Privacy at Fuda.

Fuda (“we”, “us”) is a food decision service based in the Netherlands. We are the controller for the personal data described here. Contact: privacy@fuda.app.

Unresolved before publication: Legal entity name, registration number, address. Counsel to confirm which entity is the controller, and to update this section when the corporate structure changes. The controller must be stated accurately at all times.

We collect nothing that does not change your answers.

• Account: your email address, to sign you in and to tell you the things we promise to tell you (like a price change, before it happens).
• Your household's restrictions: allergies, intolerances, medical diets, religious food rules, and things people simply avoid, per person. This is the heart of Fuda and the most sensitive thing we hold. See section 3.
• Household setup: who is in the household (a name or nickname and whether someone is an adult or child), portions, preferences such as time, budget and taste. Children are people in your household, never account holders.
• Pantry and shopping data: what you tell us is in the house and what's on your list, so we can use what you have before recommending spending.
• Decision history: what you accepted, changed or rejected, so your answers get better. Used for your household only; never to build a profile for anyone else.
• Approximate location: city-level, to show shops and restaurants near you. We do not store precise GPS coordinates.
• Technical basics: browser type and language, for localization; your market and language choice (a cookie); strictly necessary session cookies.

Food restrictions can reveal health information (an allergy, coeliac disease, a medical diet) and religious belief (halal, kosher and other rules). Under the GDPR these are special categories of personal data. We therefore:

• ask your explicit consent before storing any restriction, separately from the general terms;
• let you withdraw that consent at any time in the app, which removes the restrictions;
• never use restriction data for anything except checking food for your household;
• never share it with anyone, except the processors in section 6 who store it encrypted on our behalf and are contractually forbidden from using it.

A restriction you record for another adult in your household should be recorded with their knowledge. Restrictions for children are recorded by a parent or guardian, who can view and remove them at any time.

Unresolved before publication: PRODUCT BUILD ITEM, not text: the explicit-consent step must exist in onboarding before this section is published. A separate, unticked, plainly-worded consent at the moment restrictions are first entered, and a withdrawal control in the app that removes them.

• Explicit consent (Art. 9(2)(a)) for your household's restrictions and any other special-category data.
• Contract (Art. 6(1)(b)) for account, household setup, pantry, lists and decision history: the service you signed up for.
• Consent (Art. 6(1)(a)) for analytics cookies.
• Legitimate interest (Art. 6(1)(f)) only for security, error logging and abuse prevention. We do not rely on legitimate interest for anything involving your restrictions.

All personal data is stored in the European Union.

Unresolved before publication: Google Analytics: current data-transfer status and safeguards, to be stated accurately by counsel. Merchant of Record row to be added from M7 (payments, VAT, invoices; they are controller for payment data).

Restaurant and venue information (Thuisbezorgd, Uber Eats, Google Maps via SerpAPI, OpenStreetMap) flows to us as public menu and venue data; none of your personal data flows to them.

We will update this table whenever a processor changes, and the “last updated” date with it.

As long as your account is active. Delete your account (Settings > Account > Delete account) and all personal data is permanently removed within 30 days. Withdraw consent for restrictions without deleting the account, and the restrictions are removed while the rest stays.

Unresolved before publication: Backup roll-off period, in days, after deletion. Engineering to confirm.

Access, correction, erasure, portability (a machine-readable export), restriction, objection, and withdrawal of consent at any time without affecting what happened before. Exercise any of them in the app or via privacy@fuda.app; we respond within one month. You can always complain to the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

Three kinds, and no more: strictly necessary (sign-in, session, your language and market choice), and, only with your consent, Google Analytics to understand how the site is used. No advertising cookies, no cross-site tracking, ever. The consent banner's two choices are equal buttons on purpose.

Unresolved before publication: Link to the cookie settings control, so a reader can change their mind from this page.

If a data breach ever affects your personal data, we notify the Autoriteit Persoonsgegevens within 72 hours where required, and we tell you directly if there is any meaningful risk to you, in plain language, including what happened and what we are doing.

We change this page only when reality changes, we date every version, and for any change that matters (new processor, new purpose, new data) we tell account holders by email before it takes effect. Old versions remain available on request.

privacy@fuda.app. A person answers, within a month at the outside, usually much faster.