Privacy Policy
This policy explains what personal data HomeTaste (“we”, “us”) collects when you use the HomeTaste app and website (the “Service”), why we collect it, and the rights you have. We are the “data controller” for that data under UK data protection law (UK GDPR and the Data Protection Act 2018).
Who we are
HomeTaste is a marketplace that connects people who cook food at home (“cooks”) with people nearby who want to buy it (“buyers”). We are not the cook, we do not prepare food, and we do not process any payments — buyers pay cooks directly in cash. You can reach us about privacy at hello@hometaste.food.
What we collect
- Account details — your email address and display name. If you sign in with Google, we receive your name, email, and profile picture from Google.
- Approximate location — a location you set (or, with your permission, your device location) so we can show drops near you. We store an approximate area, not your exact address, unless you enter a delivery address for an order.
- Delivery postcode — if you order delivery, we ask for your postcode so we can check the cook actually delivers to your area. We look it up using postcodes.io (see below), and store the postcode and the approximate centre of that postcode area with your order. That centre is an area reference, not your doorstep.
- Cook information — if you become a cook: your self-certification, whether you are registered with your local authority, your cook profile, and the drops, photos, item names, prices, and allergen declarations you publish.
- Orders — the drops you reserve or sell, quantities, pickup/delivery choice, any note you add, redemption codes, and order status.
- Reputation — completed orders, cancellations, and no-shows, used to calculate reputation counters and, where necessary, temporary suspensions.
- Notifications — if you enable push, a device token so we can send order and reminder notifications.
- Technical data — basic information needed to operate and secure the Service (for example, session data and error logs).
We do not collect card or bank details, because no payment is taken online.
Why we use it, and our legal basis
- To provide the Service (create your account, show nearby drops, take bookings, enable pickup/redemption) — performance of a contract with you.
- To keep the marketplace safe and fair (reputation, no-show handling, preventing abuse) — our legitimate interests.
- Precise device location and push notifications — your consent, which you can withdraw at any time in your device or app settings.
- To meet legal obligations — where the law requires it.
What other people see
HomeTaste only works if buyers and cooks can find each other. When you place an order, the cook sees your display name, what you ordered, your fulfilment choice, any note, and — for delivery — the address you provide. When a cook publishes a drop, buyers see the drop details, item and allergen information, an approximate area, the cook’s display name, and public reputation counters. We never show a buyer’s or cook’s email, phone number, or exact home location on public pages.
Who we share data with
We do not sell your data. We share it only with service providers who help us run the Service:
- Supabase — database, authentication, and file hosting (hosted in the EU/UK region).
- Google Firebase Cloud Messaging — to deliver push notifications, if you enable them.
- Google — if you choose to sign in with Google.
- Cloudflare — to serve and secure our website.
- postcodes.io (Ideal Postcodes) — to turn a delivery postcode into an approximate location, so we can check whether a cook delivers to your area. We send only the postcode — never your name, street address, or order details.
Some of these providers may process data outside the UK; where they do, that transfer is protected by appropriate safeguards such as the UK International Data Transfer Agreement or Standard Contractual Clauses.
How long we keep it
We keep your account and order data for as long as your account is active, and for a reasonable period afterwards where we need to (for example, to resolve disputes or meet legal requirements). You can delete your account at any time from the app’s Settings screen, which removes your profile and signs you out.
Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you;
- ask us to correct data that is wrong or incomplete;
- ask us to delete your data (“right to erasure”);
- object to, or ask us to restrict, certain processing;
- ask for a copy of your data in a portable format; and
- withdraw consent (such as for location or push) at any time.
To exercise any of these, email hello@hometaste.food. You also have the right to complain to the UK’s Information Commissioner’s Office (ICO) at ico.org.uk.
Children
HomeTaste is intended for people aged 18 and over. It is not directed at children, and we do not knowingly collect their data.
Changes to this policy
We may update this policy from time to time. When we make a significant change, we will update the date above and, where appropriate, let you know in the app.