Privacy notice

Squelch Ltd is the controller of the personal data Manciple holds. Squelch Ltd is a company registered in England and Wales, number 17405508, registered office 66 Paul Street, London, EC2A 4NA, United Kingdom, and is registered with the Information Commissioner’s Office, registration ZC226129. Contact: [email protected].

What we hold, and why

• Your account: name, email address and sign-in records, to run your account (contract).
• Your household’s data: pantry, recipes, lists and prices you record, to provide the service (contract). Members of your household see it.
• Recipe photos: photos you add to recipes are stored privately with Cloudflare R2 in the EU, and only shown to your household (and to everyone, if you share the recipe). Every photo is re-encoded before it’s stored, which removes its location and camera details. They’re deleted with the recipe.
• Receipts: a receipt photo, screenshot or PDF you upload is read on our own server and then discarded; it is never stored. Your household keeps the items and prices read from it. The shop, product description, price and date are also added to a shared price pool that every household’s split lists use. The pool holds nothing that identifies you, your household or the receipt (legitimate interests: better price estimates for everyone).
• Shared recipes, meal plans and reviews: if you share a recipe or a week’s meal plan, or write a review, it’s shown to everyone on Manciple under your username (not your name or your email). You can stop sharing or delete a review at any time; deleting your account removes them (consent). Your own meal plan is only seen by your household.
• Barcodes: when you scan something, the camera picture stays on your device; only the barcode number is sent, to Manciple and from there to Open Food Facts to look up the product. Which item a barcode is in your pantry is kept with your household (contract). If Open Food Facts doesn’t know a barcode, the name you give it is offered to other households who scan it, never with who you are (legitimate interests: naming products for everyone).
• Billing: handled by Stripe. We keep your plan and subscription status, never card details (contract; legal obligation for accounting records).
• Signed-in devices: for each sign-in we keep the kind of device and browser (“Safari on iPhone”), the country it signed in from, and when it was last used, so you can see them in Settings and sign any out. Not your IP address. They’re deleted when the sign-in ends (contract; legitimate interests: keeping your account secure).
• Server logs: kept briefly to keep the service secure (legitimate interests).

No advertising, no tracking, no selling of data. The only cookies are the ones that keep you signed in.

Where it is, and who helps

Data is stored on our own servers in the UK. Processors: Cloudflare (network, and R2 storage for recipe photos, EU), Stripe (payments), Resend (email, EU). Recipe import fetches the web page you give us from our server. Receipts are read on our own server, not sent to anyone.

How long

Until you delete your account, when it’s erased; backup copies expire within 35 days. Billing records are kept as long as the law requires.

Your rights

You can download all your data and delete your account from your account page. You can also ask us for access, correction, erasure, restriction or portability, or object, by emailing [email protected]. You can complain to the ICO (ico.org.uk).