Privacy Policy

1. Who we are

Hungry Marvin ("Marvin", "we", "us") is operated by [Company legal name], [Business address]. For privacy questions or requests, email privacy@felican.ai.

2. What we collect

• Account data: your email address, a salted hash of your password (we never store the password itself), and, if you turn it on, two-factor authentication settings and recovery codes. If you sign in with Google, we receive your Google account identifier, email address and basic profile (name) from Google.
• Food profile: your food preferences, goals, dislikes and the "food personality" Marvin builds from the quiz and from your conversations.
• Allergies and dietary needs: stored as rows that you confirm yourself. Marvin's automatic memory never writes allergies on its own.
• Household members: the people you add as eaters in your household (for example a partner or children) and their preferences and allergies. Only add people you are authorised to add.
• Conversations and memory: everything you say to Marvin is saved. In the background, Marvin extracts short facts from conversations (for example "likes cilantro") with a confidence level and a record of where each fact came from. You can see, edit and delete these facts and conversations in the app.
• Guest chats: if you chat with Marvin without signing in, the conversation is kept for 24 hours so a reload does not lose it, then deleted. It is processed by our AI model provider to write Marvin's replies, and it is never used to build a memory profile.
• Delivery addresses: addresses you save, with their coordinates.
• Orders and budget: what Marvin quoted and ordered for you, the status of each order, your spending rules (budget, limits, approved lists, time windows) and a ledger of spending against your budget.
• Reviews: ratings, comments and dish feedback you choose to post as a Hungry Marvin member.
• Optional location and health data: only if you opt in. Location is used for nearby suggestions and positive-reinforcement nudges; health data (for example from a connected health app) is used to track progress toward your goals. You can turn either off at any time.
• Technical data: basic request and error logs (for example IP address and device type) used for security, rate limiting and debugging.

We do not collect or store your payment card number. Payment details are handled by Stripe (see section 5).

3. How we use it

• To run your account and sign you in securely.
• To learn your tastes, plan meals toward your goals and chat with you.
• To search for restaurants and stores near you and to prepare quotes and orders within the budget and autonomy settings you choose.
• To charge your subscription and per-order fees, and to send service emails (verification, password reset, order updates, receipts).
• To show member reviews, moderate them, and prevent abuse and fraud.
• To keep the service secure, reliable and backed up, and to meet legal obligations.

We do not sell your personal information, and we do not use it for advertising.

4. Memory transparency

Nothing Marvin "knows" about you should be a mystery. The Memory page shows each saved fact, how confident Marvin is, and which conversation it came from. You can edit a fact, delete it, or delete a whole conversation. When you delete a fact, we also keep a one-way, keyed fingerprint of it (not the fact text) so that the same fact is not learned again unless you restate it yourself.

5. Who we share data with

We share only what each provider needs to do its job:

• Anthropic Claude models, run through Microsoft Azure AI Foundry process your messages, relevant saved facts, preferences and spending rules so Marvin can reply and plan. We do not send third-party review text from Google to the AI models.
• Google: if you sign in with Google, Google authenticates you. When you search for places or browse nearby restaurants and stores, we send the search text and a location (coordinates) to Google Maps Platform (Places API). Google content, such as ratings, hours, photos and reviews, is fetched live for display and is not stored by us beyond place identifiers. It is shown with Google Maps attribution. Google's use of data is described in the Google Privacy Policy.
• Stripe processes subscription and order payments and stores your payment method. We receive only a reference to it and basic card details such as brand and last four digits. Marvin keeps a budget ledger on top of your saved payment method; we do not hold a stored balance for you.
• Delivery and grocery providers (for example MealMe and Instacart) receive what is needed to quote and place an order: items, delivery address, your name and contact details for the delivery, and order notes. They handle the order under their own terms and privacy policies.
• Resend sends our transactional emails.
• Backblaze B2 stores encrypted database backups, and Microsoft Azure hosts the AI models.
• Other members see your reviews only with your display choice (name or anonymous). Public display removes your identifiers.
• Legal and safety: we may disclose information if required by law or to protect people, the service or our rights. If we are part of a merger or sale, data may transfer to the new owner under this policy.

Our use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. How long we keep data

• Account, preferences, household members, addresses and saved plans: until you delete your account (then purged after a 7-day cooling-off period).
• Conversations: until you delete them or your account. Facts: until you delete them or your account.
• Orders, order items and the budget ledger: 7 years for financial record-keeping, with your identity removed when you delete your account.
• Audit logs: 7 years. Consent records and data-request records: up to 4 years.
• Raw location events: automatically deleted after 30 days, and all deleted if you turn location off. Health data: until you delete it or revoke the connection and remove it.
• Notifications and nudges: 180 days. Unused quotes: 30 days. Spending-rule history you have replaced: 1 year.
• Google call counters (numbers only, no Google content): 13 months.
• Backups: nightly encrypted backups are rotated on a schedule, so deleted data can remain in backups for a limited time before they age out.

7. Your rights and choices

Wherever you live, you can ask us to access, correct, export or delete your personal data, and to stop using it for a purpose you object to. If you are in the EU/UK, you also have the rights to restrict processing, to data portability, to withdraw consent at any time, and to complain to your data protection authority. If you are a California resident (CCPA/CPRA), you have the rights to know, delete, correct and opt out of the sale or sharing of personal information; we do not sell or share personal information for advertising. We will not discriminate against you for exercising these rights.

You can delete facts, conversations, reviews and health or location data directly in the app. To request an export or account deletion, or to use any other right, email privacy@felican.ai. We will verify your identity and respond within 30 days (45 days where the law allows an extension).

Where the GDPR applies, we process data to perform our contract with you, based on your consent (location, health data, optional features), for our legitimate interests (security, fraud prevention, improving the service) and to comply with legal obligations. Your data may be processed in the United States and other countries where our providers operate.

8. Cookies

We use only the cookies needed to keep you signed in and to protect forms and sign-in from forgery (session and security cookies). Sessions last up to 7 days. We do not use advertising or third-party analytics cookies.

9. Security

We use encrypted connections (HTTPS), hashed passwords, optional two-factor authentication, access controls that keep each household's data separate, and rate limiting. Especially sensitive fields (health values, precise location events and push-notification keys) are additionally encrypted in the database, and our database backups are encrypted. No system is perfectly secure, so we cannot guarantee absolute security. Tell us promptly at privacy@felican.ai if you suspect a problem.

10. Children

Hungry Marvin is for adults aged 18 and over. We do not knowingly collect personal information from anyone under 18, and never from children under 13. If you believe a child has created an account, contact us and we will delete it. Adults may add the food needs of children in their household as members of their own household; that information stays under the adult's account.

11. Text messages (SMS) and notifications

If you opt in to check-in texts, we collect your mobile number, the time and exact wording you agreed to, and your IP address and browser, and keep that record as proof of consent. We use your number only to send you Hungry Marvin check-in questions and weekly plan notices, and to read your replies (YES, NO, a number, STOP, HELP). Message and data rates may apply; reply STOP to opt out at any time. We do not sell, rent, or share your mobile phone number or SMS opt-in information with any third parties or affiliates for their own marketing purposes. Our messaging provider (Telnyx) carries the messages for us as a service provider. If you turn on notifications in your browser, we store the push subscription (encrypted) and use it only to send you Marvin's check-ins and plan notices.

12. Changes and contact

We will post changes here and update the date at the top, and tell you by email or in the app if a change is significant. Questions: privacy@felican.ai, [Company legal name], [Business address].