Privacy Policy

1 Information We Collect

1.1 Information You Provide Directly

• Email address — when you join our waitlist or sign up for early access through the form on our website.
• App account data — when you create an account in the FIX app: name, email address, and password (stored as a secure hash).
• Profile and demographic data — during onboarding you may provide: nationality, household size, marital status, number of children, cooking frequency, cooking proficiency level, income level (optional), preferred cuisines, and cooking instruments owned. This data is used to personalise your recipe and ingredient recommendations.
• Dietary restrictions and food allergies — you may optionally provide dietary preferences (e.g., Halal, Vegetarian, Vegan, Gluten-Free) and food allergies. We use this to filter recipe suggestions appropriately. This constitutes sensitive personal data and is processed only on the basis of your explicit consent at the time of entry.
• Kitchen inventory and grocery data — the ingredients you add to your kitchen pantry and grocery lists within the app.
• User-generated content — any recipes, ingredient lists, pantry data, or other content you create or submit within the app.

1.2 Information Collected Automatically

When you visit our website or use the app, we and our service providers automatically collect certain technical data, including:

See our Cookie Policy for a full breakdown of the cookies and tracking technologies we use.

2 How We Use Your Information

We use the information we collect for the following purposes:

• Provide and improve the Services — to operate, maintain, and develop the FIX app and website.
• Communicate with you — to send waitlist confirmations, product updates, and announcements (you may opt out at any time).
• Analytics and product research — to understand how users interact with our Services and identify areas for improvement.
• Security and fraud prevention — to detect, investigate, and prevent misuse of our platform.
• Legal compliance — to comply with applicable laws, regulations, and legal obligations in the UAE and internationally.

We process your personal data on the following legal bases (to the extent applicable under relevant privacy law):

• Your consent — for marketing emails and certain cookies.
• Legitimate interests — for analytics and product improvement, where such interests are not overridden by your rights.
• Contract performance — to provide the Services you've requested.
• Legal obligation — where required by law.

3 Analytics — PostHog

We use PostHog (posthog.com) to collect analytics data about how visitors use our website. PostHog may record session replays, capture click events, and track page navigation to help us understand user behaviour and improve our product.

Data collected by PostHog is stored on servers in the United States. PostHog is configured to process only anonymised or pseudonymised data for visitors who have not created an account. You may opt out of PostHog tracking at any time by disabling JavaScript or using a browser extension that blocks analytics scripts. For more information, see PostHog's Privacy Policy.

Apple App Tracking Transparency (ATT): We do not track you across third-party apps or websites and we do not use Apple's Advertising Identifier (IDFA). On iOS, you will not be shown an App Tracking Transparency prompt. PostHog analytics in the app uses only the Identifier for Vendors (IDFV), which is an anonymous device-level identifier that Apple provides to app developers and which resets when you uninstall the app. This identifier is never shared with advertising networks.

4 Email Marketing — Mailchimp

When you submit your email address through the waitlist form on our website, your email is stored in Mailchimp (The Rocket Science Group LLC, an Intuit company) and used to send you updates about FIX. Mailchimp is an email marketing platform based in the United States.

• We will only send you marketing emails if you have explicitly opted in by submitting the form.
• Every marketing email we send will include an unsubscribe link. You can opt out at any time.
• We do not sell or share your email address with third parties for their own marketing purposes.

For more information, see Mailchimp's Privacy Policy.

5 Sharing Your Information

We do not sell your personal data. We may share your information only in the following circumstances:

• Service providers — trusted third-party companies that process data on our behalf (e.g., Supabase for backend infrastructure, Sentry for crash reporting, PostHog for analytics, Mailchimp for email delivery). These providers are contractually bound to process data only on our instructions and to maintain appropriate security measures.
• Business transfers — if Hopscotcher Labs is involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.
• Legal requirements — if we are required to disclose your information by law, court order, or governmental authority, or to protect the rights, property, or safety of our company, users, or the public.
• With your consent — for any other purpose, with your explicit prior consent.

Third-Party SDKs & Service Providers Used in the FIX App

The FIX mobile app integrates the following third-party software development kits (SDKs) and services that may collect or process user data:

6 Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.

• Waitlist email addresses — retained until you unsubscribe, or until we determine they are no longer needed for our launch communications.
• App account data — retained for the duration of your account, plus a reasonable period afterwards to comply with legal obligations. You may request deletion at any time (see Section 9).
• Analytics data — retained in pseudonymised form for up to 2 years, subject to PostHog's own data retention settings.

7 International Data Transfers

Hopscotcher Labs is based in the United Arab Emirates. Our service providers (PostHog, Mailchimp) store and process data in the United States. By using our Services, you acknowledge that your data may be transferred to and processed in countries other than your own.

Where required, we rely on appropriate transfer mechanisms (such as standard contractual clauses) to ensure your data receives an adequate level of protection in line with applicable data protection law.

8 Children's Privacy

Our Services are not directed at children under the age of 13 (or a higher age threshold where required by local law). We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected information about a child, please contact us at info@hopscotcherlabs.com and we will promptly delete it.

9 App Permissions & Device Access

The FIX mobile app requests access to certain device features and capabilities. Below is a full list of every permission the app may request, why it is needed, and whether it is required or optional for core functionality.

iOS Permissions

• Camera (NSCameraUsageDescription) — We use this to scan barcodes so you can quickly add ingredients to your kitchen by pointing your camera at a product. This permission is optional (you can add ingredients manually without using the camera).
• Photo Library (NSPhotoLibraryUsageDescription) — We use this to let you attach photos to ingredients from your device's photo library. This permission is optional.
• Notifications (NSUserNotificationsUsageDescription) — We use this to alert you when ingredients are running low and to remind you to update your kitchen inventory. This permission is optional (you can use the app without enabling notifications).

Android Permissions

• NOTIFICATIONS — Used to send you low-stock alerts and kitchen reminders. This permission is optional.
• VIBRATE — Used to provide haptic feedback alongside notification alerts. This permission is optional.
• RECEIVE_BOOT_COMPLETED — Used to reschedule local notifications after a device reboot so that reminders continue working correctly. This permission is optional and only relevant if you have enabled notifications.

We do not request access to your contacts, microphone, precise location, health data, calendar, or any other sensitive device capability beyond those listed above.

10 Your Rights & Choices

Depending on where you are located, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to correct inaccurate or incomplete data.
• Deletion — request that we delete your personal data ("right to be forgotten").
• Restriction — ask us to limit how we use your data in certain circumstances.
• Portability — receive your data in a structured, commonly used, machine-readable format.
• Object — object to our processing of your data for direct marketing or legitimate interest purposes.
• Withdraw consent — where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at info@hopscotcherlabs.com. We will respond within 30 days. We may need to verify your identity before fulfilling your request.

UAE PDPL Rights

As a company registered in the UAE, we process personal data in accordance with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and its Executive Regulations. UAE residents have the right to: access their personal data; correct inaccurate data; request erasure of their data; object to processing; request restriction of processing; and data portability. To exercise any of these rights, contact us at info@hopscotcherlabs.com.

Account Deletion

You can delete your FIX account directly within the app by navigating to Settings → Delete Account. Upon confirmation, your account and all associated personal data will be permanently and immediately deleted from our systems. Alternatively, you may request account deletion by emailing info@hopscotcherlabs.com — we will process your request within 30 days. Upon deletion, all personal data associated with your account will be permanently removed from our systems, except data we are required to retain for legal, tax, or fraud-prevention purposes (retained for up to 7 years where legally required).

11 Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. However, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security and encourage you to use strong passwords and keep your credentials confidential.

12 Third-Party Links

Our website and app may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party sites you visit.

13 Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Where changes are material, we will notify you by email (to the address associated with your account or waitlist registration) or by posting a prominent notice on our website before the changes take effect. Your continued use of our Services after any update constitutes your acceptance of the revised policy.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact us: