Privacy Policy

Linden (mylindenapp.com) is operated by M28 Ventures BV, a company registered in Belgium (the "operator", "we", "us"). We are the data controller for the personal data described in this policy.

You can reach us about anything privacy-related at hello@mylindenapp.com.

Account data: your email address, name, and password (stored as a secure hash — we never see your plaintext password).

Profile and usage data you choose to provide: country, preferred supermarket, family size, dietary preferences, allergies, budget range, meal plans, pantry contents, shopping lists, and optional health logs (such as weight or water intake) that you enter yourself.

Family member details you add (names or nicknames, dietary needs). Please only add information about family members with their knowledge — for children, you as parent or guardian provide it on their behalf.

Payment data: handled entirely by our payment processor Stripe (payments are processed via our subsidiary Nexus Ventures). We never see or store full card numbers — we only receive confirmation of payment status and the subscription plan.

Technical data: basic server logs (IP address, browser type, timestamps) kept for security and troubleshooting.

To provide the service you signed up for — meal plans, shopping lists, family sharing, and health tracking (performance of a contract, Art. 6(1)(b) GDPR).

To process subscription payments and comply with tax and accounting law (legal obligation, Art. 6(1)(c) GDPR).

To keep the service secure and prevent abuse (legitimate interest, Art. 6(1)(f) GDPR).

Health-related data you log (such as weight) is processed only because you choose to enter it, on the basis of your explicit consent (Art. 9(2)(a) GDPR). You can delete it, or your whole account, at any time.

We do not sell your data. Ever. We share data only with the service providers needed to run Linden: Supabase (database and authentication hosting), Stripe (payment processing via Nexus Ventures), and our hosting provider. Each processes data under a data processing agreement.

Where a provider processes data outside the EEA, transfers are protected by the European Commission's Standard Contractual Clauses or an adequacy decision.

Your data is kept for as long as you have an account. If you delete your account, your personal data is deleted within 30 days, except for invoicing records we must keep under Belgian accounting law (typically 7 years).

You have the right to access the personal data we hold about you, to have it corrected, to have it deleted, to restrict or object to its processing, and to receive it in a portable format (data portability).

Where processing is based on consent, you may withdraw that consent at any time without affecting past processing.

To exercise any of these rights, email hello@mylindenapp.com. We respond within one month.

You also have the right to lodge a complaint with your local supervisory authority. In Belgium this is the Gegevensbeschermingsautoriteit / Autorité de protection des données (www.dataprotectionauthority.be).

Linden accounts are for adults (16+). Information about children in your family is added by you, the parent or guardian, and is only used to personalise your family's meal plans.

If we make material changes, we will notify you by email or in the app before they take effect.