Privacy Policy

1. Who we are

Artful Echoes operates Ask Before You Eat and is the controller of personal information described in this policy. Contact us at melody@mlslaw.net.

2. Information we collect

• Account information: your name, email address, authentication identifiers, and account status. Passwords are processed by our authentication provider; we do not see or store your readable password.
• Purchase records: PayPal order and capture identifiers, amount, currency, payment environment, payment status, and the email associated with your app account. We do not receive or store your full card or bank details.
• Launch-list information: the email address you voluntarily submit for product updates.
• Dining profile: the profile name and food restrictions you select are stored in your browser on that device. They are not saved to our database.
• Technical information: our service providers may process IP address, device/browser information, timestamps, request logs, and security or diagnostic data needed to operate and protect the service.
• Communications: information you include when you contact support.

3. How and why we use information

We use information to create and secure accounts, provide and restore purchased access, process and document payments and refunds, send confirmation and recovery emails, respond to support requests, prevent fraud, troubleshoot the service, comply with law, and send product updates you requested.

Where law requires a legal basis, we rely on performance of our contract, our legitimate interests in operating and securing the service, compliance with legal obligations, and consent where applicable. You may withdraw consent for optional communications at any time.

4. Service providers and disclosures

We disclose only the information reasonably needed to providers that help run the service, including Supabase for accounts and database services, Vercel for hosting and technical delivery, PayPal for payments and payment-related fraud prevention, and Resend for transactional email. These providers process information under their own terms and privacy commitments.

We may also disclose information when legally required, to protect users or the service, in connection with a business transfer, or with your direction or consent.

5. No sale or targeted advertising

We do not sell personal information. We do not use personal information for cross-context behavioral or targeted advertising, and we do not knowingly share it for those purposes.

6. Retention

We keep account, entitlement, transaction, refund, and security records for as long as reasonably needed to provide the service, meet tax, accounting, fraud-prevention, dispute, and legal obligations, and establish or defend legal claims. Launch-list information is kept until you unsubscribe or request deletion, subject to limited suppression records. Device-local dining profiles remain until you clear browser storage or remove them.

7. International transfers

Artful Echoes is based in the United States. If you use the service elsewhere, information may be processed in the United States and other countries where our providers operate. Where required, providers use recognized transfer safeguards. Privacy protections in those countries may differ from those where you live.

8. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, receive a portable copy, withdraw consent, and appeal or complain to a privacy regulator. You may also have rights concerning sensitive information and automated decision-making. We do not sell personal information or use it for targeted advertising.

To make a request, email melody@mlslaw.net. We may need to verify your identity. You may use an authorized agent where local law permits, and we will not discriminate against you for exercising a legal right.

9. Cookies and local storage

We use browser storage to retain your dining profile on your device and essential authentication technologies to keep you signed in securely. PayPal and our service providers may use essential technologies when their features load. We do not operate an advertising-cookie program.

10. Children

The service is not directed to children under 16, and we do not knowingly collect their personal information. A parent or guardian who believes a child provided information should contact us so we can review and delete it as appropriate.

11. Security

We use reasonable administrative and technical safeguards appropriate to a small online service. No internet transmission or storage system can be guaranteed completely secure.

12. Changes

We may update this policy as the service or law changes. We will post the revised policy with a new effective date and provide additional notice when required.