Privacy Policy

DormDish respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our website and related services (the "Service"). By accessing or using DormDish, you agree to this Privacy Policy. If you do not agree, please discontinue use.

1. Information We Collect

a. Account & Profile Information

• Name, username, email address, password (hashed).
• University, preferred dining hall, and optionally activity level / goals.
• Optional metrics: age, height, weight, gender, dietary preferences, calorie targets.

b. Meal Planning Data

• Generated meal plans and your interaction history (accepted/adjusted).
• Feedback or modifications to protein/calorie targets.

c. Technical & Usage Data

• IP address, device/browser type, session identifiers.
• Feature usage telemetry (plan generation count, navigation patterns).
• Cookies / local storage tokens (see Section 5).

d. Payment Information

If premium features become available, payment details are processed by third-party providers (e.g. Stripe). We do not store full card numbers.

e. Communications

Support requests, feedback forms, school request submissions, and marketing opt-ins.

2. How We Use Your Information

• Generate and personalize meal plans based on inputs and dining hall data.
• Improve Service performance, reliability, and usability.
• Send updates, onboarding guidance, or marketing (only with consent).
• Detect misuse, abuse, or security anomalies.
• Comply with legal or regulatory obligations.

Legal Bases (where applicable): Consent, performance of a contract (providing the Service), legitimate interests (improving features), and legal compliance.

3. How We Share Your Information

We do not sell personal data. We may share limited data with:

• Infrastructure & Hosting: Vercel, DigitalOcean (deployment & storage).
• Analytics: Tools that help us understand usage trends.
• Payments: Stripe (if/when subscriptions launch).
• Compliance / Legal: Responding to lawful process or preventing harm.
• Business Events: Mergers, acquisitions, or restructuring (data transferred under similar protections).

4. Data Storage & Security

• Password hashing and HTTPS transport encryption.
• Restricted access to production systems.
• Periodic review of dependency and infrastructure security.

No method of electronic transmission or storage is 100% secure. We encourage using a strong, unique password.

5. Cookies & Tracking

We use cookies to enable session continuity, preference retention, and aggregated performance metrics. You can control cookie preferences through your browser settings.

6. Children's Privacy

DormDish is intended for users 18+. We do not knowingly collect data from children under 13 (or 16 where applicable). Contact us if you believe a minor has provided data; we will remove it.

7. Your Rights

• Access / Export: Request a copy of your data.
• Rectification: Correct inaccurate profile info.
• Deletion: Request account/data removal (subject to legal retention).
• Restriction / Objection: Limit or object to certain processing.
• Withdraw Consent: Opt out of marketing communications anytime.
• Data Portability: Obtain data in a portable format (where required by law).

To exercise rights: email inquiries@dormdish.ai. We may verify identity before fulfilling requests.

8. Data Retention

Data is kept only as long as needed for Service operation or legitimate purposes. When you delete your account we either delete or irreversibly anonymize associated personal data unless retention is required (e.g., fraud prevention, legal obligations).

9. International Users

Your data may be stored in the United States. Where required, safeguards (e.g. standard contractual clauses) are applied for cross-border transfers.

10. Changes to this Policy

We may update this Policy and revise the Effective Date. Material changes may be communicated via in-app notice or email if you maintain an account.

11. Contact Us

Email: inquiries@dormdish.ai • Website: https://dormdish.ai