Privacy Notice
Last updated: June 18, 2026
Who we are
Angel in a Pan operates the Angel in a Pan web app (the "Service"). For the personal data described in this notice we act as the data controller.
What we collect
- Account data: email address, username, age confirmation, and optional city/region you provide at sign-up.
- Content you submit: photos of your fridge or pantry, ingredient lists, saved recipes, messages you post in the local chat.
- Usage data: the features you use (for example, how many scans you have run this month), and basic technical data such as IP address, browser, and device type, collected through standard server logs for security and reliability.
- Payment data: handled directly by our payment provider Paddle. We do not store your full card details.
How we use it
- To create and maintain your account (contract).
- To generate recipes from the ingredients you submit (contract).
- To enforce free-tier limits and subscription entitlements (contract).
- To keep the Service secure and prevent abuse (legitimate interest).
- To improve the Service and fix bugs (legitimate interest).
- To respond to your support requests (contract / legitimate interest).
- To comply with legal obligations (legal obligation).
Who we share it with
- Hosting and infrastructure: our database, authentication, file storage, and edge functions run on Supabase / Lovable Cloud infrastructure.
- AI processing: ingredient and recipe prompts are sent to Lovable AI Gateway (Google Gemini and OpenAI models) to generate recipes and analyze photos.
- Payments: Paddle acts as Merchant of Record for sales of subscriptions, handles checkout, billing, tax compliance, invoicing, and subscription management.
- Professional advisers and authorities where required by law.
How long we keep it
We keep account and content data for as long as your account is active. When you delete your account, we delete or anonymise your personal data within a reasonable period, except where we are required by law to retain it (for example, tax records on transactions). Server logs are kept for a short rolling period for security purposes.
International transfers
Your data may be processed outside your country of residence. Where it is transferred outside the UK / EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.
Your rights
Depending on where you live, you may have the right to access, rectify, or erase your personal data, restrict or object to processing, request portability, withdraw consent where processing is based on consent, and lodge a complaint with your local data protection authority. We aim to respond to requests within one month.
Security
We use appropriate technical and organisational measures, including encryption in transit, access controls, and row-level security policies on our database, to protect your personal data. No system is perfectly secure — please use a strong, unique password for your account.
Cookies
We use cookies and similar local-storage technologies that are strictly necessary for the Service to work — for example, to keep you signed in. We do not currently set advertising cookies. If we add analytics or marketing cookies in the future, we will update this notice and provide appropriate controls.
Contact
To exercise your rights or ask a privacy question, contact us through the support channel inside the app.