Privacy Policy

1 Summary

This Privacy Policy describes how House of Poha ("we", "us") processes personal information when you visit our site, create an account, submit recipes, or interact with platform features. We're committed to protecting your privacy while providing you with the best possible experience.

2 Data We Collect

Account Data

Name, email, hashed password, optional profile image.

Recipe & Interaction Data

Submitted content, likes, comments, leaderboard participation.

Technical Data

IP address (truncated in logs), device/browser metadata, limited request diagnostics for security & performance.

Communication Data

Emails you send us, OTP verification events.

3 How We Use Data

Authenticate users and provide core functionality (recipes, likes, comments, OTP flows).
Improve reliability, security, and usability of the platform.
Send transactional emails (OTP, password reset, service notifications).
Moderate content and prevent fraud or abuse.
Generate anonymized aggregate insights (e.g., recipe popularity).

4 Legal Basis

Depending on your jurisdiction (e.g., GDPR regions), processing may be based on consent (OTP emails), legitimate interests (improving and securing services), or contractual necessity (account operation).

5 Cookies & Similar Technologies

Privacy-First Approach

We use essential first‑party cookies (for authentication and core features) and, with your consent, Google AdSense may set cookies or use local storage to personalize and measure ads. We implement Google Consent Mode v2 and default to denied for advertising and analytics storage until you provide a choice via our “Your privacy choices” banner.

Manage your preferences anytime via the “Privacy choices” link in the footer.
Learn how Google uses information from sites or apps that partner with Google: policies.google.com/technologies/partner-sites
Control ad personalization on Google: adssettings.google.com
Read Google’s Privacy Policy: policies.google.com/privacy

6 Data Sharing

Service Providers

SMTP/email delivery infrastructure strictly for sending transactional messages.

Legal Requirements

We may disclose data where required by law or to protect rights, safety, or integrity of the service.

No Sale of Personal Data

We do not sell or rent your personal information.

7 Security Measures

Bcrypt password hashing

TLS transport encryption

Encrypted secrets at rest

Continuous security improvements

No method is 100% secure, but we continually improve safeguards.

8 Data Retention

Account data is retained while your account remains active. Inactive diagnostic logs may be rotated or pruned. You may request deletion as described below; residual backups may persist for a limited period.

9 Your Rights & Choices

You have the right to:

Access or update your profile information.
Request account deletion (contact support).
Opt out of non-essential communications (we currently send only transactional notices).
Withdraw consent for optional features where applicable.

10 Children

The platform is not directed to children under 13. If you believe a child provided personal data, contact us to initiate removal.

11 International Transfers

Data may be processed on servers located in or outside your country. We apply consistent safeguards regardless of location.

12 Policy Updates

We may revise this policy to reflect technical, legal, or operational changes. Material updates will be highlighted with an on‑site notice. Continued use signifies acceptance.

13 Contact

For privacy inquiries or data requests, we're here to help.

Privacy Email General Contact

Table of Contents