Privacy Policy
Last updated: Tuesday 11th August 2026
The Consuna website and mobile application (the "Service") are owned and operated by Consuna Ltd, a company registered in England and Wales under company number 17341691, with its registered office at Unit 13 Freeland Park, Wareham Road, Lytchett Matravers, Poole, England, BH16 6FA ("Consuna", "we", "us", or "our"). Consuna Ltd is the data controller of your personal data in connection with your use of the Service.
We have adopted this Privacy Policy to explain how we collect, use, and protect the information you provide to us, and why we need to collect certain personal data about you. Please read this Privacy Policy carefully before using Consuna.
We take the security and confidentiality of your personal data seriously and are committed to protecting it in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Personal Information We Collect
Device and usage information. When you use our app, we automatically collect certain information about your device, including your device model, operating system and app version, device identifiers, time zone, and information about the screens and features you interact with. We refer to this collectively as "Device Information." This is only collected where you have given consent via the in-app analytics notice described in Section 8.
Account and profile information. When you register for an account, we collect personal data such as your name, email address, and any household or family member profiles you create within the app, which may include:
Names and relationships of household members;
Dietary preferences (e.g. vegetarian, vegan);
Allergen and intolerance information (e.g. gluten, dairy, nuts);
Dislikes;
Spice tolerance.
Allergen and dietary information can constitute special category data (health-related data) under UK GDPR. We only collect this information because you choose to provide it, in order to personalise meal plans and protect household members from allergens, and we treat it with additional care as described in Section 4 below.
Payment and subscription information. If you purchase a subscription, this is processed through Apple's App Store or Google Play's in-app purchase system, who collect and process your payment details directly. We do not directly store full card details ourselves. We use RevenueCat to manage and track your subscription status and entitlement — see Section 5.
Waitlist and newsletter information. If you sign up to our waitlist on consuna.com, we collect your email address, via our email service provider Hostinger Reach, in order to send you occasional updates about Consuna's launch and, if you remain subscribed, monthly newsletter updates thereafter. You can unsubscribe at any time using the link included in every email we send, or by contacting us at the email address in Section 12.
Information you provide directly. This includes any information you submit through customer support requests, such as your name, email address, and the content of your message.
Children's information. Consuna is designed for use by adult account holders managing a household, who may create and manage profiles within that household for children, including dietary or allergen information. We recognise that children may be present in a household using Consuna, and that a child could directly view or interact with the app on a shared family device, even though the app is not designed or marketed for direct use by children.
The Service's analytics (see Section 8) record account-level usage of the app, such as when a household is created, a profile is added, or a meal plan is generated or changed. This reflects the actions of the adult account holder managing the household. We do not use analytics to build a profile of, or make automated decisions about, any individual child, and a child's dietary or allergen information is not included in the data sent to our analytics provider.
A child's dietary, allergen, and other profile information is used only to generate meal plans and recipes for that household, and is never used for advertising or marketing, and is only shared with the processors listed in Section 5 to the extent necessary to operate the Service.
Parents and guardians are responsible for the accuracy of information entered on behalf of a child, and for ensuring they have the authority to create that profile, as set out in Section 4 and in our Terms of Service.
2. Why We Process Your Data
We only collect and process the minimum personal data necessary to operate the Service. We use this data to:
Create and manage your account and household profiles;
Generate personalised meal plans, recipes, and shopping lists, including accounting for allergens and dietary needs;
Process payments and manage your subscription;
Communicate with you about your account, updates, or support requests;
Send you waitlist updates and, where you remain subscribed, a monthly newsletter;
Identify and prevent fraud, abuse, or misuse of the Service;
Understand aggregate usage trends to improve the Service, where you have given analytics consent (this statistical information is not used to identify any individual user).
You can browse our website without providing any personal data beyond what you choose to submit via the waitlist form. To use certain app features, such as creating a meal plan, managing household profiles, or subscribing, you will need to provide the relevant personal data described above. If you choose not to provide it, you may not be able to use those features.
If you are unsure what information is required for a particular feature, please contact us at privacy@consuna.com.
3. Legal Basis for Processing (UK/EU Users)
Where UK GDPR or EU GDPR applies to you, we rely on the following legal bases to process your personal data:
Contract — to provide the Service you've signed up for (e.g. generating your meal plan, processing your subscription).
Consent — for allergen and dietary data, which you voluntarily choose to add to a household profile; for app analytics data, which is only collected once you have actively opted in via the in-app consent notice (see Section 8); for website analytics and marketing cookies, which are only set once you have consented via our cookie banner; and for waitlist/newsletter emails, which you opt into by signing up.
Legitimate interests — for purposes such as preventing fraud and maintaining the security of the Service.
Legal obligation — where we must retain or disclose information to comply with the law.
4. Special Category (Health-Related) Data
Because allergen and dietary information can reveal health-related details, we apply extra safeguards:
This data is only used to personalise your meal plans and protect household members from allergens. It is never used for advertising or profiling purposes.
It is only processed with your explicit action of entering it into a household profile.
You can edit or delete this information at any time from within your account settings.
We do not sell or share this information with third parties for marketing purposes.
5. Data Sharing and Third Parties
We share personal data with the following service providers, each acting on our instructions solely to help us operate Consuna:
Supabase — our database and authentication provider, hosting account data, household profiles, and meal plan data (EU West, London).
PostHog — our analytics provider, used to understand app usage, only where you have given analytics consent (EU-hosted).
RevenueCat — used to manage and validate your subscription status and entitlement (US-based — see Section 6 for how we safeguard this).
Sentry — used to capture technical error reports to help us identify and fix bugs (EU-hosted).
Hostinger Reach — our email service provider, used to send waitlist updates and our monthly newsletter to subscribers.
We also share information with:
Apple App Store and Google Play, who process certain account and payment information as part of their platform requirements when you subscribe.
Legal and regulatory authorities, where required or permitted by law, such as to comply with a subpoena or similar legal process, or where we believe in good faith it's necessary to protect our rights, your safety, or the safety of others, investigate fraud, or respond to a government request.
We do not sell your personal data to third parties.
6. International Transfers
Supabase, PostHog, and Sentry all process data within the UK/EU and do not involve an international transfer for the purposes of this Section.
RevenueCat is based in the United States and processes data there. Where this involves a transfer of personal data outside the UK, we rely on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses as the safeguard, as set out in RevenueCat's Data Processing Addendum.
Where Hostinger Reach involves a transfer of personal data outside the UK or European Economic Area, this is safeguarded under Hostinger's Data Processing Addendum, which incorporates the EU Standard Contractual Clauses and the UK International Data Transfer Addendum for this purpose.
7. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes described in this Policy. If you delete your account, we will delete your personal data within 30 days of deletion, except where we are required to retain certain information for legal or legitimate business purposes (e.g. transaction records for tax purposes), or where data is retained for a limited period as part of our standard backup processes. If you unsubscribe from our waitlist or newsletter, we will stop processing your email address for that purpose promptly.
8. Analytics, Tracking and Cookies
In the app, we use PostHog to understand how Consuna is used, so we can improve it. This only happens with your consent. The first time you open the app, you are shown a clear choice to accept or decline analytics tracking. If you decline, no analytics data is collected at all — our analytics tool is never even activated on your device. If you accept, you can change your mind at any time from Settings → Analytics & Tracking, which lets you turn tracking on or off. Turning it off stops data collection immediately.
On our website, consuna.com, we use cookies for analytics and marketing purposes, including Amplitude analytics. When you first visit our website, you are shown a cookie banner where you can choose which categories of cookies (Analytics, Marketing) to allow. You can change your preferences at any time via the Cookie Settings option available on the site.
9. Your Rights
If you are a resident of the UK or European Economic Area, you have the following rights in relation to your personal data:
The right to be informed about how your data is used;
The right of access to the personal data we hold about you;
The right to rectification of inaccurate or incomplete data;
The right to erasure of your data in certain circumstances;
The right to restrict processing of your data;
The right to data portability;
The right to object to certain processing, including direct marketing;
Rights in relation to automated decision-making and profiling.
To exercise any of these rights, please contact us using the details in Section 12 below.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator, if you believe we have not handled your personal data in accordance with the law. You can find out more at ico.org.uk.
Exercising rights on behalf of a child
Where personal data relates to a child within your household, you as the account holder, as their parent or guardian, can exercise the rights listed above on their behalf. You can do this directly within your account settings for most requests (such as editing or deleting a child's profile information), or by contacting us using the details in Section 12 for anything not available in-app.
As a child in your household grows older, you should review the accuracy of their profile information periodically, and remove or amend it as appropriate. If a household member reaches adulthood and wishes to manage their own account and data independently of the household, they can contact us to discuss the available options.
10. Data Security
We use reasonable administrative, technical, and physical safeguards to protect your personal data against unauthorised access, use, disclosure, or modification. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
11. Links to Other Websites
Our website or app may contain links to third-party websites or services that are not owned or controlled by us. We are not responsible for the privacy practices of any third-party sites. We encourage you to review the privacy policy of any website you visit.
12. Contact Us
If you have any questions about this Privacy Policy, or wish to exercise any of your rights regarding your personal data, please contact us at:
Consuna Ltd
Email: privacy@consuna.com
Registered address: Unit 13 Freeland Park, Wareham Road, Lytchett Matravers, Poole, England, BH16 6FA
Company number: 17341691
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will post any updates on this page with a revised "Last updated" date. Material changes will also be communicated in-app and may require you to re-confirm your acceptance.