Privacy policy

This privacy policy explains how [COMPANY] (“we”), the company behind Wenu, collects, uses and shares your personal data when you use the Service, and the rights you have over it.

1. Scope and controller

This policy covers the wenu.life website, the web app at wenu.life/app, the emails we send you and customer support (the “Service”).

The controller of your data is [COMPANY], registered at [Registered address], with registration number [Registration number]. You can write to us at support@wenu.life.

This policy is a privacy notice. Our Terms of service govern your use of the Service.

2. What data we collect

Account data. Your email address, the name you give us and what’s needed to sign you in, either with your email or with a third-party account (such as Google) if you choose to sign in that way. We also keep your preferences: language, your browser’s language, and which emails you want and at what time.

Household data. What you keep in Wenu: the household’s name, the dishes in your Dish Library with their ingredients and categories, each week’s menu, the shopping list, the meals you plan, the time zone and the household’s settings. We also keep who is a member of the household, who its owner is and which changes each member makes to the menu.

Invites. If you invite someone to your household, we keep the email address the invite goes to and who sent it, so we can send it and that person can accept it.

Billing data. If you get Pro: the plan, the billing period (monthly or yearly), the subscription’s status, its renewal, trial and cancellation dates, and the customer and subscription identifiers of our payment provider. We don’t store your card details: the payment provider handles them directly.

Usage and technical data. When you use the Service, our servers log technical data such as your IP address, browser, device, the page requested and the time, to run the Service and protect it. We also measure anonymously which screens are visited and which actions are taken (for example, “a dish was added”), with no names, emails, or user or household identifiers.

Emails. We keep which emails we’ve sent you and when, so we never send the same one twice and you can unsubscribe in one click.

Communications. What you write to us when you ask for help.

We don’t intentionally collect special categories of data. If you write something about your health or diet in Wenu (in a dish’s name, say), we treat it only as part of your household’s content.

3. What we use the data for

Providing the Service: keeping and showing your household’s menu, Dish Library and shopping list, and keeping them up to date for all its members.
Creating your account, signing you in and protecting the Service against fraud and abuse.
Running households: invites, members and the owner’s permissions.
Sending you the emails you’ve chosen (the weekly or daily menu, the monthly recap, change notices) and the necessary emails about your account and subscription, such as confirmations, renewal reminders or failed payments.
Charging for Pro, applying each plan’s limits and keeping our accounts.
Helping you when you write to us.
Understanding, in aggregate and anonymously, how Wenu is used, to improve it.
Meeting our legal obligations and defending our rights.

We don’t sell your data, we don’t use it for advertising and we don’t make automated decisions with legal effects on you.

4. Legal bases

If you are in the European Economic Area or the United Kingdom, we process your data on these bases:

Performance of a contract: to provide the Service, run your account and household, send the emails that are part of the Service and charge for Pro.
Legitimate interests: to protect the Service, understand it anonymously and improve it, and answer your messages.
Legal obligation: to keep invoices and respond to authorities.
Consent: when we ask for it for something specific. You can withdraw it at any time.

Your household’s members. Every member of a household sees and changes its menu, Dish Library and shopping list, and sees the other members’ names and emails. If you join a household, its members will see your name and email.

Our providers, who process data on our behalf and only to provide their service to us:

Clerk, for sign-in and accounts.
Stripe, for payments and managing the subscription. Stripe also processes payment data as an independent controller, under its privacy policy.
Amazon Web Services (Amazon SES), to send emails.
Umami, for anonymous usage analytics.
Our hosting and database providers.

For legal reasons, when the law requires it or to protect our rights, our users or the Service.

In a corporate transaction, such as a merger, an acquisition, a sale of assets or the transfer of Wenu to a company we set up to run it. The new entity would become the controller of your data, with the same safeguards as this policy, and we’d tell you by email beforehand.

With your consent or at your direction.

6. Cookies and local storage

We only use cookies and local storage that the Service needs to work or to remember your preferences:

Clerk’s session cookies, to keep you signed in.
A cookie on wenu.life that remembers your language.
In your browser’s local storage, the app’s language, the last household you opened and how you like to see Ideas.

Umami’s analytics use no cookies and identify no one. We use no advertising cookies and no third-party tracking cookies. If we ever use cookies that aren’t necessary, we’ll ask for your consent first.

You can clear cookies and local storage in your browser, but you’ll then have to sign in and choose your preferences again.

7. How long we keep it

Account and households: for as long as you have the account. If the owner deletes a household, all of its content is deleted. If you leave a household, what you added to it stays in the household.
When you delete your account: we delete your account, your preferences and the households you own, with all their content, for their other members too, and we cancel their subscription. You’re removed as a member from any other household. Copies may remain in backups for a limited time, until they’re replaced.
Billing: for as long as tax and accounting law requires, even if you delete the account.
Technical logs: for as long as needed to protect and debug the Service, then deleted.
Analytics: only anonymous, aggregate data, which may be kept longer.

8. Security

We apply reasonable technical and organisational measures to protect your data: encrypted connections, limited access to the database and providers with security guarantees. No system is infallible, so we can’t guarantee absolute security.

9. Your rights

Depending on where you live, you can:

Access your data and ask for a copy in a portable format.
Correct it, or ask us to delete it.
Object to processing, or ask us to restrict it.
Withdraw your consent where processing is based on it.
Unsubscribe from any email, from the link in the email itself or in Settings.
Complain to your country’s data protection authority (in Spain, the Agencia Española de Protección de Datos).

You can change much of your data in Settings. For anything else, including deleting your account, write to us at support@wenu.life. We may ask you to confirm your identity before acting on the request.

10. International transfers

Some of our providers may process data outside the European Economic Area, for example in the United States. Where they do, we make sure there are appropriate safeguards, such as the EU-US Data Privacy Framework or the standard contractual clauses approved by the European Commission.

11. Children

Wenu isn’t directed at children under 14, and we don’t knowingly collect their data. If you think a child has given us data, write to us and we’ll delete it.

12. Changes to this policy

We may update this policy. If a change is significant, we’ll tell you in the Service or by email before it applies. The “Last updated” date shows the current version.

13. Contact

If you have questions about this policy or your data, write to us at support@wenu.life.