Privacy policy

Who we are

7plates (7plates.es) is run by an independent developer, who is the controller of your data. Questions and requests: hello@7plates.es.

What we keep

Account: from your Google sign-in, your Google account id, email, name and a link to your profile picture.

What you add: homes and their members, dishes, photos, calendar entries, shopping list choices, ready-made products.

Optional: a nutrition profile (sex, birth year, height, weight, activity) used only to show daily ranges; your OpenAI key, stored encrypted; API tokens for MCP, stored as hashes.

Why

To run the service you asked for (contract), to keep it secure (legitimate interest), and for the optional nutrition profile, your consent, which you withdraw by clearing those fields. No ads, no selling or sharing data for marketing, no tracking analytics: we only count page views in aggregate with Vercel Web Analytics, which uses no cookies and keeps no profile of you.

Who processes it

Vercel (hosting, photo storage) and Neon (database), with the database in Frankfurt, EU. Google when you sign in with Google. OpenAI only when you use AI with your own key. Open Food Facts receives the words you search for products. Vercel Web Analytics receives the address of each page you open, your country and device type, without cookies. Sentry (EU region) receives error reports and performance traces: the page or request that failed, browser and device type, an IP address and, if you are signed in, your internal account id (never your email or name). These providers may process data outside the EU under standard safeguards.

What others can see

Members of a home see its dishes, calendar and shopping list. Dish photos are served by unguessable links without sign-in. A recipe you share by link is visible to anyone with the link, with the first name of whoever added it, until you turn the link off; turning it off also moves its photo to a new link.

Cookies

Only necessary ones: your signed-in session (30 days), your language and the selected home. No advertising or analytics cookies.

How long

Until you delete your account; then your data and the homes where you are the only member are deleted, and shared homes stay with their other members. IP addresses used to limit abuse, such as scraping shared recipes, are kept for at most a day. Backups at our providers expire on their own schedule.

Your rights

You can see, change and delete your data in the app, and ask us by email for a copy, correction, restriction or objection. You may also complain to your data protection authority (in Spain, the AEPD).