Privacy Notice

1. Who we are

Helza is operated by Renegades Digital Services. Renegades Digital Services is the data controller for personal data you provide when using Helza.

2. Personal data we collect

• Account data: name, email address, profile picture, sign-in identifier (e.g. Google).
• Profile preferences: cooking preferences, dietary goals, kitchen style, recipe language.
• Content you submit: photos of ingredients and prompts you send to the AI.
• Usage & telemetry: device type, browser, IP address, in-app actions, error logs.
• Support communications: messages you send us.

Payment data (card details, billing address, tax info) is collected directly by our payment provider Paddle and is not stored by us.

3. How we use your data

• To create and operate your account.
• To provide the recipe-generation Service.
• To personalize suggestions to your preferences.
• To secure the Service, prevent fraud, and debug errors.
• To respond to support requests.
• To send essential service emails (transactional). Marketing emails only with your consent.

4. Legal basis

We process your data to perform our contract with you (account, Service delivery), based on legitimate interests (security, fraud prevention, product improvement), to comply with legal obligations (tax, accounting), and with consent where required (e.g. marketing).

5. Who we share data with

• Service providers: hosting, database, AI inference, analytics, customer support tooling.
• Merchant of Record: Paddle.com handles payments, subscription management, invoicing, and tax compliance on our behalf. See Paddle's privacy policy.
• Professional advisers: legal, accounting, where strictly necessary.
• Authorities: where required by law or to protect rights and safety.

6. Data retention

We retain account and profile data for as long as your account is active and a reasonable period after closure to support our legal obligations. Submitted images are retained as needed to provide the Service and are deleted or anonymised when no longer needed. Backups are rotated regularly.

7. International transfers

Some of our service providers operate outside your country. Where data leaves the UK/EEA we rely on appropriate safeguards (Standard Contractual Clauses or adequacy decisions).

8. Your rights

Subject to applicable law, you have rights to access, rectify, erase, restrict or object to processing, data portability, and withdraw consent. If you are in the UK/EEA you may lodge a complaint with your supervisory authority. We will respond within one month.

9. Security

We use industry-standard technical and organisational measures (encryption in transit, access controls, principle of least privilege) to protect your data.

10. Cookies

We use essential cookies to keep you signed in. We do not use third-party advertising cookies. Any analytics cookies, if introduced, will be subject to your consent in the cookie banner.

11. Contact

To exercise your rights or ask privacy questions, contact Renegades Digital Services at renegadesdigitalmedia@gmail.com.