Privacy Policy

Last updated: 16 September 2026

Who we are: Bradley Simpson, trading as Seven Southgate, New Zealand.
Privacy officer: Bradley Simpson.
Contact: bradley@sevensouthgate.com

This policy covers the Dindins iOS app and this website.

1. What we collect

Your account. Your name and email address, from Sign in with Apple or Sign in with Google. Your profile photo and avatar, if you set one. Your birthday, if you enter one.

What you put in the app. Recipes, including photos of recipes. Meal plans and cooking schedules. Shopping lists. Ratings and feedback on meals. Dietary restrictions and preferences. Notes you write. Photos of meals you log. Recordings of your voice, if you dictate a recipe.

Your family. Which family you belong to, your role in it, and invite codes you create.

Technical information. A user identifier from Firebase Authentication. A device identifier from Firebase Installations. A notification token, if you allow notifications. Which screens and features are used, through Firebase Analytics. Crash and error reports, through Firebase Crashlytics.

We do not collect your location, your contacts, your calendar, your health data, or your browsing history.

2. Where it is stored

Your data is stored in Google Firebase, in Google's Sydney (australia-southeast1) region: Firestore for your family's content, Firebase Storage for photos, and Firebase Authentication for your sign-in.

Some processing happens in the United States. Most of our background processing runs on Google servers in the United States (us-central1), including the code that handles joining a family, deleting an account, sending notifications, and analysing a meal photo. We intend to move this to Sydney; until we do, this is where it happens.

Apple iCloud is used for two narrow purposes only: checking who belongs to your family, and removing your data when you delete your account. Your recipes and meal plans are not stored in iCloud.

Data is encrypted in transit and at rest by Google and Apple.

3. Who can see it

Your family. Everyone in your family group can see your family's recipes, meal plans, shopping lists, cooking history and ratings. That is the point of the app.

Everyone, if you choose. If you submit a recipe to the Dindins community, it becomes visible to every person using Dindins, along with the name you submit it under. It stays visible until you or a moderator removes it.

Anyone with the link. If you share a recipe using a share link, anyone holding that link can see that recipe, including people who are not signed in. The link contains an unguessable code and is not listed anywhere, but it is not otherwise protected. You can revoke a share at any time.

Our processors. Google (Firebase), Apple (sign-in, iCloud, notifications), and the AI companies described below. We do not sell or rent your information to anyone, and we do not share it for advertising.

If the law requires it. We may disclose information where New Zealand law obliges us to.

4. AI features

Some features work by sending your content to an AI company. Each of these asks your permission the first time you use it, names the company, and states exactly what is sent. Nothing is sent before you agree, and you can withdraw permission at any time in Settings → Privacy → AI Features. Withdrawing means the feature asks again next time.

These companies process the content in the United States. They are not given your name, your email address or your family's details. We do not use your content to train AI models. What OpenAI and Anthropic do with content sent to them is governed by their own terms, which you can read on their websites.

If you decline, the rest of the app works normally. You can type recipes in, import them from a link, log meals by name, and use the shopping list without aisle sorting.

5. Why we use your information

To run the app: to show you your recipes and plans, to sync them between the people in your family, to send the notifications you have asked for, and to provide the features above.

To keep the app working: to find and fix crashes and errors, and to understand which features are used so we know what to improve.

We do not use your information for advertising, profiling or any automated decision that affects you.

6. How long we keep it

Your data is kept while your account exists. When you delete your account it is removed, as described below.

Backups are kept for operational recovery: a rolling 7 days of point-in-time recovery, and daily backups retained for 14 days. Deleted data can persist in those backups until they expire.

Invite codes expire after 7 days.

7. Your choices

• See and export your data. Settings → Privacy Settings → Export Data.
• Correct it. Everything you have entered can be edited in the app.
• Delete your account. Settings → Account → Delete Account. This removes your account and your content from Firebase and Firebase Storage, removes you from your family, and revokes the Sign in with Apple token. If you are the last person in your family, the family and its data are deleted with you. This cannot be undone.
• Leave a family. Settings → Family → Leave Family.
• Turn off AI features. Settings → Privacy → AI Features.
• Turn off notifications. In the app, or in iOS Settings.
• Ask us. Under the Privacy Act 2020 you may ask to see the personal information we hold about you, and to have it corrected. Email bradley@sevensouthgate.com. We will respond within 20 working days.

8. Children

Dindins is for people aged 13 and over.

A child under 13 may use Dindins only as a member of a family group created by a parent or guardian, who is responsible for their use of it. The adult who runs the family can see that child's entries, correct them, and delete them.

We do not attach an analytics identifier to family members who are not the family's organiser. We do not profile children, show advertising, or use anyone's information to target content.

If you believe a child has used Dindins outside a family set up by their parent or guardian, email bradley@sevensouthgate.com and we will remove the information.

9. Where Dindins is available

Dindins is offered in New Zealand and Australia.

For New Zealand users, the Privacy Act 2020 applies and the Office of the Privacy Commissioner (privacy.org.nz, 0800 803 909) can take a complaint if we do not resolve one to your satisfaction. For Australian users, the Australian Privacy Principles under the Privacy Act 1988 apply, and the Office of the Australian Information Commissioner (oaic.gov.au) can take a complaint.

As set out in sections 2 and 4, some of your information is processed outside New Zealand and Australia, in the United States, by Google and by the AI providers listed. By using those features you agree to that transfer. We rely on those providers' contractual protections, which require them to safeguard the information to a standard comparable to New Zealand law.

10. Security, and what happens if something goes wrong

Access to your family's data is enforced on our servers, not merely in the app: a person who is not in your family cannot read it. Sign-in is handled by Apple and Google; we never see your password.

No system is perfect. If a breach occurs that is likely to cause you serious harm, we will notify you and the Office of the Privacy Commissioner as the Privacy Act 2020 requires.

11. Changes

If we change this policy materially, we will tell you in the app before the change takes effect. The date at the top always reflects the current version.