Privacy Policy

Version 2026-07-24

1. Who we are

Appitee is a food, recipe, creator and local-business discovery platform. This policy explains how Appitee processes personal data when you use the website, mobile application, messaging, business tools, advertising features, payments and support services.

Controller contact: privacy@appitee.com. Replace this address and add the legal entity name, company number and registered address before launch.

2. Information we collect

• Account details, including display name, encrypted email address, username, password hash, role and verification status.
• Profile, dietary, allergy, approximate-location and preference information you choose to provide.
• Posts, recipes, ingredients, comments, likes, saves, follows, messages, reports and media uploads.
• Business profiles, locations, products, dishes, sponsored campaigns, creatives, auction decisions, impressions, clicks, engagement attribution, charges, payments and refund records.
• Security and technical data, including IP-derived security hashes, device/session information, login events, rate-limit records and audit events.
• Consent choices, UTM campaign values and analytics information where you permit those uses.
• Push-subscription details or mobile notification tokens when you enable notifications.

3. Why we use information

We use data to provide accounts and discovery; publish and moderate content; enable messages; show nearby dishes and ingredients; deliver contextual advertising and, with marketing consent, interest-relevant sponsored posts; measure and charge valid advertising interactions; process payments; prevent fraud and abuse; send transactional messages and notifications; comply with legal obligations; and improve the service where consent or another lawful basis permits.

4. Lawful bases

Depending on the activity, we rely on performance of our contract with you, legitimate interests in operating and securing the platform, compliance with legal duties, and consent for optional analytics, marketing storage, location choices and push notifications. You may withdraw consent at any time without affecting earlier lawful processing.

5. Sharing and processors

We may use service providers for hosting, email, Cloudflare security/media services, Stripe payments, Google Tag Manager or Google Analytics when enabled and consented to, Firebase Cloud Messaging for mobile push, and Web Push infrastructure. Payment-card details are handled by Stripe and are not stored by Appitee. We may disclose information where required by law or to protect users and the platform.

6. Sponsored advertising

Sponsored posts are labelled as paid content. Appitee records delivery, viewability, clicks and attributed likes, saves or comments to provide campaign reports, enforce budgets and calculate CPM, CPC or CPE charges. Interest-based relevance is used only where the required marketing consent exists; otherwise delivery is contextual. External sponsored links take you to the advertiser’s website, where that advertiser’s own privacy and cookie practices apply.

7. International transfers

Some providers may process data outside the UK or EEA. Where required, we use recognised safeguards such as adequacy regulations, standard contractual clauses or the UK International Data Transfer Addendum.

8. Retention

We keep information only for as long as needed for the purposes described, security, disputes, accounting and legal obligations. Account deletion removes or anonymises data except where retention is necessary for payments, legal claims, safety records or legal holds. Backup deletion may follow a controlled retention cycle.

9. Your rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability or objection, and may withdraw consent. Appitee provides export, history controls, email change and deletion tools in the Privacy Centre. You may also complain to the UK Information Commissioner's Office or your local supervisory authority.

10. Children

Appitee is not intended for children below the minimum age permitted in their country. Do not create an account if you cannot lawfully consent to the service.

11. Security and changes

We use encryption, access controls, session protections, audit logging and other safeguards, but no system can guarantee absolute security. We may update this policy and will change the published version date when material changes are made.