Privacy notice

PinkPantherLabs [LEGAL FORM AND REGISTERED NAME], [SERVICEABLE ADDRESS]. Privacy contact: support@atourtable.de.

We process account identifiers, login and security records, household membership, age bands, food preferences, allergies, dislikes, portions, weekly plans, meal feedback, shopping lists, subscription state and support correspondence.

For the optional budget feature, adults may upload receipt images or PDFs and confirm extracted merchant, date, currency, totals and line items. Receipt originals can contain personal or payment-related details; users should cover information that is not needed for grocery tracking.

Data is processed to provide and secure the contracted service, create family meal plans, synchronize household activity, administer subscriptions and respond to requests. The final notice must map each purpose to the legally reviewed GDPR basis, including contract performance, legal obligations, legitimate interests and consent where applicable.

A household owner may create profiles for family members and invite an older child to connect a login. The household owner is responsible for having the authority required to provide a minor's information. Child accounts cannot access receipts, budgets, billing or household administration.

Meal constraints and receipt contents may be sent to OpenAI to generate recipes or extract receipt fields. Requests are configured not to store generated API responses for later retrieval. AI output can be wrong and remains subject to user review. The final notice must document the applicable data-processing terms, transfer mechanism and retention configuration.

The service currently relies on Convex for application data and private file storage, Vercel for the web application, OpenAI for recipe generation and receipt extraction, Stripe for checkout and subscription management, and Brevo for transactional emails. Better Auth provides the authentication software. Final processor identities, locations, safeguards and links must be verified against signed agreements before launch.

At Our Table uses storage necessary for account sessions, security and preserving an authentication destination. No advertising or non-essential marketing analytics are included in this release. If that changes, the consent and notice design must be reassessed before deployment.

Account and household data is kept while the account is active and then according to the final legally reviewed deletion schedule. Receipt originals remain in private storage until an authorized adult deletes them; confirmed extracted records follow the household retention schedule. Payment records may be retained where tax or commercial law requires it.

Depending on the circumstances, data subjects may have rights of access, rectification, erasure, restriction, portability, objection, withdrawal of consent and complaint to a supervisory authority. Contact support@atourtable.de. The competent supervisory authority is [AUTHORITY AND CONTACT DETAILS].

The final notice must identify any transfers outside the EEA and the safeguards used. We use access controls, household isolation, private storage, transport encryption and role-based authorization, but no online service can promise absolute security.