Miredain LLC · A La Carte

Privacy Policy

Effective August 14, 2026

This policy replaces the A La Carte Privacy Policy dated August 13, 2026.

1. Who we are

A La Carte (the "App") is published and operated by Miredain LLC, a single-member limited liability company formed in California, United States. Miredain LLC is the controller of the personal information described here.

Contact us at support@alacarte.recipes, or in the App at Profile → Contact Support.

2. What we collect

Account information. Your email address, your name, and optionally an avatar photo or a selected colour. If you sign in through a third-party identity provider, we receive only the identifiers you authorise through that sign-in flow.

Profile and dietary information. Dietary preferences, allergies and intolerances, household details, and goals that you provide during onboarding or by editing your profile. See section 3 — this category gets extra protection.

Your content. Recipes you save, import, or generate; ingredients, meal plans, grocery lists, pantry items, notes, and photographs you upload; and feedback you send us.

Usage data. Which features you use and how often, plus basic device information such as device model, operating-system version, app version, and language.

Subscription status. Whether a subscription is active, which plan, and when it renews. We do not receive or store your payment card details — the app store processes payment and shares only limited status information with us.

Crash and error reports. When the App crashes or hits an error we receive a technical report, such as a stack trace and app state, to help us fix it. These reports are not intended to contain the contents of your recipes or messages.

3. Your dietary and allergy information

Information about allergies, intolerances, and medical dietary requirements is health-related information. Under the GDPR and UK GDPR it is a special category of personal data, and several other laws treat it as sensitive.

We handle it on these terms:

• You choose whether to provide it. The App works without it; you will simply not get allergen flagging or diet-aware suggestions.
• Where the law requires a special basis, we rely on your explicit consent, which you give by entering the information for the purpose of receiving those features. You may withdraw it at any time by removing the information in your profile, which stops that processing going forward.
• We use it only to flag ingredients, filter and adapt recipes, and tailor suggestions for you.
• We do not use it for advertising or profiling, we do not sell or share it, and we do not disclose it to anyone except the service providers who help operate the features that need it.
• It is sent to an AI provider only when needed to produce a result for you, such as checking a recipe against your restrictions.

Please read section 3 of the Terms of Service. Allergen flagging is generated automatically and can be wrong. It is not a substitute for reading labels or for medical advice.

4. How we use information

We use personal information to:

• provide the App's features — saving, importing, generating, organising, planning, and shopping for recipes;
• personalise recipes and suggestions to your dietary profile and household;
• process and manage subscriptions;
• respond to support requests and feedback;
• diagnose crashes and technical problems;
• understand which features are used so we can decide what to build;
• send transactional messages about your account, subscription, or security, and notice of material changes to these terms;
• detect and prevent abuse, and comply with legal obligations.

5. Artificial intelligence

The App uses third-party AI models to generate recipes, extract recipes from webpages, images, and video, transcribe audio, and analyse dietary information.

When you use one of those features, the content needed to produce the result — such as a link, an image, recipe text, or the relevant part of your dietary profile — is transmitted to an AI provider, which processes it on our instructions and returns a result.

Your account information, dietary and allergy information, photographs, and conversations with our assistants are never used to train artificial-intelligence models.

Recipe content you create or import — titles, ingredients, and instructions — may be used by us or by our AI providers to improve model quality. Where it is, it is used in de-identified form that is not linked to your account. If you would prefer your recipe content was not used this way at all, email support@alacarte.recipes and we will exclude it.

6. What we do not do

• We do not sell or rent your personal information, and we do not disclose it for cross-context behavioural advertising.
• We do not run advertising in the App or embed advertising trackers.
• We do not use your personal information, dietary or allergy information, photographs, or conversations with our assistants to train AI models.
• We do not use your dietary or allergy information for anything except the features that need it.

7. Legal bases

If you are in the European Economic Area or the United Kingdom, we rely on:

• Performance of a contract — to provide the App and your subscription.
• Legitimate interests — to secure the service, prevent abuse, fix defects, and improve the App, where not overridden by your rights.
• Consent — for dietary and allergy information (see section 3), and anywhere else we ask. You may withdraw it at any time.
• Legal obligation — where the law requires us to process or retain information.

8. Service providers

We rely on third parties to operate the App. Each performs a specific function, may access personal information only to perform it, is bound to keep it confidential, and may not use it for its own purposes. The categories we use are:

• Hosting, database, and file storage — running the App's backend and storing your content.
• Authentication — signing you in, including optional third-party sign-in.
• Artificial-intelligence providers — generating recipes, extracting content, transcribing audio, and analysing dietary information.
• Content extraction — retrieving recipes from webpages and social-media posts.
• App stores and subscription management — processing payments and tracking subscription status.
• Email delivery — sending transactional and support email.
• Crash reporting and product analytics — diagnosing errors and understanding feature usage.
• Domain and DNS services.

We will provide the current list of named service providers on request. Email support@alacarte.recipes.

Other disclosures. Apart from the service providers above, we may disclose personal information:

• where the law requires it — for example in response to a subpoena, court order, warrant, or a lawful request from a government, regulatory, or law enforcement body;
• to our professional advisers, such as lawyers, accountants, and insurers, where they need it to advise us and are bound to keep it confidential;
• to establish, exercise, or defend a legal claim, or to protect the rights, safety, or property of you, us, or anyone else;
• to a buyer or successor, if Miredain LLC is involved in a merger, acquisition, financing, or sale of assets. We will require them to honour this policy for information transferred, and we will tell you before your information becomes subject to a different policy.

We will tell you about a legal demand for your information unless we are prohibited from doing so or it would be futile or dangerous.

9. Retention

• We keep your account and content for as long as your account is active.
• If you delete your account, we delete your recipes, photographs, pantry, grocery lists, meal plans, and profile within 30 days.
• Backups containing your data may persist for up to 90 days before they cycle out.
• De-identified, aggregated analytics may be retained longer to inform product decisions. This data cannot reasonably be linked back to you.
• Correspondence is kept while it is useful for support and record-keeping.
• After you delete your account we may keep a limited amount of information where we have to — to complete a transaction you started, to resolve a dispute, to enforce our agreements, to meet a legal or tax obligation, or to keep the App secure. We keep only what that purpose needs, and only for as long as it needs it.

10. International transfers

Miredain LLC operates from the United States. If you use the App from outside the United States, your information is transferred to and processed in the United States, where data-protection law differs from that of your country.

Where we transfer personal information out of the European Economic Area or the United Kingdom, we rely on an appropriate safeguard — typically the European Commission's Standard Contractual Clauses, or a transfer to a country covered by an adequacy decision. You may ask which safeguard applies to a particular transfer.

11. Your choices in the App

You can, at any time:

• review and edit your profile, dietary information, recipes, and photographs;
• export your saved recipes via Profile → Export Recipes;
• delete individual recipes, photographs, or profile fields;
• delete your account via Profile → Account Settings → Delete Account.

12. Your rights

These rights are available to everyone who contacts us, wherever you live.

You may ask us to access the personal information we hold about you and provide a copy in a portable format; correct anything inaccurate; delete it; restrict or object to a particular use; or withdraw consent where we relied on it.

Email support@alacarte.recipes. We will respond within 30 days. We may need to verify your identity, and we may decline where the law requires us to keep something — in which case we will tell you why. We will not discriminate against you for exercising these rights.

Requests are free. If a request is repetitive or clearly excessive we may charge a reasonable fee that reflects what it costs us to answer, or ask you to narrow it — and we will tell you before we do either.

Who is responsible. Rob Bush, Managing Member of Miredain LLC, is the person responsible for the protection of personal information, and is our designated data protection officer where one is required. Reach him at support@alacarte.recipes, or by post at the address in section 17.

If we refuse a request. If we decline your request in whole or in part, we will tell you why within the same 30 days. You may appeal by replying to that message, or by emailing support@alacarte.recipes with "Appeal" in the subject line. A different review of the decision will be carried out and we will write to you with the outcome, and our reasons, within 45 days.

If you are still unhappy. You can complain to a regulator. In the United States that is the attorney general of your state, or the Federal Trade Commission at reportfraud.ftc.gov. In the United Kingdom it is the Information Commissioner's Office. We would rather you told us first, and we will not treat you any differently for complaining.

California. You have the rights to know, access, correct, delete, and opt out of sale or sharing, and not to be discriminated against for exercising them. You may make an access request up to two times in a 12-month period. We do not sell or share personal information as the CCPA defines those terms, so there is no opt-out to exercise. The categories we may have collected in the preceding twelve months are: identifiers; commercial information (subscription status); internet or electronic network activity (feature usage and diagnostics); user content you provide; and sensitive personal information in the form of health-related dietary and allergy details, which we use only to provide the features you asked for and never to infer characteristics about you.

Washington and Nevada. Information about your allergies, intolerances, and medical dietary requirements is consumer health data under Washington's My Health My Data Act and Nevada's health data law. How we collect, use, and share it, and the rights you have over it, are set out in our Consumer Health Data Privacy Policy. We do not sell consumer health data.

Canada. You have the rights above under PIPEDA, and if you are in Quebec, under Law 25. The person responsible for the protection of personal information is named above. You may complain to the Office of the Privacy Commissioner of Canada, or to the Commission d'accès à l'information du Québec.

Australia and New Zealand. We handle personal information in line with the Australian Privacy Principles and, in New Zealand, the Privacy Act 2020. You may complain to the Office of the Australian Information Commissioner, or to the New Zealand Privacy Commissioner.

Singapore. Our data protection officer under the PDPA is named above. You may complain to the Personal Data Protection Commission.

European Economic Area and United Kingdom. You also have the right to complain to your national supervisory authority; in the UK, the Information Commissioner's Office. We have not appointed a Data Protection Officer under the GDPR, because the nature and scale of our processing does not meet the threshold that requires one.

Other jurisdictions. If another privacy law protects you — including Brazil's LGPD or South Africa's POPIA — the rights above are available to you and we will handle your request under the law that applies.

13. Children

A La Carte is not intended for children under 13, or under 16 in the European Economic Area where local law sets that age. We do not knowingly collect personal information from children below those ages. If you believe a child has given us personal information, email support@alacarte.recipes and we will delete it.

14. Security

We take reasonable technical and organisational measures to protect your information, including encryption in transit, access controls, and reputable infrastructure providers.

No method of transmitting or storing information is completely secure, and we cannot guarantee absolute security. If a breach affects your personal information, we will notify you and the relevant regulators where the law requires it, without undue delay.

Your part matters too: use a password you have not used elsewhere, do not share your account, and tell us at support@alacarte.recipes as soon as anything looks wrong.

15. Third-party content

The App imports content from websites and social-media platforms. Visiting or importing from those sources is subject to their own privacy practices, which we do not control. We are not responsible for them.

16. Changes to this policy

We may update this policy. When we do, we will change the effective date above and post the revised policy in the App and at alacarte.recipes/privacy.

If a change materially affects how we handle personal information, we will give notice — in the App or by email — before it takes effect.

17. Contact

Miredain LLC
601 Cedar St #1009
Berkeley, CA 94710
United States

Email: support@alacarte.recipes
In the App: Profile → Contact Support