Privacy Policy

Welcome to Dinna (the "App"), a mobile application developed and operated by Patchly LLC ("Patchly," "we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Dinna application on iOS, Android, or the Web.

By accessing or using Dinna, you agree to the terms of this Privacy Policy. If you do not agree with the practices described herein, please do not use the App. We reserve the right to make changes to this Privacy Policy at any time and for any reason. We will notify you of any material changes by updating the "Effective" date at the top of this document and, where appropriate, through in-app notification.

We collect information that you provide directly, information generated through your use of the App, and limited device information. We do not collect information from third-party sources beyond what is necessary for authentication.

Dinna uses social sign-in exclusively; you may authenticate using Google or Apple. We do not create or store passwords. Upon sign-in, we receive and store:

• Display name
• Email address
• Sign-in method (Google or Apple)
• Avatar (uploaded photo or illustrated avatar you select)

Authentication is managed via JSON Web Tokens (JWT). We do not have access to your Google or Apple account passwords.

You may optionally provide:

• Age range
• Household size
• Cooking frequency

This data is used solely to improve the App and is not shared with third parties.

• Meals and associated ingredients
• Meal photos (captured via camera or uploaded from gallery)
• Meal schedules and calendar entries

• Group membership and roles (e.g., admin, member)
• Invite codes generated or redeemed

• Weekly meal votes and preferences
• VIP turn assignments

• Ingredient lists and supply inventories
• Items identified via AI-powered Supply Scout (Pro tier only; see Section 5)

• Takeout cost entries
• Budget tracking data

• Meal ratings
• Leftover tracking
• Takeout cost entries from surveys

• Push notification preferences (opt-in/opt-out choices)
• Notification interaction data (e.g., whether a notification was opened)

• Bug reports and feature requests submitted through the App
• Image reports (flagging user-generated content)

• Analytics event tracking for key user actions within the App
• Device and platform information (iOS, Android, or Web)

We do not collect precise geolocation, contact lists, call logs, or other sensitive device data.

When the app crashes or encounters an error, we automatically collect diagnostic data, including device model, operating system version, app version, IP address, and technical details about the error, to help us fix problems. This data is processed on our behalf by Sentry (Functional Software, Inc., USA) and is retained for up to 90 days. It is not used for advertising or profiling.

We use the information we collect for the following purposes:

• Provide and maintain the App: deliver core features including meal planning, group coordination, voting, scheduling, and supply management.
• Authentication: verify your identity through Google or Apple sign-in and manage session tokens.
• Personalization: tailor meal suggestions, voting prompts, and notification schedules to your preferences and group activity.
• AI Features (Pro tier): process kitchen images through OpenAI's GPT-4o Vision API to identify ingredients (Supply Scout) and generate recipe suggestions (Recipe Finder).
• Notifications: send push notifications for group activity, votes, VIP turns, cook assignments, vote deadlines, dinner time alerts, post-dinner surveys, shopping reminders, and milestone events.
• Analytics and improvement: analyze usage patterns to improve App functionality, fix bugs, and develop new features.
• Subscription management: process and manage in-app subscriptions and purchases through RevenueCat.
• Content moderation: review reported images using AI moderation tools to enforce community standards.
• Customer support: respond to feedback submissions, bug reports, and feature requests.

Dinna allows users to upload meal photos and avatar images. We implement the following safeguards:

• Upload validation: all image uploads undergo path validation and ownership verification to prevent unauthorized access.
• Path traversal protection: server-side controls prevent directory traversal attacks on uploaded files.
• AI moderation: when a user reports an image, the reported content is reviewed using AI-based moderation tools.
• User notification: users whose content is found to violate our guidelines are notified of the violation and any actions taken.

Images uploaded to the App are stored securely and are accessible only to authorized users within the relevant group context.

Dinna's Pro subscription tier includes AI-powered features that use OpenAI's GPT-4o Vision model:

• Supply Scout: you may use your device camera to scan your kitchen or pantry. The captured image is sent to OpenAI's GPT-4o Vision API, which processes the image to identify visible ingredients. The identified items are returned to the App and added to your supply list.
• Recipe Finder: based on your current supply list (including items identified by Supply Scout), AI suggests meals and provides links to recipes that can be prepared with available ingredients.

Important disclosures regarding AI features:

• Images submitted to Supply Scout are transmitted to OpenAI's servers for processing.
• OpenAI's use of data is governed by OpenAI's API data usage policies. As of the effective date of this policy, OpenAI does not use API inputs or outputs to train its models.
• We do not retain the raw images sent to OpenAI after the ingredient identification response is received and processed.
• AI features are available only to Dinna Pro subscribers and to users currently in an active fourteen (14) day free trial. Users on the Core (free) tier do not have access to Supply Scout, and no data from Core users is sent to OpenAI.

Dinna sends push notifications and scheduled server-side notifications to keep you informed about group activity.

Push Notifications:
• Group activity updates
• Voting reminders and results
• VIP turn assignments
• Cook assignments

Scheduled Notifications:
• Vote deadline reminders
• Dinner time alerts
• Post-dinner survey prompts
• Shopping reminders
• Milestone notifications

Notification Guardrails:
• Daily cap: a maximum of 3 system-generated notifications per day.
• Quiet hours: no notifications are sent between 10:00 PM and 7:00 AM in your local time zone.

You may manage your notification preferences at any time within the App settings. You may also disable push notifications at the device level through your operating system settings.

Dinna integrates with the following third-party services. Each service's use of your data is governed by its own privacy policy:

• Google (Authentication): Google Sign-In is used for account authentication. When you sign in with Google, we receive your name, email address, and profile photo.
• Apple (Authentication and App Store): Apple Sign-In is used for account authentication on Apple devices. Apple may also process data related to App Store transactions.
• OpenAI / GPT-4o Vision (AI Features: Pro Only): OpenAI processes kitchen images for ingredient identification in the Supply Scout feature. Only images from Dinna Pro subscribers and trial users are sent to OpenAI.
• RevenueCat (Subscription Management): RevenueCat manages subscription state, in-app purchases, and receipt validation for iOS and Android.
• Push Notification Services: Dinna uses Apple Push Notification Service (APNs) for iOS and Firebase Cloud Messaging (FCM) for Android to deliver push notifications.
• Sentry (Crash and Error Reporting): Functional Software, Inc. (dba Sentry, USA) processes crash reports and error diagnostics on our behalf as described in Section 2.12.

We retain your data for as long as necessary to provide the App's services and comply with our legal obligations.

• Dismissed ingredients: purged after 3 weeks.
• Resolved suggestions: purged after 90 days.
• Calendar, VIP, feedback, and budget data: retained indefinitely while your account is active.
• AI-processed images: not retained after ingredient identification is complete.
• Account deletion: upon request, all server-side data is anonymized and purged. An audit log entry is retained to confirm deletion was completed.

Dinna caches certain data locally on your device to enable offline access. This cached data may include meal plans, recipes, ingredient lists, and group information. When your device reconnects to the internet, the locally cached data is synchronized with our servers.

Data stored locally on your device is subject to the security controls of your device's operating system. We recommend using device-level security features (e.g., passcodes, biometrics) to protect locally stored data.

Dinna offers a Dinna Pro subscription tier with additional features, including AI-powered Supply Scout and Recipe Finder.

Free Trial: Upon creating your first Group, you will automatically receive a fourteen (14) day free trial of Dinna Pro features. This trial is administered by Patchly LLC and is not an auto-renewing subscription through the Apple App Store or Google Play Store. At the end of the trial, your account will automatically revert to the Core (free) tier. No charge is applied to your Apple ID or Google account, and no subscription will begin unless you actively subscribe through the App.

Dinna Pro Subscription: If you choose to subscribe to Dinna Pro, subscriptions are processed as auto-renewing monthly subscriptions through the Apple App Store (iOS) or Google Play Store (Android). RevenueCat acts as our subscription management platform, handling receipt validation and subscription state synchronization across platforms. We do not directly collect or store payment card information. Payment processing is handled entirely by Apple, Google, and RevenueCat.

You may manage or cancel your subscription at any time through your device's subscription settings.

Account Deletion: You may request deletion of your account and all associated data directly within the App. Upon receiving a deletion request, all personal data stored on our servers is anonymized and purged, and an audit log entry is retained solely to confirm the deletion was processed.

Data Processing Consent: During onboarding, Dinna presents a Data Processing Consent screen that explains how your data will be collected and used. By proceeding past this screen, you consent to the data practices described in this Privacy Policy.

Image Reporting: If you encounter user-generated content that you believe is inappropriate, you may report the image directly within the App.

Notification Preferences: You may adjust your push notification preferences within the App settings at any time.

Access and Portability: You may request a copy of the personal data we hold about you by contacting us at the address provided in Section 15.

We implement reasonable administrative, technical, and physical security measures to protect your personal information, including:

• JWT-based authentication with secure token handling
• Upload path validation and ownership verification for all file uploads
• Path traversal protection on server-side file operations
• Encrypted data transmission (HTTPS/TLS)
• Server-side audit logging for account deletion requests

While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.

Dinna is not directed to children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information promptly. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at legal@patchly.media.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Effective" date at the top of this document and provide notice through the App. Your continued use of Dinna after the updated Privacy Policy becomes effective constitutes your acceptance of the revised terms.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Patchly LLC
Email: legal@patchly.media

© 2026 Patchly LLC. All rights reserved.