Privacy Policy

Last Updated: 2026-02-07

Introduction

TF Halibut ("we", "us", or "our") operates the Dishy Delishy mobile application (the "App"). This Privacy Policy explains how we collect, use, store, and protect your information when you use the App.

By using Dishy Delishy, you agree to the collection and use of information as described in this policy.

Information We Collect

Account Information

When you sign in using Google, Apple, or email authentication through Firebase Auth, we collect:

  • Your display name
  • Your email address
  • Your authentication provider identifier

Meal Data

When you log meals, we collect and store the information you provide:

  • Meal names and types (e.g., Breakfast, Lunch, Dinner, Snack)
  • Dates and times
  • Notes and descriptions
  • Tags you assign to meals

Photos

If you upload photos of your meals, these images are stored in Firebase Storage and associated with your meal entries.

Group Membership Data

When you create or join a group, we store your membership information, including your role (owner or member) and the date you joined.

Device and Local Data

The App stores certain data locally on your device:

  • App preferences such as theme selection and view mode
  • Cached data for offline functionality
  • Authentication tokens stored securely using encrypted device storage

How We Use Your Information

We use the information we collect solely to:

  • Provide and operate the Dishy Delishy service
  • Display your meal history and planned meals
  • Enable group-based meal sharing with other members
  • Authenticate your identity and secure your account
  • Store and display your meal photos
  • Maintain your app preferences and settings

Data Storage and Security

Your data is stored using Google Firebase infrastructure (Google Cloud Platform). We take reasonable measures to protect your information:

  • Authentication tokens are stored using encrypted device storage
  • All data transmission uses HTTPS encryption
  • Firestore security rules enforce group-level access control
  • All user data is cleared from the device when you sign out

Data Sharing and Third-Party Services

We do not sell, trade, or share your personal information with third parties for marketing or advertising purposes. Specifically:

  • We do not use analytics or tracking services
  • We do not serve advertisements
  • We do not share data with data brokers or marketing platforms

We use the following third-party service providers to operate the App:

  • Firebase (Google Cloud): Provides data storage, authentication, and file storage infrastructure
  • RevenueCat: Manages in-app subscriptions and purchases. RevenueCat receives your anonymized user identifier and purchase/subscription data to process and verify transactions. RevenueCat's privacy policy is available at revenuecat.com/privacy

Your meal data is shared only with other members of groups you voluntarily join.

Your Rights

You have the following rights (including under GDPR and CCPA) regarding your personal data:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request correction of inaccurate personal data
  • Deletion: Request deletion of your personal data and account
  • Portability: Request your data in a portable format
  • Withdraw Consent: Withdraw your consent to data processing at any time by deleting your account

You can delete your account directly within the App through Settings. To exercise any other rights, please contact us at the email address below.

Data Retention

We retain your personal data for as long as your account is active. When you delete your account, your personal data and associated meal entries are deleted. Photos stored in Firebase Storage associated with your account are also removed upon account deletion.

Children's Privacy

Dishy Delishy is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us so we can promptly delete it.

International Data Transfers

Your data is stored on Firebase (Google Cloud Platform) servers, which may be located in various regions worldwide. By using the App, you consent to the transfer of your information to facilities outside your country of residence, which may have different data protection laws.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last Updated" date at the top of this page. We encourage you to review this Privacy Policy periodically for any changes.

Contact Us

If you have questions or concerns regarding this Privacy Policy, please contact us at:

Email: dishydelishy@tfhalibut.com