Privacy Policy

Overview

Mangia ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile application.

By using Mangia, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Account Information

When you create an account, we collect your email address and name to identify you and provide personalized services.

Recipe Data

We store the recipes you import or create, including ingredients, instructions, and any notes you add. This data is synced to our servers to enable access across your devices.

Pantry & Grocery Data

Information about items in your pantry and grocery lists is stored to provide features like "What Can I Make?" and smart grocery list generation.

Usage Data

We collect anonymous usage statistics to improve our app, including which features are used and general app performance metrics. This data cannot be used to identify you personally.

How We Use Your Information

• To provide and maintain our service
• To sync your data across devices
• To personalize your experience and provide recipe recommendations
• To improve our app based on usage patterns
• To send you important updates about the service (you can opt out)

Data Storage & Security

Your data is stored securely using industry-standard encryption. We use Neon (PostgreSQL) for our database infrastructure, which provides enterprise-grade security including:

• Encryption at rest and in transit
• Regular security audits
• SOC 2 Type II compliance

Third-Party Services

We use the following third-party services:

• Clerk - For authentication and user management
• RevenueCat - For subscription and payment processing
• Neon - For PostgreSQL database hosting
• Vercel - For API hosting
• Sentry - For crash reporting and error monitoring
• LogRocket - For session replay and debugging (anonymized)

Each of these services has their own privacy policy governing their use of your data. We do not sell your personal data to any third parties.

Data Retention

We retain your data for as long as your account is active or as needed to provide you services. If you request deletion of your account:

• Your account and personal data will be deleted within 30 days
• Anonymized usage data may be retained for analytics purposes
• We may retain certain data as required by law or for legitimate business purposes

California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect and how it is used
• Right to delete personal information we have collected
• Right to opt-out of the sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising your privacy rights

European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing

To exercise any of these rights, please contact us at privacy@mangia.app.

Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Opt out of marketing communications

To exercise any of these rights, please contact us at privacy@mangia.app.

Children's Privacy

Mangia is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.