1. Who we are

Iggy (“Iggy”, “we”, “us”) is a household food-planning app operated from the United Kingdom. For the purposes of UK data protection law, we are the “data controller” for the personal data described here. You can reach us at hello@heyiggy.uk for any privacy question or to exercise your rights.

2. What we collect

• Account details — your email address, name or display name, and a securely hashed password (handled by our authentication provider). If you sign in with a third party, we receive basic profile details from them.
• Household data — the household you create or join, its members, and invitations you send or accept.
• Your kitchen data — the food, shopping lists, pantry items, prices, recipes, meal logs, and savings history you add. This is the core of the service.
• Photos — receipt and meal photos you choose to capture, stored so we can show them back to you and read items from them.
• Payment data — when you subscribe, payment is taken by our payment provider (see §6). We do not see or store your full card details; we receive your subscription status and basic billing metadata.
• Usage & device data — how you use the app (screens, actions, and errors), plus standard technical data like device type, browser, and approximate region, collected to keep the app working and improve it.

3. How we use your data

• To provide and run the app — your plan, pantry, lists, and savings.
• To read items and prices from receipt and meal photos and text you submit (see §5).
• To calculate and show your rescued/saved food value.
• To manage your subscription, free trial window, and billing.
• To send essential service messages (e.g. account, billing, security).
• To fix problems, prevent abuse, and keep the service secure.
• To understand usage and improve the product.

4. Our legal bases

Under UK GDPR we rely on:

• Contract — to provide the app you signed up for and manage your subscription.
• Legitimate interests — to secure, maintain, and improve the service, and to understand aggregate usage, balanced against your rights.
• Consent — where we ask for it, such as optional communications; you can withdraw it at any time.
• Legal obligation — where we must keep records (e.g. for tax or to respond to lawful requests).

5. AI processing of your photos and text

To save you typing, Iggy sends the receipt photos, meal photos, and short text you submit to a third-party AI provider (Anthropic) which reads them and returns structured items, quantities, and prices for you to review and edit. This processing happens only when you use those features. Our AI provider processes this data on our instructions to return a result and does not use it to train its models. AI results are drafts — you always confirm or correct them before anything is saved.

6. Who we share data with

We don’t sell your data. We share it only with the service providers (“processors”) that help us run Iggy:

• Supabase — database, authentication, and file storage.
• Vercel — application hosting and delivery.
• Lemon Squeezy — our payment provider and Merchant of Record, which processes subscriptions and handles taxes (see their own privacy policy for how they handle payment data).
• Anthropic — AI processing of the photos/text you submit (see §5).
• PostHog — product analytics, masked session replays, and heatmaps to understand usage and improve the app.

We may also disclose data where required by law, or to protect our rights and the safety of users.

7. International transfers

Some of our providers are based outside the UK, including in the United States. Where data is transferred internationally, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or Addendum, or an adequacy decision, so your data stays protected.

8. How long we keep it

We keep your data for as long as your account is active. If you delete your account, we delete or anonymise your personal data, except where we must keep limited records to meet legal or tax obligations. You can delete your account at any time from your account settings.

9. Your rights

Under UK GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted (you can do this in-app via account settings);
• receive a copy of your data in a portable format;
• object to or restrict certain processing;
• withdraw consent where we relied on it.

To exercise any of these, email hello@heyiggy.uk. If you’re unhappy with how we handle your data, you can complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.

10. Cookies & similar technologies

We use essential cookies and local storage to keep you signed in and run the app — these are always on because the app can’t work without them.

For analytics (PostHog) we default to a cookieless mode: it measures anonymous, aggregate usage to help us improve Iggy and stores nothing on your device, so it needs no consent and relies on our legitimate interest in improving the service. If you accept optional cookies, we additionally use cookies / local storage that let us recognise your device across visits, link activity to your account for more accurate analytics, and enable masked session replays/heatmaps. We mask input fields and page text before replay capture.

You can change your choice at any time using the “Cookie settings” link in the footer, or through your browser settings. Blocking essential cookies may stop the app working.

11. Children

Iggy is not directed at children and is intended for users aged 18 and over. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we’ll remove it.

12. Security

We use industry-standard measures — encryption in transit, access controls, and reputable infrastructure providers — to protect your data. No system is perfectly secure, but we work to keep your data safe and will notify you and the relevant authorities of a breach where required.

13. Changes to this policy

We may update this policy from time to time. We’ll change the “last updated” date above and, for significant changes, let you know in the app or by email.

14. Contact

Questions or requests about your privacy? Email hello@heyiggy.uk.