Privacy Policy

Data controller

The data controller is Adamo Ferro, operating the CosaMangiamoStasera service. The address below is the contact point for requests about the processing of your personal data and for hosting-related (Digital Services Act) matters. You will receive a response within one month.

Contact email: admin@cosamangiamostasera.it

What we collect

Account data: your email address, your name (optional), and your country (optional), plus the app settings you choose (language and theme).

Dietary and food-preference data: the preferences you save in your profile — including those of the family members you add — and the preferences you type into the suggestion and planner forms. These can include information about foods to avoid, which may reveal health-related information.

Guest usage: if you use the suggestion or planner tools without an account, the inputs you type are used to answer your request and are not stored.

Purposes and legal bases

We process personal data only for running the service, on these legal bases:

• Account management and service delivery (saving your preferences, plans, and recipes) — performance of the contract with you, Art. 6(1)(b) GDPR.
• Dietary and food-preference data, including possible allergies — your explicit consent, Art. 9(2)(a) GDPR. The consent is granular and you can withdraw it at any time: in your profile, clear the preference fields and untick the consent box; as a guest, unticking the consent checkbox clears the browser consent. Unticking the consent box in your profile also permanently erases the dietary preferences saved for your family members; the members themselves remain listed.
• Security and rate limiting (protecting the service from abuse) — our legitimate interests, Art. 6(1)(f) GDPR, Recital 49.

Recipients

Your data is not sold and is not shared for marketing. To generate suggestions, meal plans, and grocery lists, the preferences you enter are sent to a third-party AI service established in the European Economic Area. The service is hosted by a hosting provider. No other recipients receive your personal data.

How long we keep data

Account data, preferences, plans, and recipes are kept for the lifetime of your account and are deleted when you delete your account.

Backups: the database is backed up nightly in encrypted form; backups rotate every 14 days.

Diagnostic prompt logs: only when the administrator enables diagnostics are the content of prompts and responses written to the service logs, and those entries are deleted within 14 days of being written. Diagnostics are disabled by default.

Your rights

You have the following rights over your personal data:

• Access — obtain confirmation and a copy of your data.
• Rectification — correct inaccurate data.
• Erasure — delete your account and its data self-service in your profile.
• Restriction — request that the processing of your data be restricted.
• Portability — export your data in JSON format self-service in your profile.
• Objection — object to processing that is based on legitimate interests.
• Withdrawal of consent — withdraw it at any time: in your profile, clear the preference fields and untick the consent box; as a guest, unticking the consent checkbox clears the browser consent. Unticking the consent box in your profile also permanently erases the dietary preferences saved for your family members; the members themselves remain listed.

To exercise your rights, write to the contact email below, or use the self-service tools in your profile (deletion and export). You will receive a response within one month.

Email: admin@cosamangiamostasera.it

Complaints

You have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali: www.garanteprivacy.it

Artificial intelligence

Part of the content shown by the service — recipe suggestions, meal plans, and grocery lists — is generated by artificial intelligence.

See the Terms of Service for the details.