Privacy Notice

1. Who we are

onehp.app ("we", "us") operates this service and is the data controller for personal data processed in connection with it.

2. Data we collect

• Account data: email address, display name, hashed password.
• Usage data: recipes you generate, configuration choices, credit balance.
• Technical data: IP address, browser/device identifiers, log data.
• Support data: messages you send us.

Payment card details are collected and processed by Paddle, not by us.

3. Why we use it

• To create your account and provide the service (contract performance).
• To process payments and grant credits via Paddle (contract performance).
• To prevent fraud and abuse and maintain security (legitimate interests).
• To improve the product and respond to support requests (legitimate interests).
• To send service-related emails such as password resets (contract performance).

4. Who we share with

• Hosting and infrastructure providers (Lovable Cloud / Supabase) to operate the service.
• Paddle, our Merchant of Record, for sale of the product, subscription management, payment processing, tax compliance, and invoicing.
• Professional advisers (legal, accounting) where necessary.
• Authorities where required by law.

5. Retention

We keep account and usage data for as long as your account is active and for a reasonable period afterwards for legal and accounting purposes, after which data is deleted or anonymised.

6. Your rights

Depending on your jurisdiction you may have rights to access, correct, delete, restrict or object to processing of your personal data, to data portability, to withdraw consent, and to complain to your local data protection authority. Contact us to exercise any of these rights.

7. International transfers

Where personal data is transferred outside the UK/EEA we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

8. Security

We use appropriate technical and organisational measures including encryption in transit and at rest, access controls, and audit logging.

9. Cookies

We use essential cookies and local storage to keep you signed in and to remember your preferences. We do not use marketing cookies.

10. Contact

For privacy questions, contact us through the support channels listed on our site.