Privacy Policy

Last updated: August 10, 2026

1. Introduction

CodeBySergen (hereinafter "we", "our", or "MoodDish®") is committed to protecting the privacy of users of its MoodDish® mobile application (hereinafter "the Application").

This Privacy Policy describes how we collect, use, store, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable privacy laws.

2. Data Controller

The data controller is:

3. Data Collected

We collect the following categories of data:

3.1 Data provided directly by the user

  • Email address (at registration)
  • First and last name (optional)
  • Dietary preferences and restrictions
  • Selected moods
  • Favorite recipes

3.2 Automatically collected data

  • Unique device identifier
  • Device type and operating system version
  • Application usage data (pages visited, features used)
  • Performance and diagnostic data

3.3 Sensitive data

Mood-related data is considered sensitive. It is processed solely to personalize recipe suggestions and is never shared with third parties for commercial purposes.

4. Purposes of Processing

Your personal data is processed for the following purposes:

  • Providing and improving the Application's services
  • Personalizing recipe suggestions based on your mood
  • Managing your user account
  • Sending service-related communications (with your consent)
  • Analyzing Application usage to improve it
  • Ensuring security and preventing fraud
  • Complying with our legal obligations

5. Legal Basis for Processing

The processing of your data is based on the following legal grounds:

  • Contract performance: to provide the Application's services
  • Consent: for marketing communications and mood data processing
  • Legitimate interest: to improve our services and ensure security
  • Legal obligation: to comply with regulatory requirements

6. Retention Period

Your personal data is retained for the following periods:

  • Account data: for the duration of your registration, then 3 years after the last activity
  • Mood data: maximum 12 months
  • Browsing data: maximum 13 months
  • Billing data: 10 years (legal obligation)

Upon expiry of these periods, your data is permanently deleted or anonymized.

7. Data Sharing

Your data may be shared with:

  • Technical service providers: hosting, analytics, customer support
  • Payment partners: for transaction processing (Apple In-App Purchase)
  • Artificial intelligence providers: see section 7.1 below
  • Competent authorities: when legally required

We never sell your personal data to third parties. All our service providers are bound by strict contractual confidentiality obligations.

7.1 Generative Artificial Intelligence Models

MoodDish relies on generative AI models provided by third parties to power several features of the Application. Depending on the feature used, the following functional data may be transmitted to these providers:

  • Moody Chatbot: your conversation messages (to detect your mood)
  • AI Recipe Generator: the ingredients, dietary restrictions, and preferences you enter
  • Video to Recipe Import: the audio transcript of the submitted video (YouTube, TikTok, Instagram)
  • Moody Chef AI: your messages and dietary preferences
  • Cooking Assistant: your questions and the context of the recipe being prepared
  • Content Moderation: the text of comments you publish in the community

No personally identifiable information (name, email address, Apple ID, Google ID, or device identifier) is included in requests sent to these providers. Only the functional data strictly necessary for each feature is transmitted. All requests are made exclusively through our servers (MoodDish backend), never directly from the Application.

Our generative AI providers are selected for their GDPR compliance and primarily process data within the European Union. An up-to-date list of subprocessors is available upon request at [email protected].

7.2 Automated Image Moderation

MoodDish uses a third-party image analysis service to automatically detect inappropriate or explicit content in images uploaded by users (profile pictures, community recipe images).

  • Data transmitted: images you upload in the Application
  • Purpose: automatic content moderation (detection of explicit or harmful images)
  • Storage: images are not retained by the provider after analysis; only the moderation result is used

Whenever this processing involves a transfer to a third country, it is governed by the Standard Contractual Clauses adopted by the European Commission. An up-to-date list of subprocessors is available upon request at [email protected].

8. International Transfers

Your data is primarily stored within the European Union. In the event of transfers to third countries, we ensure that appropriate safeguards are in place (standard contractual clauses, adequacy decision).

9. Data Security

We implement appropriate technical and organizational measures to protect your data:

  • Encryption of data in transit (TLS) and at rest
  • Strict access controls
  • Access monitoring and logging
  • Regular database backups
  • Strong authentication for admin tools

10. Your Rights

Under the GDPR, you have the following rights:

  • Right of access: obtain a copy of your personal data
  • Right of rectification: correct inaccurate data
  • Right to erasure: request deletion of your data
  • Right to restriction: restrict the processing of your data
  • Right to portability: receive your data in a structured format
  • Right to object: object to the processing of your data
  • Right to withdraw consent: at any time

To exercise these rights, contact us at: [email protected]

You also have the right to lodge a complaint with your local supervisory authority (in France: CNIL : www.cnil.fr).

11. Cookies and Similar Technologies

On mooddish.fr and mooddish.app, Google Analytics is loaded only after you agree. It helps us understand the pages people visit and improve the website, without enabling Google Signals or ad personalization.

You can accept, refuse, or change your choice at any time through the “Cookie preferences” link in the footer.

Types of cookies used:

  • Essential cookies: required for the website and Application to function
  • Analytics cookies: Google Analytics, only after you agree
  • Preference cookies: to remember your consent choice and language

12. Minors

The Application is not intended for persons under 16 years of age. We do not knowingly collect personal data from minors. If you are a parent or guardian and believe your child has provided us with personal data, please contact us.

13. Policy Updates

We may update this Privacy Policy periodically. Any substantial changes will be notified to you by email or through the Application.

We encourage you to review this page regularly to stay informed of our data protection practices.

14. Contact

For any questions regarding this Privacy Policy or your personal data: