Privacy Policy

Last updated: August 07, 2026

This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.

We use Your Personal Data to provide and improve the Service. We collect, use, and disclose Your information as described in this Privacy Policy and, where required by applicable law, only where We have a valid legal basis to do so, including Your consent (where consent is required).

Interpretation and Definitions

Interpretation

The words whose initial letters are capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

Collecting and Using Your Personal Information

Types of Data Collected

Personal Data

While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but is not limited to:

  • Dietary restrictions and food allergies
  • Food preferences and meal styles
  • Fitness goals and activity level
  • Personal stats (age, height, weight, goal weight)
  • Food inventory data (items in your fridge, pantry, and freezer)
  • Nutrition and meal logs
  • Grocery list items
  • Notification preferences and timezone
  • Usage Data

    Usage Data is collected automatically when using the Service.

    Usage Data may include information such as Your Device's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of Our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

    When You access the Service by or through a mobile device, We may collect certain information automatically, including, but not limited to, the type of mobile device You use, Your mobile device's unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile Internet browser You use, unique device identifiers and other diagnostic data.

    We may also collect information that Your browser sends whenever You visit Our Service or when You access the Service by or through a mobile device.

    Tracking Technologies and Cookies

    Tracking Technologies

    Wozey™ does not use cookies or advertising tracking technologies. We may use email tracking technologies (such as open and click tracking) in transactional emails to measure email deliverability. We do not use this for advertising purposes.

    Use of Your Personal Data

    The Company may use Personal Data for the following purposes:

    We may share Your Personal Data in the following situations:

    Email Communications

    We may send you transactional emails such as account verification, password resets, and subscription confirmations. We do not send marketing emails. You can contact us at wozeyapp@gmail.com if you have any questions about communications from us.

    Retention of Your Personal Data

    The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use Your Personal Data to the extent necessary to comply with Our legal obligations (for example, if We are required to retain Your data to comply with applicable laws), resolve disputes, and enforce Our legal agreements and policies.

    Where possible, We apply shorter retention periods and/or reduce identifiability by deleting, aggregating, or anonymizing data. Unless otherwise stated, the retention periods below are maximum periods ("up to") and We may delete or anonymize data sooner when it is no longer needed for the relevant purpose. We apply different retention periods to different categories of Personal Data based on the purpose of processing and legal obligations:

    Usage Data is retained in accordance with the retention periods described above, and may be retained longer only where necessary for security, fraud prevention, or legal compliance.

    We may retain Personal Data beyond the periods stated above for different reasons:

    You may request information about how long We will retain Your Personal Data by contacting Us.

    When retention periods expire, We securely delete or anonymize Personal Data according to the following procedures:

    Transfer of Your Personal Data

    Your information, including Personal Data, is processed at the Company's operating offices and in any other places where the parties involved in the processing are located. This means that this information may be transferred to — and maintained on — computers located outside of Your state, province, country or other governmental jurisdiction where the data protection laws may differ from those of Your jurisdiction.

    Where required by applicable law, We will ensure that international transfers of Your Personal Data are subject to appropriate safeguards and, where relevant, supplementary measures. The Company will take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy and no transfer of Your Personal Data will take place to an organization or a country unless there are adequate controls in place, including the security of Your data and other personal information.

    Delete Your Personal Data

    You have the right to delete or request that We assist in deleting the Personal Data that We have collected about You.

    Our Service may give You the ability to delete certain information about You from within the Service.

    You may update, amend, or delete Your information at any time by signing in to Your Account, if You have one, and visiting the account settings section that allows You to manage Your personal information. You may also contact Us to request access to, correct, or delete any Personal Data that You have provided to Us.

    Please note, however, that We may need to retain certain information when We have a legal obligation or lawful basis to do so.

    Disclosure of Your Personal Data

    Business Transactions

    If the Company is involved in a merger, acquisition or asset sale, Your Personal Data may be transferred. We will provide notice before Your Personal Data is transferred and becomes subject to a different Privacy Policy.

    Law Enforcement

    Under certain circumstances, the Company may disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).

    Other Legal Requirements

    The Company may disclose Your Personal Data in the good-faith belief that such action is necessary to:

    Security of Your Personal Data

    The security of Your Personal Data is important to Us, but remember that no method of transmission over the Internet, or method of electronic storage, is 100% secure. While We strive to use commercially reasonable means to protect Your Personal Data, We cannot guarantee its absolute security.

    Detailed Information on the Processing of Your Personal Data

    The Service Providers We use may have access to Your Personal Data. These third-party vendors collect, store, use, process and transfer information about Your activity on Our Service in accordance with their Privacy Policies.

    Where required by applicable law (including in the EEA and the UK), We deploy the non-essential cookies and similar technologies used by Our Service Providers, as described in this section, only with Your prior consent, and You may withdraw that consent at any time as described in the "Tracking Technologies and Cookies" section. The opt-out tools, links, and browser add-ons referenced in this section are additional choices made available to You; they do not replace, and are not a substitute for, Your right to give or withdraw consent where consent is required.

    Email Marketing

    We may use Your Personal Data to contact You with newsletters, marketing or promotional materials and other information that may be of interest to You. You may opt out of receiving any, or all, of these communications from Us by following the unsubscribe link or instructions provided in any email We send or by contacting Us.

    We may use Email Marketing Service Providers to manage and send emails to You.

    Payments

    We may provide paid products and/or services within the Service. In that case, We may use third-party services for payment processing (e.g. payment processors).

    We will not store or collect Your payment card details. That information is provided directly to Our third-party payment processors whose use of Your personal information is governed by their Privacy Policy. These payment processors adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of payment information.

    AI Recipe Generation

    We use Anthropic's Claude AI to generate personalized recipes, macro estimates, and grocery suggestions. Your inventory items, dietary restrictions, allergies, food preferences, and fitness goals are sent to Anthropic to generate personalized content.

    GDPR Privacy

    Legal Basis for Processing Personal Data under GDPR

    We may process Personal Data under the following conditions:

    The legal basis We rely on depends on the purpose of the processing:

    Where the provision of Personal Data is a statutory or contractual requirement, or necessary to enter into a contract with Us, We will make this clear at or before the point of collection, including whether You are obliged to provide the Personal Data and the possible consequences of not providing it. If You have questions about the legal basis for any specific processing activity, please contact Us.

    International Transfer of Personal Data

    We may transfer, store, and process Personal Data in countries other than the country in which You are located, including countries outside the European Economic Area ("EEA") and the United Kingdom ("UK"), where data protection laws may differ.

    Where We transfer Personal Data outside the EEA/UK to a country that has not been recognized as providing an adequate level of protection, We rely on appropriate safeguards, such as:

    We transfer Personal Data internationally only as needed to provide the Service and to work with Our Service Providers (for example, hosting, analytics, email delivery). You may contact Us using the details in the "Contact Us" section of Our Privacy Policy to request further information about the safeguards We use for international transfers, including copies of relevant contractual protections (redacted where necessary).

    Your Rights under the GDPR

    The Company undertakes to respect the confidentiality of Your Personal Data and to guarantee You can exercise Your rights.

    You have the right under this Privacy Policy, and by law where the GDPR or the UK GDPR applies to Our processing of Your Personal Data (including, in particular, if You are in the European Economic Area (EEA) or the United Kingdom (UK)), to:

    Exercising of Your GDPR Data Protection Rights

    You may exercise any of the rights described above by contacting Us. Please note that We may ask You to verify Your identity before responding to such requests. If You make a request, We will try Our best to respond to You as soon as possible. We generally respond within one month, and may extend by two further months where necessary, in accordance with applicable law.

    You have the right to complain to a supervisory authority about Our collection and use of Your Personal Data. If You are in the EEA, please contact Your local data protection authority. If You are in the UK, You can complain to the Information Commissioner's Office (ICO).

    Automated Decision-Making

    We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning You or similarly significantly affect You. If this changes, We will update this Privacy Policy and provide the information and safeguards required by the GDPR.

    CCPA/CPRA Privacy Notice (California Privacy Rights)

    This privacy notice section for California residents supplements the information contained in Our Privacy Policy and it applies solely to visitors, users, and others who reside in the State of California.

    Categories of Personal Information Collected

    We collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular Consumer or Device. The following is a list of categories of personal information which We may collect or may have collected from California residents within the last twelve (12) months.

    The categories and examples provided in the list below are those defined in the CCPA/CPRA. Listing a category does not mean that every type of information it describes was in fact collected by Us. It means only that, to the best of Our knowledge, some information within that category may be, or may have been, collected. Certain categories would be collected only if You provided that information to Us directly.

    Under CCPA/CPRA, Personal Information does not include:

    Sources of Personal Information

    We obtain the categories of personal information listed above from the following categories of sources:

    Use of Personal Information

    We may use or disclose Personal Information We collect for "business purposes" or "commercial purposes" (as defined under the CCPA/CPRA), which may include the following examples:

    Please note that the examples provided above are illustrative and not intended to be exhaustive. For more details on how We use this information, please refer to the "Use of Your Personal Information" section.

    If We decide to collect additional categories of Personal Information or use the Personal Information We collected for materially different, unrelated, or incompatible purposes, We will update this Privacy Policy.

    Disclosure of Personal Information

    We may use or disclose and may have used or disclosed in the last twelve (12) months the following categories of Personal Information for business or commercial purposes:

    The categories listed above are those defined in the CCPA/CPRA. Listing a category does not mean that every type of information it describes was in fact disclosed. It means only that, to the best of Our knowledge, some information within that category may be, or may have been, disclosed.

    When We disclose Personal Information to a Service Provider or contractor for a business purpose, We enter into a contract that describes the purpose, requires the recipient to keep that Personal Information confidential, and prohibits the recipient from using it for any purpose other than the limited and specified purposes stated in the contract, consistent with the CCPA/CPRA.

    Categories of Recipients to Whom We Disclose Personal Information

    We may disclose, and may have disclosed in the preceding twelve (12) months, the categories of Personal Information identified below to the following categories of recipients for the business purposes described in this Privacy Policy:

    Sale or Sharing of Personal Information

    As defined in the CCPA/CPRA, "sell" and "sale" mean selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a Consumer's personal information by the Business to a third party for valuable consideration. This means that We may have received some kind of benefit in return for sharing personal information, but not necessarily a monetary benefit.

    As defined in the CCPA/CPRA, "share" and "sharing" mean disclosing, making available, or otherwise communicating a Consumer's personal information by the Business to a third party for cross-context behavioral advertising, whether or not for monetary or other valuable consideration.

    We have not sold or shared Personal Information of California residents in the preceding twelve (12) months, and We do not sell or share Personal Information as those terms are defined in the CCPA/CPRA. We disclose Personal Information to Service Providers and contractors under written contracts that restrict their use of that information, and otherwise only as described in this Privacy Policy and as permitted by the CCPA/CPRA.

    Retention of Personal Information

    We retain California residents' Personal Information for as long as reasonably necessary to achieve the purposes described in this Privacy Policy (including the purposes disclosed in this CCPA/CPRA notice), taking into account: (i) how long We need the information to provide and maintain the Service and Your Account; (ii) whether You have requested deletion (subject to applicable exceptions); (iii) Our legal, tax, accounting, and regulatory obligations; (iv) security, fraud prevention, and abuse monitoring needs; and (v) the time periods needed to resolve disputes and enforce Our agreements.

    Specific retention periods for major data categories are described in the "Retention of Your Personal Information" section of Our Privacy Policy, and We may retain certain information longer where required or permitted by law (for example, to comply with recordkeeping obligations or to establish, exercise, or defend legal claims).

    Personal Information of Minors Under 13 Years of Age

    We do not knowingly collect personal information from minors under the age of 13 through Our Service, although certain third-party websites that We link to may do so. These third-party websites have their own terms of use and privacy policies and We encourage parents and legal guardians to monitor their children's Internet usage and instruct their children to never provide information on other websites without their permission.

    We do not sell the Personal Information of Consumers We actually know are less than 13 years of age, unless We receive affirmative authorization (the "right to opt-in") from the parent or guardian of a Consumer less than 13 years of age. Consumers who opt-in to the sale of Personal Information may opt out of future sales at any time. To exercise the right to opt-out, You (or Your authorized representative) may submit a request to Us by contacting Us.

    If You have reason to believe that a child under the age of 13 has provided Us with personal information, please contact Us with sufficient detail to enable Us to delete that information.

    Your Rights under the CCPA/CPRA

    The CCPA/CPRA provides California residents with specific rights regarding their personal information. If You are a resident of California, You have the following rights:

    Exercising Your CCPA/CPRA Data Protection Rights

    Please see the "Do Not Sell or Share My Personal Information" section and "Limit the Use or Disclosure of My Sensitive Personal Information" section for more information on how to opt out and limit the use of sensitive information collected.

    Additionally, in order to exercise any of Your rights under the CCPA/CPRA, and if You are a California resident, You can contact Us:

    We may verify Your identity before responding to requests to know, delete, or correct Personal Information, as permitted or required by applicable law. We will not require You to submit a verifiable consumer request to opt out of the sale or sharing of Personal Information or to limit the use or disclosure of Sensitive Personal Information. For those requests, We may ask only for information reasonably necessary to identify the Personal Information to which the request applies and process the request.

    Only You or an authorized agent acting on Your behalf may make a verifiable request relating to Your Personal Information.

    Your request to Us must:

    We cannot respond to Your request or provide You with the required information if We cannot:

    No later than 10 business days after receiving a request to know, delete, or correct, We will confirm receipt and provide general information about how We will process and verify the request and when You should expect a response, unless We have already granted or denied the request. We will respond no later than 45 calendar days after receipt. If reasonably necessary, We may extend the response period once by an additional 45 calendar days. If We do, We will notify You during the initial 45-day period and explain the reason for the extension.

    Unless You request a longer period, Our response to a request to know will cover the preceding 12 months. You may request information collected on or after January 1, 2022, for a longer period, unless providing it is impossible or requires disproportionate effort. We are not required to retain Personal Information for any specific period.

    For data portability requests, We will select a format to provide Your personal information that is readily usable and should allow You to transmit the information from one entity to another entity without hindrance.

    Do Not Sell or Share My Personal Information

    We have not sold or shared Personal Information of California residents in the preceding twelve (12) months, and We do not sell or share Personal Information as those terms are defined in the CCPA/CPRA.

    If Our practices change, We will update this Privacy Policy, provide the required "Do Not Sell or Share My Personal Information" link and opt-out methods, and honor opt-out preference signals such as the Global Privacy Control (GPC).

    Limit the Use or Disclosure of My Sensitive Personal Information

    We do not collect or use sensitive Personal Information for purposes other than those specified in the CCPA/CPRA and its implementing regulations, and We do not collect or process sensitive Personal Information for the purpose of inferring characteristics about consumers. Accordingly, We are not required to provide, and do not provide, a method for submitting requests to limit the use or disclosure of sensitive Personal Information. If Our practices change, We will update this Privacy Policy and provide the required means to exercise this right.

    "Do Not Track" Policy as Required by California Online Privacy Protection Act (CalOPPA)

    Our Service does not respond to Do Not Track signals.

    However, some third-party websites do keep track of Your browsing activities. If You are visiting such websites, You can set Your preferences in Your web browser to inform websites that You do not want to be tracked. You can enable or disable DNT by visiting the preferences or settings page of Your web browser.

    Your California Privacy Rights (California's Shine the Light law)

    Under California Civil Code § 1798.83 (California's Shine the Light law), California residents with an established business relationship with Us can request information once a year about sharing their Personal Data with third parties for the third parties' direct marketing purposes.

    We do not disclose California customers' Personal Information to third parties for those third parties' own direct marketing purposes.

    California Privacy Rights for Minor Users (California Business and Professions Code Section 22581)

    California Business and Professions Code Section 22581 allows California residents under the age of 18 who are registered users of online sites, services or applications to request and obtain removal of content or information they have publicly posted.

    To request removal of such data, and if You are a California resident, You can contact Us using the contact information provided below, and include the email address associated with Your Account.

    Be aware that Your request does not guarantee complete or comprehensive removal of content or information posted online and that the law may not permit or require removal in certain circumstances.

    Children's and Minors' Privacy

    The Service is not directed to, and We do not knowingly collect Personal Information from, anyone under the age of 13.

    If You are a parent or guardian and You believe Your child has provided Us with Personal Information, please contact Us. If We become aware that We have collected Personal Information from anyone under the age of 13, We will take steps to remove that information from Our servers as soon as reasonably possible.

    Some countries and states set a higher age at which an individual can consent to the processing of their own Personal Information. Where We rely on consent as a legal basis and the law applicable to a User sets an age higher than 13, We may require the consent of that User's parent or guardian before We collect and use their Personal Information.

    Health and Wellness Disclaimer

    Wozey™ is not a medical service and does not provide medical advice, diagnosis, or treatment. All content including recipes, nutritional information, macro estimates, and fitness recommendations is provided for general informational and wellness purposes only.

    You should consult a qualified healthcare professional before making any changes to your diet, exercise routine, or health regimen.

    Wozey™ uses artificial intelligence to generate recipes and filter ingredients based on your stated dietary restrictions and allergies. While we make every effort to honor your preferences, we cannot guarantee that generated recipes will be free from allergens. YOU ARE SOLELY RESPONSIBLE FOR VERIFYING ALL INGREDIENTS BEFORE PREPARING OR CONSUMING ANY RECIPE.

    Links to Other Websites

    Our Service may contain links to other websites that are not operated by Us. If You click on a third-party link, You will be directed to that third party's site. We strongly advise You to review the Privacy Policy of every site You visit.

    We have no control over and assume no responsibility for the content, privacy policies or practices of any third-party sites or services.

    Changes to this Privacy Policy

    We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page.

    We will let You know via email and/or a prominent notice on Our Service, prior to the change becoming effective and update the "Last updated" date at the top of this Privacy Policy.

    You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

    Contact Us

    If You have any questions about this Privacy Policy, You can contact Us: