Privacy Policy

This is written in plain language. Doughwise collects data about your bakes, your starter, and your recipes — because that is what the product does. This policy explains exactly what is collected, how it is used, and your rights over it.

What Doughwise collects

Doughwise collects the following categories of data:

• Account data: your email address and password (stored securely — never in plain text), or your Google account identifier if you sign in with Google.
• Bake logs: dates, hydration percentages, flour types and brands, dough temperatures, fermentation times, outcomes, ratings, and any notes you choose to enter.
• Starter data: your starter's name, flour type, feeding logs, rise measurements, and feeding timestamps.
• Recipes: ingredient weights, hydration percentages, starter ratios, and any notes you save.
• Usage data: pages visited, features used, and events such as which calculators are run. This is collected via Umami Analytics, which is cookieless and does not track you across sites or devices.
• Technical data: browser type, device type, and general location (country level), collected for security and performance purposes.

The free calculators on the landing page collect nothing. Every calculation runs locally in your browser with no data sent anywhere.

How your data is used

Your personal data is used to:

• Provide the Doughwise service — your bake logs, insights, and dashboard.
• Generate personalised insights based on your own bake history.
• Send you product updates and significant feature announcements (only if you signed up for email updates — low frequency, always unsubscribable).
• Improve the product by understanding how features are used in aggregate.
• Send you product updates and announcements about Doughwise (for users who consented to this at signup).

Aggregate and anonymised data

Doughwise may use anonymised, aggregated data derived from user activity for the following purposes:

• Generating platform-wide sourdough insights and trends (for example, which flour types produce the highest-rated bakes across all users).
• Improving the recommendations and insights engine.
• Developing new product features informed by real baking patterns.
• Commercial purposes, including data partnerships, research collaborations, and licensing aggregate trend data to third parties such as flour brands, food companies, or research organisations.

Aggregate data used commercially is anonymised — it does not identify you individually and cannot reasonably be used to do so. An example of the kind of insight that may be used commercially: "bakes using bread flour with 12–13% protein score higher on average than bakes using all-purpose flour" — with no connection to any individual user.

Your individual bake logs, starter data, and personal information are never sold or shared with third parties in identifiable form.

Who processes your data

• Supabase stores your account data, bake logs, recipes, and starter data in a secure database. Supabase is SOC 2 Type II certified. Their privacy policy is at supabase.com/privacy.
• Vercel hosts the Doughwise web application. Their privacy policy is at vercel.com/legal/privacy-policy.
• Brevo handles transactional email and the email update list. Their privacy policy is at brevo.com/en/legal/privacypolicy.
• Cloudflare provides content delivery, DNS, and email routing, and processes anonymised traffic data. Their privacy policy is at cloudflare.com/privacypolicy.
• Umami Analytics tracks cookieless, anonymised usage events. Their privacy policy is at umami.is/privacy.
• Google processes authentication data if you sign in with Google. Their privacy policy is at policies.google.com/privacy.

Cookies and tracking

Doughwise uses cookieless analytics for usage tracking. No advertising or third-party tracking cookies are used.

A cookie is used to keep you signed in while you use the app. This is strictly necessary for the logged-in features to work and is not used for tracking.

Doughwise uses spam protection on signup forms that may set a short-lived functional cookie to verify you are human. This is not used for tracking.

Data retention

Your account data and bake logs are retained for as long as your account is active. If you delete your account, your personal data is deleted within 30 days. Anonymised aggregate data derived from your activity may be retained indefinitely, as it cannot be linked back to you.

Email subscribers: your email address is retained until you unsubscribe. Every email includes a one-click unsubscribe link.

Your rights

Regardless of where you are located, you have the following rights:

• Access: request a copy of the personal data held about you.
• Correction: request correction of inaccurate data.
• Deletion: request deletion of your account and personal data.
• Portability: request your bake logs and data in a machine-readable format.
• Objection: object to your data being included in aggregate data used for commercial purposes. If you object, your data will be excluded from any commercially licensed aggregate data. Email hello@doughwise.app to exercise this right.

EU and UK users have additional rights under GDPR, including the right to lodge a complaint with a supervisory authority. The legal basis for processing your account and bake data is contract performance (Article 6(1)(b) GDPR). The legal basis for aggregate commercial use is legitimate interests (Article 6(1)(f) GDPR), balanced against your rights as described above.

California users have rights under CCPA including the right to know what data is collected, the right to delete, and the right to opt out of the sale of personal information. Doughwise does not sell personal information — only anonymised aggregate data as described above.

To exercise any of these rights, email hello@doughwise.app.

Data breaches

In the event of a data breach affecting your personal data, we will notify you as required by applicable law.

Children

Doughwise is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided personal data, please contact us and we will delete it promptly.

Changes to this policy

If this policy changes in a material way — particularly regarding how your data is used — you will be notified by email before the change takes effect. The date at the top of this page reflects the most recent update. If our data processors change materially, this page will be updated to reflect that.

Contact

Questions about this policy or your data: hello@doughwise.app

Doughwise is an independent project based in New Jersey, United States.