Lezziko Privacy Policy

1. Controller and scope

Lezziko is provided by Yusuf Kuşçu. This policy covers the Lezziko mobile apps, Lezziko public web pages and related support operations.

2. Information we process

Depending on the features you use, we process:

Account and identity data: email address, display name, avatar, user ID, preferred language and limited account information supplied by Apple or Google when you choose those sign-in methods.
Food profile data: household context, decision challenges, available cooking time, favorite cuisines, dietary preferences and allergen filters when you use them.
Table and decision data: tables, memberships, invitation codes, polls, meal options, votes, results and deadlines.
Planning and progress data: calendar ideas, weekly plans, shopping lists, cooked meals, saved recipes, streaks, badges, XP and feature interactions.
User content: food or table photos you choose to upload; food names, descriptions, cuisine, ingredients, recipe steps, time and serving information; likes, reports and blocks.
Support and security data: support messages, abuse reports, session and request timestamps, and limited server logs needed to protect the service.
Advertising and diagnostic data: when Google AdMob ads load, IP address, device or advertising identifiers, approximate location derived from the IP address, ad impressions, clicks and video-completion interactions; SDK, device and operating-system information, ad-loading errors, performance data and diagnostic data may be processed. The initial release requests contextual or non-personalized ads.
Device permissions: notification permission only when granted, and only the file selected through the system picker when adding a photo. The initial release does not request camera, microphone, location or contacts access.

3. Why we use information

We do not sell personal data. The current release shows contextual or non-personalized ads through Google AdMob; Lezziko does not request permission for cross-app tracking and does not use third-party product analytics. Where required, you can manage advertising choices through Google’s privacy form and reopen those choices from Profile.

Create accounts, authenticate users and maintain secure sessions.
Operate tables, invitations, polls, calendars, weekly plans and shopping lists.
Personalize suggestions using the cuisines and food preferences you select.
Display recipes, photos and user content to the audience you choose.
Calculate progress features such as streaks, badges and XP.
Show contextual or non-personalized ads and award XP after server-side verification of an optional rewarded ad completion.
Schedule local poll reminders on your device only when you grant permission.
Prevent abuse, review reports and enforce blocking choices.
Answer support requests, diagnose errors and meet legal obligations.

4. Legal bases

Where applicable, we process information to perform our agreement and provide the service, for legitimate interests in security and reliability, with your consent for optional permissions, and to comply with legal obligations. You may withdraw consent-based permissions in device settings or by contacting us.

6. Information visible to other users

Table members can see your display name, avatar and contributions to that table, including ideas, votes and plans.
A standard community post displays your name and avatar with the post.
Anonymous posting shows a neutral profile to the community while the record remains associated with your account for safety, reporting and deletion.
Private photos are delivered to authorized users through short-lived signed links. Content you choose to post to the community is visible to other signed-in users.
Anyone who receives a table invitation code may join that table, so share codes only with people you trust.

7. Retention and deletion

We retain account and content data while your account is active and as needed to provide the service. Deleting an item removes the active record and related production file.

You can permanently delete your account from Profile > Account and Data Deletion > Delete my account. This removes your profile, preferences, votes, polls, options, shopping items, calendar contributions, saved recipes, progress, posts and uploaded files. Ownership of a shared table with other members may be transferred to an eligible member so their shared data is not lost; your account is removed from the table.

Narrow records required for fraud prevention, security, dispute resolution or law are kept with restricted access only for the necessary period. Deleted data may remain in encrypted disaster-recovery backups until the service provider’s technical backup cycle completes; it is not restored for routine use and is overwritten through that cycle.

8. Security

We use HTTPS/TLS in transit, user-level access policies, private storage, short-lived signed file links and server-only sensitive operations. No system can guarantee absolute security. Report a security concern to lezziko@ycore-osgb.com.

9. Your rights and choices

Depending on applicable law, you may have rights to access, correct, delete or obtain a copy of your information, restrict processing or object. You can edit profile and food preferences in the app, disable notifications in device settings, reopen ad privacy choices from Profile where required, and contact us for other requests. We may verify requests through the email associated with the account; we never ask for your password by email.

10. Children

Lezziko is not directed to children under 13. If your jurisdiction requires a higher digital-consent age or parental permission, you must follow that rule. Contact us if you believe we processed a child’s information without the required permission.

11. International transfers

Service providers may operate in multiple countries. Information may be processed outside your country with appropriate contractual and technical safeguards. The primary Supabase region is Frankfurt/Central EU; Apple, Google and support services may process data in other regions.

12. Changes to this policy

We update the date on this page when the policy changes and provide an in-app notice or renewed consent when appropriate. We ask for consent before using information for a new purpose when the law requires it.

13. Contact

Controller: Yusuf Kuşçu. Privacy and data-rights requests: lezziko@ycore-osgb.com.