Privacy Policy

Last updated: 9 March 2025

Let Me Feed You ("LMFY", "we", "us") is operated by Box of Clicks Ltd, a company registered in England and Wales (company number 06806922, VAT number GB946444891).

We take your privacy seriously. This policy explains what information we collect, why we collect it, and how we handle it.

1. What we collect

If you create an account (hosts)

• Authentication data - email address and name, managed by our authentication provider Clerk. We do not store your password.
• Event data - event names, dates, locations, menus, and dishes you create.

If you join as a guest (no account required)

• Display name - the name you choose to show to other guests and the host.
• Dietary information - allergies and dietary preferences you choose to share, used to flag potential issues with dishes at your event.
• RSVP status - whether you're attending.

Automatically collected

• Push notification tokens - if you opt in to notifications, we store the subscription endpoint to send you updates about your events.
• Local storage - we store your current event session and last visited page locally in your browser. This data never leaves your device.

What we don't collect

• We don't use analytics cookies or tracking pixels.
• We don't run ads or share data with advertisers.
• We don't track you across websites.
• We don't collect payment card details - payments are handled entirely by our payment provider, Polar.

2. Why we collect it

All data we collect is used solely to provide the LMFY service:

• To run your dinner events - showing guest lists, menus, and dietary information to hosts and guests.
• To flag allergen conflicts between dishes and guests' dietary needs.
• To send push notifications about event updates (only if you opt in).
• To let hosts manage their events across devices (account holders only).

3. Who processes your data

• Cloudflare - hosts our website and database (UK/EU data centres). Cloudflare privacy policy.
• Clerk - handles authentication for account holders. Clerk privacy policy.
• OpenAI - dish names are sent to OpenAI to look up likely ingredients for allergen checking. No personal or dietary data is included in these requests.

4. How long we keep it

• Event data is kept for as long as the event exists. Hosts can archive or delete events from their Account page at any time.
• Unowned events (created without an account) are automatically archived after their date has passed and deleted after 6 months of inactivity.
• Account data is kept until you delete your account.
• Push notification subscriptions are removed when they expire or when you unsubscribe.

5. Your rights

Under UK GDPR, you have the right to:

• Access your data - ask us what we hold about you.
• Correct your data - update your name, dietary preferences, or other details at any time through the app.
• Delete your data - hosts can delete events; guests can ask hosts to remove them; account holders can delete their account.
• Object to processing or request data portability.

To exercise any of these rights, contact us using the form on our Help page.

6. Cookies and local storage

We use only essential cookies required for authentication (set by Clerk when you sign in). We do not use any analytics, advertising, or tracking cookies.

We use browser local storage to remember your current event session and last visited page. This data stays on your device and is not sent to our servers.

7. Children

LMFY is not directed at children under 13. We do not knowingly collect data from children under 13.

8. Changes to this policy

We may update this policy from time to time. We'll update the date at the top of the page when we do. Continued use of the service after changes constitutes acceptance of the updated policy.

9. Contact

If you have questions about this policy or how we handle your data, contact us via the Help page.

Box of Clicks Ltd
Company number: 06806922
VAT number: GB946444891
Registered address: available on Companies House