Privacy Policy

iDishYou is operated by MAD for Business LLC, a company registered in the State of Wyoming (United States), which is the controller of your data.

For any question about your data: contact@idishyou.com.

Account: name, email address, password (handled and encrypted by Firebase Authentication, never stored in plain text by us) or Google sign-in, language, role (customer or chef).

Profile: photo and, for chefs, bio, specialties, dishes, prices, country and kitchen address.

Location: your device's precise location, only while the app is open and with your permission, to show chefs near you and, for chefs, to locate their kitchen.

Activity: orders, requests ("Cravings"), offers, messages exchanged with the chef or customer of an order, pickup and lateness history.

Chef verification: a photo of an identity document and a photo of the kitchen, submitted when verifying a chef account.

Photos: dish photos you upload, including those you choose to have analyzed by artificial intelligence.

Chef wallet: top-up amounts and transaction history. Card payments are processed by Stripe: we never see or store your card number.

Technical data: device identifier for notifications, security tokens (App Check / Play Integrity) proving requests come from the official app, IP address and technical logs.

Advertising: the device's advertising ID, used by Google AdMob according to your consent choices.

To provide the service (performance of contract): create your account, show chefs and dishes, deliver orders, messages and pickup codes, manage the wallet and commission.

Security and fraud prevention (legitimate interest and legal obligations): verify chefs' identity, prevent abuse, protect accounts.

Notifications (legitimate interest, can be turned off in your phone settings): order and message updates.

Advertising (consent where required by law): show ads, personalized or not according to your choice.

Artificial-intelligence features (on request): when you use photo analysis, the image is sent to Google Gemini (via Firebase) to suggest a title, description and ingredients.

Legal obligations: keeping accounting records and answering requests from authorities.

Chefs' public profile: name, photo, bio, specialties, dishes and prices, kitchen pickup area or address, rating and lateness rate. This information is also visible on idishyou.com.

Customers have no public profile. The chef of an order only sees what that order requires, plus the customer's on-time pickup rate.

Identity documents and verification photos are never public: only our verification team and you can access them.

We never sell your data. We only share it with our service providers, who process it on our behalf:

Google (Firebase, Google Cloud): hosting, database, authentication, photo storage, notifications, App Check security, email delivery. Google AdMob: advertising. Google Gemini (Firebase AI Logic): photo analysis on request. Google Maps / Places: address search.

Stripe: payment of chef wallet top-ups.

Authorities: when required by law or to protect our users against fraud.

Our providers may process your data in the United States and the European Union. These transfers rely on the safeguards provided by law, including the European Commission's standard contractual clauses.

Your data is kept while your account is active. When you delete your account, your profile, photos, identity documents, dishes, requests, offers and wallet are deleted.

Payment and billing records are kept for the period required by law (accounting and tax obligations), then deleted. Technical logs are kept for a few weeks.

You can access, correct and export your data (Settings → Export my data), object to certain processing, withdraw your advertising consent and delete your account at any time (Settings → Delete my account, or at idishyou.com/delete-account).

For any other request, write to contact@idishyou.com. You may also lodge a complaint with the data protection authority of your country.

Communications are encrypted (HTTPS). Access to data is restricted by server-side security rules, and sensitive operations (payments, commissions, verification) can only be performed by our servers. No system is infallible, so please keep your password safe.

iDishYou is only for people aged 18 or over. We do not knowingly collect data about minors.

The idishyou.com website only uses the storage needed for it to work (language, display preferences) and Google reCAPTCHA security checks against abuse. We do not use audience-measurement cookies.

We may update this policy. For significant changes, we will let you know in the app. The last-updated date is shown at the top of this page.