Privacy Policy

Last Updated: 23/06/2025

1. Introduction

Welcome to Pan Mate. We are committed to protecting your privacy and handling your personal information in an open and transparent manner. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and related services (collectively, the "Service").

We adhere to the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth) ("Privacy Act"). By using our Service, you consent to the data practices described in this policy.

2. Information We Collect

We collect different types of information to provide and improve our Service to you.

2.1 Personal Information

This is information that can be used to identify you directly or indirectly. We collect personal information you voluntarily provide, which may include:

• Account Information: Name, email address, and encrypted password.
• User-Generated Content: Any data you create or upload, including recipes, meal plans, shopping lists, and stock/inventory data. This also includes images and text instructions provided for any feature.
• Imported Data: Content imported from third-party URLs (e.g., recipe websites, Instagram, TikTok) or images, which may contain personal data.
• Shared Content: Information shared for collaborative features, such as users you share lists or meal plans with.

2.2 Information Processed by AI

When you use our AI-powered features (e.g., importing recipes from a URL/image, altering recipes with instructions, generating shopping lists), we send the relevant data (such as URLs, images, or text) to our third-party AI service providers for processing. This is necessary to provide the feature's functionality. We do not permit these providers to use your data for training their models or for any other purpose.

2.3 Sensitive Information

We do not intentionally collect sensitive information, such as health data. However, we recognize that information about dietary preferences, restrictions, or nutritional information inferred from your recipes and meal plans may be considered sensitive. We treat such information with a higher degree of care and in accordance with the Privacy Act.

2.4 Usage and Device Data

We automatically collect information on how you access and use the Service. This may include your IP address, browser type, device identifiers, pages visited, and the time and date of your visit.

2.5 Payment Data

When you subscribe to our Premium Version, our third-party payment processor (Stripe) collects necessary payment information. We do not store your full credit card details on our servers.

3. How We Use Your Information

We use the information we collect for various purposes, including to:

• Provide, operate, and maintain our Service.
• Process and fulfill your requests, such as generating recipes, scaling servings, and converting units.
• Enable AI-powered features, including recipe optimization, ingredient categorization, and content creation from images or instructions.
• Facilitate sharing and collaboration on shopping lists and meal plans as directed by you.
• Manage your account, process payments, and send you related communications.
• Provide functionality such as cooking timers and notifications.
• Analyze usage to monitor and improve our Service, and for internal business purposes.
• Detect, prevent, and address technical issues and security risks.

4. Disclosure of Your Information

We do not sell your personal information. We may disclose your information in the following situations:

• With Service Providers: We share information with third-party vendors that help us operate our Service, such as cloud hosting (Supabase), payment processing (Stripe), and AI service providers.
• For Collaboration: When you use sharing features, information required for that feature will be shared with other users as you direct.
• To Comply with Laws: We may disclose your information where required by law or in response to valid requests by public authorities.
• To Protect Our Rights: To protect and defend our rights, property, or the safety of our users or the public.

5. Data Security

We implement robust technical and organizational measures, including AES-256 encryption, to protect your data in accordance with APP 11. When transferring data outside Australia, we ensure it is protected in line with Australian Privacy Principles through appropriate contractual safeguards with our service providers.

6. Third-Party Links and Services

Our Service may allow you to import information from third-party websites. We are not responsible for the privacy practices of these other sites. When you leave our Service, we encourage you to read the privacy policy of each website you visit.

7. Your Rights Under Australian Privacy Law

Under the Privacy Act, you have rights to access (APP 12) and correct (APP 13) your personal information. You can request to access or correct your data by contacting us. We will respond within a reasonable timeframe, typically within 30 days. You may also request the deletion of your account and associated data.

8. Data Retention

We retain your personal information only for as long as necessary to provide you with our Service and for legitimate and essential business purposes. Inactive accounts may be deleted after 12 months of inactivity. Checked items on your shopping list are stored temporarily before being deleted.

9. Children's Privacy

Our Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that a child under 16 has provided us with personal information, we will take steps to delete such information.

10. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top.

11. Privacy Breach Notification

In the event of a data breach, we are committed to complying with the Notifiable Data Breaches (NDB) scheme in Australia. We also adhere to the NSW Privacy Commissioner's guidelines and will notify the NSW Information and Privacy Commission within 72 hours of discovering a breach.

12. Contact Us

If you have any questions or complaints about this Privacy Policy or our data-handling practices, please contact us at: info@panmate.app.