← Back to Home

Privacy Policy

Last updated: August 15, 2026

rekoMAInda (“we,” “our,” “the app”) is a zero-waste pantry and meal planning app built for households in the Philippines. This policy explains what information we collect, why, and how it's handled.

1. Information We Collect

Account information. When you sign up, we collect an email address and password (if you sign up directly), or your name, profile photo, and email address (if you sign up with Google). We don't see or store your Google password — Google handles that authentication directly.

Pantry and food data. Information you enter about your food items: names, quantities, categories, expiration dates, and — if you choose to enter it — what you paid for an item.

Dietary preferences and allergies. If you set dietary preferences or flag food allergies in your profile, we store this to personalize recipe suggestions and to warn you about recipes containing a flagged allergen. This is sensitive information you choose to provide; we use it only to power the app's own filtering and warning features, never for any other purpose.

Recipes you create or publish. If you write your own recipes, they're private to your account unless you choose to publish them, at which point other users can see and use them.

Usage data tied to your account. Your shopping lists, cooking history (which recipes you've marked as cooked), and impact tracking (items you've saved from waste, items you've marked as spoiled, and their estimated value).

Barcode scans. When you scan a product barcode, the barcode number is sent to Open Food Facts (a public, community-run product database) to look up the product's name and details. We don't send any information that identifies you personally as part of that lookup.

Scan-with-your-phone sessions. If you use the “Scan with your phone” feature to scan a barcode on your phone and send the result to your computer, we generate a short-lived, random session token linked to your account to connect the two devices. This token automatically expires after 10 minutes or as soon as it's used once, whichever comes first, and is not kept afterward.

2. What We Don't Collect

We don't run advertising trackers, and we don't sell or share your data with advertisers — rekoMAInda doesn't have ads. We don't collect payment information, since the app is free with no paid tier. We don't store or log IP addresses in any persistent database. Some of our routes briefly inspect an incoming request's IP address in transient server memory purely to prevent abuse (such as rate limiting barcode lookups, which disappears immediately). When using login or signup, Cloudflare Turnstile securely processes request metadata (including IP) solely to verify human interaction and prevent automated attacks without tracking your identity across the web.

3. How We Use Your Information

  • To operate the app's core features: your pantry, recipe suggestions, shopping lists, and impact dashboard.
  • To personalize recipe suggestions based on your dietary preferences and to warn you about or filter out recipes containing a flagged allergen.
  • To keep your account secure and to keep you signed in between visits.
  • To protect the application against automated bot attacks, credential abuse, and spam.

4. Who We Share Information With

We use a small number of service providers to run the app, each of whom only sees what's necessary to do their specific job:

  • Supabase — hosts our database, handles authentication, and stores your account and pantry data. Supabase's own privacy and security practices apply to how they handle data on our behalf.
  • Cloudflare — provides Cloudflare Turnstile bot protection on our login and signup forms. When accessing authentication pages, your IP address and security challenge data are evaluated by Cloudflare to prevent automated abuse.
  • Google — if you sign in with Google, Google handles that authentication step and shares your name, email, and profile photo with us, per Google's own account and privacy settings.
  • Vercel — hosts and serves the app itself.
  • Discord — we use automated internal webhooks to deliver real-time notifications to our engineering team when new users join the private beta waitlist or when authentication events occur. These logs are used strictly for access provisioning, server telemetry, and security audit monitoring.
  • Open Food Facts — receives barcode numbers you scan, to return product information. This is a public, non-profit, open database; we do not send them any information identifying you personally.

We do not sell your personal information to anyone, for any reason.

5. Your Recipes and Community Content

If you choose to publish a recipe you've written, it becomes visible to other rekoMAInda users. You can un-publish it at any time, which removes it from other users' view going forward (though it may remain visible for a short time to anyone who already had it open).

6. Data Storage and International Transfers

Our service providers (Supabase, Vercel) may store and process data in locations outside the Philippines. By using rekoMAInda, you understand your information may be processed in these locations, under those providers' own security standards.

7. Your Rights

Under the Philippines' Data Privacy Act, you have the right to access, correct, or request deletion of your personal data. You can update most of your information directly within the app (your profile, dietary preferences, and pantry data). To request full account deletion or ask a question about your data, contact us at rekomainda@gmail.com.

8. Data Retention

We keep your account data for as long as your account is active. If you delete your account, we remove your personal data within a reasonable time, except where we're required to keep certain records by law.

9. Children's Privacy

rekoMAInda is not directed at children, and we don't knowingly collect information from children. If you believe a child has created an account, contact us and we'll take appropriate action.

10. Changes to This Policy

If this policy changes in a way that affects how your data is used, we'll update the “last updated” date above and, where the change is significant, make a reasonable effort to notify users.

11. Contact

Questions about this policy or your data: rekomainda@gmail.com