LAST UPDATED 25 AUGUST 2026
Here is everything, and why:
Email address — at checkout, when you sign in. It is how you sign in (a 6-digit code), how we send your receipt, and how we reach you about your order.
Name — at checkout, so Ange knows whose plate is whose at the counter.
Phone number — on every order, so Ange can call or text you if something changes about your food.
Delivery address — only if you choose delivery, to bring your order to you. What you type is sent to an address-lookup service to offer suggestions.
Order details and pickup window — when you pay, to cook the right food and have it ready at the right time.
Order history — after each paid order, to show you past orders and run the rewards you opt into.
Push notification token — only if you allow notifications, to tell you your food is ready and when a new menu drops.
Voice input — only while you hold the mic button in "Ask Ange". It is turned into text to suggest a plate; we do not store the audio.
Photos — owner only, when adding a dish. Customers are never asked for photos.
Basic technical logs — throughout, to keep the app working, fix crashes and prevent abuse.
We do not collect your precise location, your contacts, your browsing on other sites, or any advertising identifier. We do not run third-party ad or analytics trackers.
Payments are processed by Stripe. Your card details are entered directly with Stripe and are never sent to our servers or seen by Ange. We receive only a confirmation that payment succeeded, the amount, and a reference we use to find your order.
If you pay with Apple Pay, Google Pay or Cash App Pay, that wallet handles your card details under its own terms. Stripe’s handling of your data is covered by Stripe’s privacy policy.
An order only exists once it has been paid — the payment confirmation is what creates it. That is why we ask you to sign in at that moment and not before.
04
How we use your information
We do not use your information for advertising, we do not profile you, and we make no automated decisions that have a legal effect on you. We use it for exactly four things:
To prepare your order and have it ready in the window you chose.
To contact you about that order — an email or a push if something changes.
To show you your order history and run the loyalty rewards you opt into.
To keep the service secure, prevent fraud, and meet our tax and accounting obligations.
We never sell your personal information. We share it only with the services that make the app work:
Stripe — to take payment and issue refunds.
Supabase — the database and sign-in service where your account and orders are stored.
Resend — to deliver your sign-in codes and order receipts by email.
Apple and Google — to deliver push notifications to your device, and to distribute the app.
Where the law requires it, or to protect someone’s safety.
Order records — for as long as we are required to keep financial records, currently seven years.
Your account — until you ask us to delete it.
Push token — deleted as soon as you turn notifications off.
Voice input — not retained at all.
Depending on where you live you may have additional rights under laws such as the GDPR or the CCPA, including the right to object to processing and to lodge a complaint with your data protection authority. Wherever you are, you can:
Browse the whole menu without an account — there is no sign-up wall.
Turn order and menu-drop notifications on or off in your profile at any time.
Ask us for a copy of the information we hold about you.
Ask us to correct anything that is wrong.
Delete your account and data — see below.
08
Delete your account and data
You can delete your account and everything attached to it at any time, and you do not need the app installed to do it.
Message Ange from the email address on the account — the Contact page has every way to reach her — and ask for it to be deleted. We will confirm within 30 days, and usually the same week.
Deleting removes your name, email, phone number, delivery address, push token, saved dishes and rewards balance. Records of completed orders are kept in an anonymised form, with your personal details stripped out, because we are required to keep financial records.
Ange’s Homemade Goods is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has given us information, contact us and we will delete it.
Your session is stored in your device’s secure keychain. Data in transit is encrypted with TLS, and access to order data is restricted at the database level so that customers can only ever read their own orders. No system is perfectly secure, but we keep the amount of data at risk as small as we can.
If we change this policy we will update the date at the top, and if the change is significant we will tell you in the app before it takes effect.
Questions about your data, or want to make a request? Use the Contact page and message Ange directly. There is no ticket queue — she answers.