Unhinged & Well Fed

Privacy Policy

Last updated 1 October 2026

This explains what Unhinged & Well Fed (“U&WF”, “we”) does with your information. We’ve kept it short and in plain English. Questions: the contact address shown on our support page.

What we collect

• Account details: your email address and a password (stored securely hashed by our authentication provider; we never see it).
• What you tell us: your name, nutrition targets, dietary preferences, allergens and ingredient preferences, and the foods, meals, recipes and shopping lists you create or log.
• Subscription details: your plan status and Stripe customer reference. Card details go straight to Stripe. We never see or store them.
• Camera: when you scan a barcode, the camera feed is processed on your device to read the number. Images are not uploaded or stored. Only the barcode number is sent to look up the product.

Information about what you eat can reveal things about your health, so we treat your food diary as sensitive. We don’t use it for advertising and we don’t sell it.

Why we use it

To run the app you asked for (our contract with you): to keep your diary, show your totals, remember your preferences and manage your subscription. We use limited technical data (such as error information) to keep the service secure and working, which is our legitimate interest.

Who handles it

• Supabase (database and sign-in), hosted in the UK (London).
• Vercel (website hosting).
• Stripe (payments).
• Open Food Facts: when you search or scan, the search text or barcode number is sent to their public database. It isn’t linked to your account.

Some of these providers may process data outside the UK under appropriate safeguards.

Cookies

We use only essential cookies to keep you signed in. We don’t use advertising or analytics cookies, so there is no cookie banner to click through.

How long we keep it

While your account is open. If you delete your account, we delete your diary and profile data. Payment records may be kept by Stripe and us for as long as the law requires.

Your rights

Under UK data protection law you can ask to see, correct, export or delete your data, object to how we use it, or complain to the Information Commissioner’s Office (ico.org.uk). Contact us at the contact address shown on our support page and we’ll help.