recognised safeguards for international transfers, including adequacy regulations or decisions, the European Commission's Standard Contractual Clauses, and the applicable UK transfer mechanism. You may request more information by emailing privacy@poachapp.com.

6. Retention and security

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including providing the Services, measuring usage and campaign performance, administering subscriptions, resolving disputes, and meeting legal obligations. Retention may also depend on the settings and retention periods of our providers.

When information is no longer required, we take reasonable steps to delete or anonymise it. Where immediate deletion is not possible, such as in secure backups, we restrict further processing until deletion is possible.

We use reasonable technical and organisational measures designed to protect personal information. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your privacy rights

Depending on where you live and the laws that apply, you may have rights to:

request access to personal information we hold about you;
ask us to correct or delete personal information;
restrict or object to certain processing;
receive a portable copy of certain information; and
complain to a data protection regulator.

To exercise a right, email privacy@poachapp.com. We may ask for information reasonably necessary to identify the relevant records and verify your request. Rights are not absolute, and an exemption may apply in some circumstances.

If you are in the United Kingdom, you may also complain to the ICO. If you are in the European Economic Area or Switzerland, you may complain to your local data protection authority.

8. United States privacy rights

Where an applicable US state privacy law applies to Poach and to you, you may have rights to request access, correction, deletion, or a copy of personal information, and to opt out of certain uses or disclosures of personal information.

We do not receive money in exchange for personal information. We disclose identifiers, transaction or subscription information, usage data, and approximate location to providers and advertising partners for purposes including analytics, attribution, campaign measurement, subscription administration, security, and operating the Services. Depending on applicable law and how a recipient processes the information, some advertising-related disclosures may be considered a "sale", "sharing", or use for targeted advertising.

You may submit an applicable request or objection by emailing privacy@poachapp.com. We will not discriminate against you for exercising a privacy right.

9. Children

Poach is a general-audience recipe app and is not designed specifically for children. Users under 18 should use Poach only with permission from a parent or guardian. We do not ask users to state their age. Parents or guardians with concerns about a child's information can contact privacy@poachapp.com.

10. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to the Services, our practices, or applicable law. We will update the date at the top of the policy and provide additional notice where required.

11. Contact us

For questions, concerns, or privacy requests, email privacy@poachapp.com.