
Privacy Policy
Last updated: June 2, 2025
1. Introduction
Welcome to Avocavo, operated by Rift Phase LLC ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services (collectively, the "Service").
By using Avocavo, you agree to the collection and use of information in accordance with this Privacy Policy.
Controller: Rift Phase LLC is the data controller for the purposes of applicable data protection laws.
2. Legal Basis for Processing (GDPR)
We process your personal data based on the following legal grounds:
- Consent: For marketing communications and optional features
- Contract performance: To provide our recipe services and user account management
- Legitimate interests: To improve our services and prevent fraud
- Legal obligation: To comply with applicable laws and regulations
3. Information We Collect
Personal Data
- Account Information: Email address, username, and profile preferences
- Recipe Data: Recipes you create, modify, or save within the app
- Usage Data: How you interact with our services, app analytics
- Device Information: Device type, operating system, unique device identifiers
- Payment Information: Processed through app store payment systems (Apple App Store, Google Play Store) - we do not store payment details
Important Note About Images
Mobile App Data Collection Technologies
As a mobile application, we use mobile-specific technologies to:
- Remember your preferences and settings (stored locally on your device)
- Analyze app performance and usage patterns (through mobile analytics)
- Provide personalized content and recommendations (using app preferences and usage data)
- Collect crash reports and performance metrics to improve the app
You can control data collection through:
- App Settings: Manage push notifications and email notifications in the app's Settings screen
- Data & Privacy: Access data export and account deletion options through your Profile > Data & Privacy
- Device Settings: Control app permissions through your device's Settings > Apps > Avocavo > Permissions
4. How We Use Your Information
We use your personal data to:
- Provide and improve our recipe transformation services
- Personalize your recipe recommendations and user experience
- Communicate with you about your account, updates, and customer support
- Process payments and manage subscriptions
- Comply with legal obligations and prevent fraud
- Conduct analytics to improve our services (using anonymized data where possible)
5. Information Sharing and Third Parties
We do not sell your personal information. We may share your information with:
Specific Third-Party Services
- OpenAI: For AI-powered recipe transformations and content generation (data processing agreements in place)
- Supabase: For secure cloud storage and database services (data processing agreements in place)
- Google Analytics/Firebase: For app analytics and performance monitoring (anonymized data)
- Apple App Store/Google Play Store: For subscription management and payments
Other Sharing Circumstances
- Legal Requirements: When required by law, court order, or to protect our rights
- Business Transfers: In connection with a merger, acquisition, or sale of assets
- With Your Consent: For any other purpose with your explicit consent
Data Processing Agreements
We maintain Data Processing Agreements (DPAs) with all third-party service providers who process personal data on our behalf, ensuring they meet GDPR requirements and provide adequate data protection.
International Data Transfers
Your data may be processed in countries outside the European Economic Area (EEA). We ensure adequate protection through appropriate safeguards such as Standard Contractual Clauses.
6. Data Retention
We retain your personal data only as long as necessary for the purposes outlined in this policy:
- Account Data: Until you delete your account, plus 30 days for backup purposes
- Recipe Data: Until you delete specific recipes or your account
- Usage Analytics: Anonymized data may be retained indefinitely for service improvement
- Legal Requirements: Some data may be retained longer to comply with legal obligations
7. Data Security
We implement appropriate technical and organizational security measures to protect your personal data:
- Encryption of data in transit and at rest
- Regular security assessments and monitoring
- Access controls and employee training
- Secure third-party service providers
However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
8. Your Rights (GDPR & Data Protection)
Under applicable data protection laws, you have the following rights:
- Access: Request access to your personal data (contact us at [email protected] or through app settings)
- Rectification: Request correction of inaccurate or incomplete data (update through app settings or contact support)
- Erasure: Request deletion of your personal data ("right to be forgotten") - use account deletion feature in app or contact us
- Restriction: Request restriction of processing under certain circumstances (contact [email protected])
- Data Portability: Request a copy of your data in a structured, machine-readable format (contact [email protected])
- Object: Object to processing based on legitimate interests (contact [email protected] or use opt-out features in app)
- Withdraw Consent: Withdraw consent for consent-based processing (use app settings or contact us)
- Lodge Complaints: File complaints with your local data protection authority
How to Exercise Your Rights
To exercise these rights:
- Through the App: Many rights can be exercised directly through your account settings, including data updates, deletions, and consent management
- Email Us: Contact us at [email protected] with your specific request
- General Support: Contact our support team at [email protected]
We will respond to your request within 30 days and may request verification of your identity before processing.
9. Children's Privacy (COPPA Compliance)
Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.
If We Inadvertently Collect Children's Data
If we become aware that we have collected personal data from a child under 13 without parental consent, we will:
- Immediately delete the child's account and all associated data
- Not use the data for any purpose
- Not disclose the data to third parties
- Notify the parents if contact information is available
Parents: If you believe your child has provided us with personal data, please contact us immediately at [email protected] so we can delete the information.
10. Changes to This Privacy Policy
We may update this Privacy Policy periodically. We will notify you of material changes by:
- Posting the updated policy on this page
- Updating the "Last updated" date
- Sending you an in-app notification or email for significant changes
Your continued use of the service after changes constitutes acceptance of the updated policy.
11. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:
- Data Protection Officer: [email protected]
- General Support: [email protected]
- Postal Address: Rift Phase LLC, 971 US Highway 202N #4471, Branchburg, NJ 08876, USA