Privacy Policy

Who controls your data

The data controller for Peas of Mind is TECHLEAK LTD, a company registered in England and Wales (company number 17432399), registered office 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. For anything about your data, email support@peasofmind.co.uk.

What we collect

Your email address, used to sign you in and identify your household. If you sign in with Apple or Google, we also receive the name that service shares with us, if you let it.

The content you and your household members add — recipes, ingredients, meal plans, grocery and pantry items, to-dos, and any child profiles you create for meal planning.

If you send us feedback: your message, the type of feedback, and basic device/app-version details so we can reproduce what you're seeing. We keep it as a support ticket together with your email address, so we can reply to you and keep the conversation in one place. It is deleted when you delete your account.

If a recipe link will not import and you tap Report this link: the link, the message you were shown, and your app and device details. We keep it as a support ticket together with your email address, so we can make that website work and tell you when it does. It is deleted when you delete your account.

Basic technical diagnostics if the app crashes or errors, so we can find and fix the cause.

Your phone's time zone (for example Europe/London), so reminders arrive at your local time. It also tells us roughly which part of the world the app is used in.

When someone tries to create a new account, we note when it happened, how (email code, Apple or Google) and the part of the email address after the @, so we can spot and stop automated or abusive sign-ups. If a sign-up is refused because the address or its domain has been blocked for abuse, we keep that full address with the note. These notes are deleted after 90 days.

What we use it for

Solely to run the app: keeping your household in sync across devices, signing you in, and responding to feedback or support requests.

We do not use your data for advertising, and we do not build advertising profiles.

Anonymous usage counts

To see which parts of the app are used and to improve it, the app counts how often each screen is opened and sends those totals to us, together with the country or region your phone is set to (for example "GB"). The counts carry no name, email, account, household or device identifier and none of your content, and they are added into daily totals, so they cannot show what any one person did. We do not look at your IP address or your location for this.

You can switch this off at any time in Settings → Privacy & Terms → Share anonymous usage, and nothing is counted or sent after that. Knowing how many people sign up, and how many items households add, comes from the data your account already holds to run the app, and is only ever looked at in total.

Who we share it with

We do not sell your data, and we do not share it with third parties for their own marketing or advertising purposes.

A small number of service providers process data on our behalf, strictly to help us run the app, and are contractually restricted from using it for anything else:

• Supabase — hosts our database, authentication, and file storage (EU region).
• Amazon Web Services (AWS SES) — delivers sign-in, notification and support emails.
• Mailgun (EU region) — receives your email replies to our support messages and passes them to us.
• Sentry — receives crash and error diagnostics so we can fix bugs.

If you choose Sign in with Apple or Sign in with Google, that company confirms who you are and tells us your email address, and your name if you allow it. With Apple you can choose to share a private relay address instead of your real one. We never see your Apple or Google password and get no access to anything else in those accounts. Apple's and Google's own privacy policies cover that sign-in step.

If push notifications are enabled on your device, Apple's and/or Google's push notification services deliver them — they see that a notification was sent, not its content.

If you turn on Weather in Settings › Home screen, your phone asks Open-Meteo (open-meteo.com) for the forecast, sending only your approximate location rounded to about 1 km. We never receive or store that location, and nothing is sent while Weather is off.

If you connect Microsoft Outlook in Settings › Planner & Calendars, your phone opens Microsoft's own sign-in page (so we never see your password) and then asks Microsoft for your calendars and their events, read-only. They go straight from Microsoft to your phone: we never receive or store them, and nothing is sent to Microsoft while Outlook is not connected. The sign-in is kept in your phone's secure storage and removed when you disconnect it, leave a household or delete your account. Microsoft's own privacy statement covers that sign-in step.

That list is current as of the date at the top of this page. If we add or replace a provider we will update this page and change that date, and if the change is a material one we will email you about it rather than leaving you to find it here. Any provider we use is contractually held to protect your data to the same standard we do, and we stay responsible for what they do with it.

Where your data lives

Our primary database and file storage are hosted in the EU (London). Some of our service providers above may process data outside the EU/UK as part of delivering their service (for example, email delivery); where that happens, it is covered by that provider's own standard safeguards for international transfers.

How long we keep it

We keep your data for as long as your account and household exist. If you delete your account (Settings → Data & privacy → Delete account), your household's data is permanently deleted and cannot be recovered. If you leave a household, or are removed from one, your personal to-do lists and events made for you move with you to a household of your own, your notes on that household's board are removed, and everything you shared stays with the household. We keep encrypted backups of our database for disaster recovery; deleted data disappears from them automatically within 90 days. We email you a short note when you delete an account or a household. If a household's free trial ends and nobody subscribes, it becomes read-only: everyone in it can still sign in and look at everything, but nothing can be added or changed. If nobody in a read-only household signs in for 12 months, we email everyone in it 30 days and again 7 days beforehand, and then delete the household and its data; signing in or subscribing in that time keeps it. If you signed in with Apple, deleting your account also withdraws Peas of Mind's access to your Apple ID.

Peas of Mind is not a backup service. We keep the data you add so the app works, but you should not treat it as the only copy of anything you would mind losing — use Settings → Data & privacy → Export my data to keep your own.

Your rights

Under UK GDPR, you can ask to access, correct, or delete your personal data, and you can ask us what we hold about you at any time.

You can export a full copy of your household's data yourself at any time from Settings → Data & privacy → Export my data.

You can delete your account and all associated data yourself from the same screen.

For anything else — including a request we haven't built a self-service option for yet — email us at support@peasofmind.co.uk and we'll action it.

If you're unhappy with how we've handled your personal data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk or on 0303 123 1113. Complaining to us first is not a condition of going to the ICO — you can approach them at any time.

Security

We use industry-standard measures to protect your data — encrypted connections, access controls, and reputable, security-audited service providers.

You sign in with a one-time code sent to your email address, or with your Apple or Google account. Whichever you use is effectively the key to your household. Keeping that account secure — and not leaving it signed in on a device other people use — is the one part of this we cannot do for you.

No system can be guaranteed 100% secure. If we become aware of a breach that actually compromises your personal data, we will notify you and the relevant regulator as required by law. Blocked sign-in attempts, automated scanning, and other events that do not compromise anyone’s data are not breaches and are not notified.

Children's data

Peas of Mind is not directed at children, and account sign-in requires an email address. Child profiles are non-login profiles created and managed entirely by a parent or guardian who already holds an account, used only to label who a Planner entry is for — no data is collected directly from a child.

Changes to this policy

If we make a material change to how we handle your data, we'll update this page, change the date at the top, and email you about it before it applies. Smaller changes, such as clearer wording, only change the date.