Last updated: July 17, 2026

Who we are

UnDISHcovered is operated by Paxton Projects LLC ("we", "us"). We are the data controller for personal data collected through the Service. Contact us via the Account page in the app.

Data we collect

• Account data: email address, password hash, optional display name.
• Photos you submit: images of your pantry or fridge sent for ingredient detection.
• Recipe activity: ingredients, searches, generated recipes, and scan timestamps.
• Device and usage data: IP address, user agent, and basic diagnostic logs.
• Billing data: handled by Paddle (see "Sharing" below).

Why we use it

• Provide the Service — account, ingredient detection, recipe generation (contract).
• Enforce free-tier limits and Pro entitlements (contract, legitimate interest).
• Security and fraud prevention (legitimate interest, legal obligation).
• Improve the Service — aggregate, non-identifying analytics (legitimate interest).
• Customer support (contract, legitimate interest).

Photos and AI processing

Photos you submit are sent to our AI provider for ingredient identification. They are processed to produce a response and are not used to train third-party foundation models. We do not sell your photos or ingredient data.

Sharing

• Paddle — our Merchant of Record for payments, subscription management, tax compliance, and invoicing.
• Supabase — hosting, database, and authentication provider.
• AI providers — used to detect ingredients and generate recipes from your submitted content.
• Legal authorities — where required by law.

Retention

Account and subscription data are retained while your account is active and for a reasonable period afterwards to meet legal, tax, and audit obligations. Photos are processed transiently and are not retained beyond what is needed to return a response. You can request account deletion at any time.

Your rights

Subject to your local law, you may request access, correction, deletion, restriction, portability, or objection to processing of your personal data. You may also withdraw consent where processing is based on consent. Contact us via the Account page. If you are in the UK/EEA you have the right to complain to your local supervisory authority.

International transfers

Data may be processed in countries other than yours, including in the United States. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for such transfers.

Security

We use appropriate technical and organisational measures — encryption in transit, access controls, and hardened infrastructure — to protect your data.

Cookies

We use essential cookies and local storage for authentication, session, and app preferences. We do not use third-party advertising cookies.

Changes

We may update this notice from time to time. Material changes will be communicated via the app or email.