Privacy Policy

Who we are

Village is developed and operated by [Village Pty Ltd / Sole Trader Name — update before launch]. We are based in Australia and this policy is governed by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

If you have questions about this policy, contact us at privacy@my-village.app.

What we collect

Account information

• Email address and name (required to create an account)
• Password (stored as a one-way hash — never readable)
• Device push notification token (for reminders, if you opt in)

Family and household information

• Your children's first names and ages
• Dietary requirements and food allergies (treated as sensitive data)
• Neuroprofile information you provide (e.g. ADHD, autism) — used only to personalise content shown to you
• Your self-described capacity and routine patterns

Recipes and meal content

• Recipes you save, create, or import
• Photos you upload (stored securely via Cloudflare R2)
• Meal planning choices and preferences over time

Technical data

• App usage logs (e.g. which features are used, errors that occur)
• Device type and iOS version
• IP address (used for rate-limiting and fraud prevention; not retained beyond 30 days)

How we use your information

We use your information only to:

• Operate and personalise the Village app for you
• Generate meal plans and recipe suggestions adapted to your household
• Send notifications you have opted in to receive
• Diagnose bugs and improve the app
• Respond to your support requests

We do not use your information to build advertising profiles, sell to third parties, or train AI models on your personal data.

AI-generated content

Village uses the Claude API (Anthropic) to generate meal suggestions and support content. When content is generated, minimal contextual data (such as dietary constraints and general family structure) may be sent to Anthropic's API. This data is processed under Anthropic's privacy policy and is not used to train their models.

Before Village sends any real user data to AI services, a Data Processing Agreement (DPA) is in place with the relevant provider.

Third parties we work with

• Supabase — database hosting. Data is stored in Australia (ap-southeast-2 region).
• Cloudflare — CDN and media storage. Images are served globally via Cloudflare's network.
• Apple — push notifications (APNs), App Store billing. Subject to Apple's privacy policy.
• Anthropic (Claude API) — AI content generation. See above.

We do not share your personal information with any other third parties except as required by Australian law.

Dietary and neuroprofile data

Information about dietary needs, allergies, and neuroprofile is treated with heightened care. It is:

• Used solely to personalise content shown within the app
• Never shared with advertisers or data brokers
• Never used to make automated decisions that affect your rights
• Stored encrypted at rest

Data retention

We retain your account data for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where we are required to retain records for legal or tax purposes.

Technical logs are retained for a maximum of 90 days.

Your rights

Under the Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your account and personal data
• Complain to the Office of the Australian Information Commissioner (OAIC) if you believe we have breached the Privacy Act

To exercise any of these rights, email privacy@my-village.app. We will respond within 30 days.

Children's privacy

Village is designed for use by adults (parents and caregivers). We do not knowingly collect personal information directly from children. Information about children (e.g. names, ages, dietary needs) is entered by the parent or guardian and is used solely to personalise the app experience for that household.

Security

We use industry-standard measures to protect your data: HTTPS everywhere, encrypted storage, hashed passwords, short-lived access tokens, and role-based access controls. No system is perfectly secure — if you discover a vulnerability, please report it to security@my-village.app.

Changes to this policy

If we make material changes to this policy, we'll notify you via the app or by email before the changes take effect. Continued use of Village after that date constitutes acceptance of the updated policy.

Contact

Privacy enquiries: privacy@my-village.app

Office of the Australian Information Commissioner: oaic.gov.au