Privacy.

We keep what we need to cook your dinner and get it to your desk, and nothing else. No advertising, no tracking, no sale of anything about you.

What we keep

Your name, email, mobile (if you give it), building and unit.
Your plan, nights, pauses, orders and, once billing opens, your payment history (Stripe keeps the card itself).
The agreements you ticked, with the date and the version of the words.
Sign-in records: when a code was sent and used, the browser type and the country of the connection.
If you choose to tell the kitchen your allergies: that list and your note. See below.

What we do with it

Cook and label your dinners, hand them to the right desk, send the Sunday menu and order messages, bill you, and answer when you write. We text you only if you ticked the texting box; reply STOP to end.

Who sees it

The kitchen (Jay) sees names, units, nights and, where you chose to share it, allergen flags.
Your building's desk sees your name and unit on the bag.
Our providers process data for us under their own terms: Cloudflare (hosting and database), Resend (email), Stripe (payments), Twilio (texts, once on). Each is in the United States.
Nobody else, unless the law requires it.

Your allergen information (consumer health data)

Under Washington's My Health My Data Act, food allergies and intolerances are consumer health data. We collect them only when you tick the separate allergen box, use them only to flag dishes for you, keep them in a separate table that the kitchen alone reads, never share or sell them, and delete them when you delete your note, leave the service, or ask. You can see, change or delete them at any time at /account/allergens, or by writing to [email protected]; we answer within 45 days. We do not use geofencing. Questions or appeals go to the same address; you may also contact the Washington Attorney General.

Cookies

Two, both needed to sign you in: one holds your sign-in session for up to 30 days, one holds a pending code for ten minutes. No analytics cookies, no third-party scripts, no scripts at all.

How long

Account records for as long as you are a member and three years after for tax and accounting; sign-in records 90 days; allergen records until you delete them or leave; messages one year.

Your choices

See and change your details in your account. Ask for a copy or deletion of everything we hold by writing to [email protected]; we confirm within 30 days. Deleting your account ends the service.

Security

Encrypted in transit and at rest, access limited to the two people who run Hooga, sign-in by single-use code, no passwords stored. Write to [email protected] (or see /.well-known/security.txt) to report a problem.

Changes

If this notice changes in a way that matters to you, you get an email first.