Privacy Policy

Introduction

Home Cooked Meals LTD respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, and protect your data when you use our apps, website, and services (“Products”). Please read this policy to understand how your personal data is handled.

Information we collect

We may collect the following information:

• Personal details such as your name, email address, password, and usage activity.
• Information you provide when using our Services.
• Data collected through cookies and tracking technologies.

Home Cooked Meals does not store your credit or debit card details. Payment information is securely handled by Apple and Google for in-app purchases.

If you use our Services on behalf of a business or organisation, we may collect your company name and work email.

If you open a Kitchen, Stripe (our payment processor) collects additional information directly from you to verify your identity and pay you out, including your legal name, date of birth, home address, bank account details, and depending on your country a photo ID or other identity document. This is handled by Stripe as part of their “Know Your Customer” obligations under payments law; we don’t receive or store the underlying documents ourselves, only your account’s verification status.

The legal basis we rely on

Under UK GDPR, we process most of your data because it’s necessary to perform our contract with you, fulfilling an order, running a Kitchen account, paying you out. We rely on legitimate interest for things like basic analytics and keeping the Services secure, and on your consent for marketing communications, which you can withdraw at any time.

How we use your information

We use your information to:

• Provide and operate our Services.
• Respond to questions, feedback, or complaints.
• Improve the performance and experience of our app.
• Send updates, offers, and promotions where you have given permission.
• Process orders and manage payments.
• Enable interactive features when you choose to use them.
• Show relevant advertisements where legally permitted.
• Send SMS messages if you have opted in.

If you are an existing customer, we may contact you about similar services unless you choose to opt out.

Data security

Your data security is important to us. We use industry-standard protections to keep your information safe during transmission and storage. Access to personal data is limited to authorised staff only. While we do our best to protect your data, no online system is completely secure. If you have concerns, contact us at hcmappofficial@gmail.com.

Marketing communications and push notifications

If you sign up for promotional emails or push notifications, we will use your information to send you updates and offers. You can unsubscribe at any time by clicking the “unsubscribe” link in emails or contacting us at hcmappofficial@gmail.com. Push notifications can be turned off in your device settings.

How your data is stored

All information you provide in the app is securely stored using Firebase (Google’s app infrastructure platform), including its Firestore database, Authentication, and Cloud Messaging services. Payment transactions are encrypted, and payment details are stored only by our payment providers, not by Home Cooked Meals. If you have a password, keep it confidential and change it regularly. While we protect your data, sending information over the internet is never 100% risk-free.

Stripe and payment data

Card details entered at checkout go directly to Stripe, we never see or store your full card number. For Kitchens, Stripe also holds a separate connected account used to verify your identity and send you payouts; we can see whether that account is verified and payouts are enabled, but not the underlying identity documents Stripe collected to get there.

Subscription management

Kitchen Partner subscriptions are managed through RevenueCat, which receives your subscription status from the App Store so we can determine what you have access to. RevenueCat doesn’t receive your payment card details, those stay with Apple.

Partner organisations

Home Cooked Meals may be offered through partner organisations such as employers, hospitals, or universities. If you sign up through a partner code, the partner may see limited account details such as your name, email, and usage dates. Partners may also receive anonymous usage statistics that do not identify you personally.

What other users can see

A Kitchen sees a Customer’s name, order details, and any dietary or allergy notes added at checkout, so they can prepare the order safely. A Customer sees a Kitchen’s public profile, menu, and rating. Neither party sees the other’s payment, contact, or account details beyond what’s needed to fulfil an order.

Your rights

Under data protection laws such as GDPR, you have rights over your personal information, including:

• The right to access your data.
• The right to correct inaccurate information.
• The right to delete your data in certain situations.
• The right to restrict or object to how your data is used.
• The right to receive your data in a transferable format.

You can request changes or exercise your rights by emailing hcmappofficial@gmail.com or updating your account in the app.

Your right to complain

If you think we’ve mishandled your data, you can complain to us directly, or to the UK’s Information Commissioner’s Office at ico.org.uk. We’d appreciate the chance to sort it out first, but you don’t need our permission to go to the ICO.

When we share your information

We may share your personal data only when necessary, such as:

• With service providers who help operate our platform, including Stripe (payments and payouts), RevenueCat (subscriptions), and Firebase/Google (hosting and infrastructure).
• To complete requested services (like SMS delivery).
• If required by law, legal requests, or to protect safety.
• During business transfers such as mergers or acquisitions.

We never sell your personal data.

Data retention

We keep your data only as long as needed:

• Account data is anonymised after 2 years of inactivity or within 30 days of a deletion request.
• Purchase records are kept as required by law.
• Marketing data is kept until you opt out.
• Support requests are stored only as long as necessary.
• Cookies and tracking data are kept for up to 12 months.

International transfers

Stripe, Firebase, and RevenueCat may process data outside the UK. Where that happens, we rely on the safeguards those providers have in place, such as standard contractual clauses.

Automated decision-making

We don’t use automated decision-making or profiling that has a legal or similarly significant effect on you.

Cookies on our website

Our website uses only essential cookies needed for it to function. If we add analytics or marketing cookies in future, we’ll update this section and ask for consent where required.

Age requirements

You must be at least 4 years old to register for Home Cooked Meals. Users under 12 may only use certain features with parental or guardian supervision, unless otherwise stated in specific partner programs.

Changes to this policy

We may update this Privacy Policy from time to time. If major changes are made, we will notify you through the app or by email. We recommend reviewing this page occasionally to stay informed.

Contact us

If you have questions about this Privacy Policy or your personal data, or if you want to exercise your legal rights, contact us at hcmappofficial@gmail.com.