Welcome to Supperclub ("we," "our," or "us"), operated by Society Media Tech.
We respect your privacy and are committed to protecting your personal data.
This privacy policy will inform you as to how we look after your personal data when you visit our websites (including all subdomains and related applications)
and tell you about your privacy rights and how the law protects you.
2. Data We Collect
We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:
Identity Data: includes first name, last name, username or similar identifier.
Contact Data: includes email address.
Technical Data: includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
Usage Data: includes information about how you use our website, products and services.
Financial Data: includes payment card details processed securely through Stripe. We do not store your full card number.
🍽️ Supperclub-Specific Data
In addition to the above, Supperclub collects the following data specific to our family meal planning service:
Household Information: Household size, weekly grocery budget, and dietary preferences/restrictions.
Family Member Data: Names, ages, and food preferences of family members you add for meal voting.
Meal Planning Data: Weekly meal plans, recipe selections, and voting history.
Pantry Inventory: Items you add to your digital pantry, including quantities and expiration dates.
Grocery Lists: Generated shopping lists and item check-off history.
Gamification Data: Quest completions, XP points, achievements, and allowance tracking for family members.
Food Preferences: Dislikes, allergies, and dietary restrictions you specify for meal recommendations.
3. How We Use Your Personal Data
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
Where we need to perform the contract we are about to enter into or have entered into with you.
Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
Where we need to comply with a legal obligation.
🍳 How Supperclub Uses Your Data
Meal Planning: Your dietary preferences, family member data, and pantry inventory are used to generate personalized meal recommendations and weekly plans.
AI Meal Generation: Your preferences may be processed by Google's Gemini AI to suggest recipes. This data is transmitted securely and not retained by Google for training.
Grocery List Generation: We use your meal plans and pantry data to create optimized shopping lists.
Family Voting: Vote data is used to prioritize meals your family will enjoy and track family meal preferences over time.
Fridge Rescue: Expiring pantry items are analyzed to suggest meals that reduce food waste.
Gamification: Quest completion and XP data are used to track family participation and manage allowance rewards.
Notifications: We may email you about expiring pantry items, weekly meal reminders, or subscription updates.
4. Data Storage & Third-Party Services
Your data is stored securely using industry-standard practices:
Database: DigitalOcean Managed MySQL with encryption at rest.
File Storage: DigitalOcean Spaces (S3-compatible) with encryption.
Payment Processing: Stripe handles all payment data (PCI-DSS compliant).
Authentication: Google OAuth for social login (optional).
AI Processing: Google Gemini API for meal suggestions and recipe recommendations.
Email Service: Postmark for weekly reminders and expiring food alerts.
5. Data Retention
📅 Supperclub Data Retention Policy
Active Accounts: Meal plans, pantry data, and family information are retained for the duration of your subscription plus 30 days after cancellation.
Free Tier: Data is retained for 90 days of inactivity, after which meal history may be archived.
Voting History: Family voting data is retained to improve meal recommendations. Aggregated trends are kept indefinitely.
Grocery Lists: Completed grocery lists are retained for 6 months for history/analytics, then archived.
Payment Records: Transaction records are retained for 7 years as required for tax and accounting purposes.
After Deletion: When you delete your account, all personal data (including family members, pantry, and meal plans) is permanently deleted within 30 days.
We will only retain your personal data for as long as reasonably necessary to fulfill the purposes we collected it for,
including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements.
6. Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed:
All data transmitted via HTTPS/TLS encryption
Passwords hashed using bcrypt with secure salting
Regular security audits and penetration testing
Rate limiting to prevent abuse
CSRF protection on all forms
Content Security Policy headers
7. Your Rights (GDPR)
Under certain circumstances, you have rights under data protection laws in relation to your personal data:
Right to Access: Request a copy of your personal data.
Right to Rectification: Request correction of inaccurate data.
Right to Erasure: Request deletion of your personal data.
Right to Portability: Request transfer of your data in machine-readable format.
Right to Object: Object to processing of your personal data.
Right to Restrict Processing: Request restriction of processing.
To exercise any of these rights, please use the "Download My Data" or "Delete Account" features in your account settings,
or contact us directly at the email below.
8. Cookies
We use cookies to maintain your session and preferences. You can manage your cookie preferences at any time using our cookie consent banner.
Essential Cookies (Always Active)
PHPSESSID: Session identifier for authentication (httpOnly, secure). Expires when browser closes.
csrf_token: Protects against cross-site request forgery attacks.
vestige_cookie_consent: Stores your cookie preferences (365 days).
Optional Cookies (Require Consent)
Analytics Cookies: Help us understand how visitors use our site. Only set if you consent.
We do not use advertising or third-party tracking cookies.
9. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page
and updating the "Last Updated" date. We encourage you to review this policy periodically.
10. Contact Us
If you have any questions about this privacy policy or our privacy practices, please contact us at: