Privacy Policy
FIFE: A Vegan Lifestyle ("FIFE", "the App", "we", "us", "our") is a mobile application and website. This policy explains what personal data we collect, why, and the choices you have. We are the "data controller" for the personal data described here under the UK General Data Protection Regulation (UK GDPR) and, where it applies, the EU GDPR.
Questions about this policy or your data? Email hello@fife.earth.
1. Who this policy covers
This policy applies to everyone who uses the FIFE mobile app (Android and iOS) and the FIFE website. FIFE is intended for users aged 16 and over. We do not knowingly collect personal data from anyone under 16 — see Section 9.
2. The data we collect
We practise data minimisation: we only collect what the app actually needs to work.
| Data | Examples | Why we collect it |
|---|---|---|
| Account data | Email address, display name, password (hashed by our auth provider) | To create and secure your account |
| Marketing opt-in | Your email and consent choice, if you join our waitlist or newsletter | To send launch news — only if you opted in; unsubscribe any time |
| User content | Posts, food photos, captions, comments, likes and recipes you share to the Feed | To run the community features of the app |
| UCHE chat content | Messages you send to UCHE, our AI recipe assistant | To provide the assistant and keep conversation continuity |
| Approximate location | City/area-level location from your device when you use nearby search | To show vegan restaurants and organic stores near you. You can deny the permission and search manually instead |
| Usage & analytics | Screens visited, feature interactions, app version, device type, crash diagnostics — via PostHog | To understand how the app is used and fix problems |
| Subscription status | Free or Creator plan, renewal dates, transaction identifiers (via RevenueCat) | To manage billing and unlock paid features |
3. How we use your data
- Provide, maintain and improve the App — UCHE, the Feed, the discovery map, recipes and shopping lists.
- Process subscriptions and unlock Creator features.
- Send service messages (account confirmation, security alerts, policy changes) and — only if you opted in — launch news.
- Moderate user content to keep the community safe and lawful.
- Analyse aggregate usage to decide what to build next.
- Comply with legal obligations (e.g. tax records, lawful requests).
We do not sell your personal data, and we do not use your content to train AI models.
4. Third parties we share data with
We use a small number of carefully chosen processors, each under a contract requiring appropriate safeguards:
| Provider | What they do for us | Where data is processed |
|---|---|---|
| Supabase | Authentication, database and file storage | EU region |
| Google Places API | Restaurant and store results in nearby search | EU / US — queries may include approximate location; governed by Google's terms and the EU-US Data Privacy Framework |
| PostHog | Product analytics | EU cloud |
| RevenueCat | Subscription management (entitlement status, receipts) | US — under Standard Contractual Clauses / Data Privacy Framework |
| Apple App Store / Google Play | Payment processing for subscriptions | Under their own privacy policies; we receive only subscription status, never card details |
| AI model provider (for UCHE) | Generates UCHE's recipe responses from your chat messages | Your chat content is sent to the provider to generate replies; under our API terms it is not used to train their models |
We may also disclose data if required by law, or in connection with a business transfer (you would be notified).
5. International transfers
Our core database and analytics are hosted in the EU. Some processors (RevenueCat, Google) may process limited data outside the UK/EU. Where this happens, transfers rely on adequacy decisions (including the EU-US and UK-US Data Privacy Frameworks) or Standard Contractual Clauses with appropriate safeguards.
6. How long we keep data
- Account data: kept while your account is active; deleted within 30 days of account deletion, unless law requires longer.
- User content: kept until you delete it or your account; anonymised after account deletion.
- UCHE chat history: kept for conversation continuity; deleted with your account or earlier if you clear it.
- Analytics: retained in aggregate or de-identified form for up to 24 months.
- Billing/tax records: kept for the statutory period (typically 6–7 years in the UK) as required by law.
- Waitlist/newsletter: kept until you unsubscribe.
7. Your rights
Under the UK GDPR and EU GDPR you have the right to:
- Access a copy of your personal data
- Rectify inaccurate data
- Erase your data ("right to be forgotten")
- Restrict or object to certain processing
- Data portability — receive your data in a machine-readable format
- Withdraw consent at any time (location, newsletter, analytics) — this does not affect processing already carried out
- Complain to a supervisory authority: in the UK, the Information Commissioner's Office (ico.org.uk); in the EU, your local data protection authority
Delete your account in-app: Profile → Delete my account. For any other data request, email hello@fife.earth — we respond within one month (usually much faster during beta).
8. Cookies and tracking
The mobile app does not use browser cookies. This website uses no tracking cookies and no advertising trackers. In-app analytics (PostHog, EU cloud) collect pseudonymous usage events as described in Section 2.
9. Children
FIFE is not directed at children under 16, and we do not knowingly collect their data. If you believe a child under 16 has created an account, contact hello@fife.earth and we will delete it.
10. Security
We use encryption in transit (TLS) and at rest, hashed passwords via Supabase Auth, and row-level access controls in our database. No system is perfectly secure, but we work to protect your data and will notify you and the relevant authority of any breach where the law requires it.
11. Changes to this policy
If we make material changes, we will notify you in-app (and by email if you opted in) before they take effect, and update the "Last updated" date above. Continued use after the effective date means you accept the revised policy.
12. Contact
Email: hello@fife.earth
Data controller: FIFE: A Vegan Lifestyle (legal entity details available on request via the email above).