Privacy Policy

Who we are

The Service is operated by:

For privacy questions, please contact us.

When we collect personal data

We collect personal data when you:

• Create an account or sign in using a third-party identity provider (see "Account creation and sign-in" below)
• Use the app to add ratings, journal entries, photos, or other content
• Visit our website
• Contact us for support or other reasons

What personal data we collect

Account creation and sign-in

You can create and access your My Food Rating account in three ways:

• Email and password. You provide an email address and choose a password. We send a verification email to that address; some features require a verified email before you can use them. Your password is stored as a salted cryptographic hash and is never accessible to us in plaintext. We may also send you password reset emails when you request them.
• Apple Sign-In. Apple returns your name and email address (or a private relay email, if you choose "Hide My Email") and a unique Apple user identifier. We do not receive your Apple ID password.
• Google Sign-In. Google returns your name, email address, profile picture URL (if available), and a unique Google user identifier. We do not receive your Google password.

We use this information solely to create and authenticate your My Food Rating account.

How we use your personal data

We use your personal data to:

• Operate and provide the Service, including syncing your data across your devices
• Authenticate you and keep your account secure
• Respond to support requests
• Notify you about important changes to the Service or your account
• Comply with legal obligations

We do not sell your personal data, and we do not use it for advertising.

Legal basis for processing (EEA/UK users)

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under the General Data Protection Regulation:

• Performance of a contract — to provide the Service to you
• Legitimate interests — to keep the Service secure, prevent abuse, and improve product quality
• Consent — where you have given us consent (for example, to access your camera or location)
• Legal obligation — to comply with applicable laws

You can withdraw consent at any time by changing your device permissions or deleting your account.

Sharing your personal data

We do not sell, rent, or trade your personal data. We share it only with:

• Service providers — cloud hosting and infrastructure providers that operate the systems on which the Service runs. These providers act on our instructions and are contractually bound to protect your data.
• Sign-in providers — when you use Apple or Google Sign-In, the relevant provider necessarily learns that you authenticated with us, subject to their own privacy policy.
• Legal disclosures — where required by law, court order, or to protect Trillion's legal rights.

International transfers

We are based in Australia and our infrastructure may store data in countries outside your country of residence. Where we transfer personal data from the EEA, UK, or other regions with data export restrictions, we put in place appropriate safeguards in accordance with applicable law.

Data retention

We retain your personal data for as long as your account is active and for a reasonable period afterwards to comply with legal, accounting, or audit obligations. You can delete your account at any time from within the My Food Rating mobile app — see our Account Deletion page for step-by-step instructions and a summary of what data is removed. When you delete your account, we delete or anonymise the personal data we hold about you, except where retention is required by law.

Your rights

Subject to applicable law, you have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — ask us to correct inaccurate or out-of-date data
• Deletion — ask us to delete your data (including by deleting your account)
• Portability — receive your data in a portable format
• Restriction — ask us to limit how we use your data
• Objection — object to processing that is based on legitimate interests
• Withdraw consent — where processing is based on your consent

EEA/UK users have the rights above under GDPR and may also lodge a complaint with their local data protection authority.

California residents have the right under the California Consumer Privacy Act (CCPA) to know what personal information we collect, request deletion, and not be discriminated against for exercising these rights. We do not sell your personal information.

To exercise any of these rights, please contact us.

Children

The Service is not directed to children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, please contact us so we can delete it. In jurisdictions where the minimum age for digital consent is higher than 13 (such as parts of the EEA, where it can be up to 16), users below that age must have parental consent before using the Service.

Security

We use reasonable technical and organisational measures to protect your personal data against accidental loss, unauthorised access, and disclosure. No system is fully secure, and we cannot guarantee absolute security.

Cookies and similar technologies

Our marketing website (myfoodrating.com) may use cookies that are strictly necessary for the site to function (for example, to remember your session). We do not currently use cookies for analytics, advertising, or tracking.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The current version is always available at this page, and the "Last updated" date will reflect the latest revision. Material changes will be communicated through the Service or by email.

Governing law

This Privacy Policy is governed by the laws of the State of Victoria, Australia, without regard to its conflict-of-laws rules. Nothing in this Privacy Policy limits any non-waivable rights you have under applicable local law.