DishBish
Privacy Policy
DishBish ("we", "us") provides a social recipe-sharing application. This Privacy Policy explains what information we collect when you use the DishBish mobile app and website, how we use it, and the choices you have.
1. Information we collect
- Account information. When you sign in with Apple or Google, we receive a stable identifier and (on first sign-in only) the name and email address you choose to share. We never see your Apple or Google password.
- Profile content. Your display name, handle, avatar, bio, and preferences (language, allergies, theme).
- User-generated content. Recipes, photos, comments, cookbook membership, follows, likes, and reactions you create or submit.
- Device data. Push notification tokens, device type, and basic diagnostic information needed to deliver the service.
- Usage data. Server-side request logs (IP, timestamp, path, status) retained for security and debugging for up to 30 days.
2. How we use information
- To create and operate your account.
- To deliver the social features of the app (feeds, follows, comments, notifications).
- To run AI-assisted features such as recipe import, customization, and translation. Submitted text and images may be processed by Amazon Web Services (AWS Bedrock and AWS Transcribe) under our service agreement.
- To moderate content and enforce our Terms of Service.
- To deliver push notifications via Apple Push Notification Service and Google Firebase Cloud Messaging through AWS SNS.
- To detect and prevent abuse, fraud, and security issues.
3. Sharing
We do not sell your personal information. We share data only with the infrastructure providers we depend on to run the service: AWS (hosting, storage, AI inference, push delivery), Apple and Google (sign-in and push delivery), and Apify (for public social-media metadata fetching when you import a recipe link). Each is bound by a written data processing agreement.
4. Public content
Recipes, comments, follows, and profile fields you publish are visible to other DishBish users. Saved recipes and your private cookbooks remain visible only to you and the people you invite.
5. Data retention
We retain your account and content until you delete your account. You can delete your account at any time from Profile → Delete Account inside the app, or by emailing wisam@armaly.io. Deletion cascades to your recipes, comments, follows, blocks, push tokens, and sign-in identities.
6. Children
DishBish is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child has created an account, please contact us and we will delete it.
7. Your rights
Depending on where you live, you may have rights to access, correct, or delete the personal data we hold about you, and to object to or restrict certain processing. Contact us at wisam@armaly.io to exercise these rights.
8. Security
We use TLS in transit, encrypted storage at rest, short-lived access tokens, and refresh-token rotation with replay detection. No system is perfectly secure; please tell us promptly if you believe your account has been compromised.
9. Changes
We may update this policy from time to time. We will post the updated version with a new "Last updated" date and, where required, notify you in the app.
10. Contact
Questions or requests? Email wisam@armaly.io.