Privacy Policy | Divine Creations 369

Last updated: 23 September 2026

1. Who We Are

DivineMeals369 is operated by Divine Creations NZ Limited (NZBN 9429031005975), a company registered in New Zealand.

2. What This Policy Covers

This Privacy Policy applies only to the DivineMeals369 mobile application and related services. It does not apply to Divine Creations NZ Limited's photography and videography services, which are covered by a separate policy on our main business website.

This policy describes what the app does today. Where a feature is built but not yet switched on, we say so rather than describing it as if it were active.

3. Information We Collect

3.1 Information you provide directly

Name and email address — via Google Sign-In, Apple Sign-In, or email and password. An email address is required to create an account.
Family member information you add to your household — names, roles, and dietary preferences.
Dietary preferences — for example vegetarian, vegan, halal, gluten-free, or nut-free. We treat these as personal preferences that help the app suggest suitable meals. We do not collect, and do not ask for, medical or health information, and we do not treat dietary tags as health records.
Meal plans, recipes, and shopping list entries you create.
Pantry/stocktake items you record as "at home".
Photos you choose to upload — see section 3.2.
Business listing information, if you register as a vendor — business name, category, description, contact details, address, and listing photos. See section 6.
Any messages or information you send to our support team, including bug reports and any screenshot you attach.

3.2 Photos

The app asks for permission to use your camera and to access photos on your device. We only ever access a photo you actively select, or one you take deliberately inside the app. We never scan or browse your photo library.

Profile picture — your account avatar. Seen by you and by members of your family group.

Family setup photo — a household member avatar. Seen by members of your family group.

Meal slot photo — a picture attached to a planned meal. Seen by you and by members of your family group.

Business listing photos — your vendor directory listing. Publicly visible once approved (see section 6).

Bug report screenshot — used to diagnose a problem you reported. Seen by our support team.

The app can also save an image to your device — for example a shareable meal-plan card you generate. That is a file being written to your phone, not information being collected by us.

3.3 Location

With your permission, the app can use your device location to find nearby grocery stores, restaurants, and venues.

Please note the following, which we want to state plainly:

We request precise location. Although the app requests a balanced accuracy level in practice, the permission we declare is precise (fine) location. We would rather over-disclose this than describe it as merely "approximate".
Location is only ever collected while you are using the app. We do not collect location in the background, and we do not track your movements.
Your coordinates are never sent to, or stored on, our servers. They are transmitted directly to Google Maps Platform (Places and Geocoding) to return nearby results. A rounded, low-precision version may be cached temporarily on your own device to avoid repeated lookups.
Location is used for app functionality only. It is not used for advertising, profiling, or personalisation, and it is never shared with other users.
You can refuse or revoke this permission at any time in your device settings. The rest of the app continues to work; store-finding features will simply ask you to enter a location manually or will be unavailable.

3.4 Advertising identifier

DivineMeals369 displays banner advertisements supplied by Google AdMob.

To do this, AdMob collects the advertising identifier provided by your device, together with related device and usage signals, and uses them to select, deliver, measure, and — depending on your device settings — personalise the ads you see. This is a genuine disclosure of data shared with a third party for advertising purposes, and it is the only such sharing in the app.

We apply family-safe keyword targeting and block sensitive ad categories, but we do not control which specific ads Google serves.
You can limit ad personalisation, or reset or withhold your device's advertising identifier, at any time in your device settings. The controls differ between Android and iOS, but both let you do this.
If you purchase the Remove Ads option, banner ads stop being requested and displayed in the app.
Google's own handling of this data is governed by Google's privacy policy: https://policies.google.com/privacy

3.5 Information generated by the app

The app uses Google's Gemini API to generate meal ideas, ingredient lists and price estimates. What we send depends on the feature:

Meal suggestions. When you ask the app to suggest meals, we send your chosen cuisine, your maximum cooking time, your household's dietary requirements (for example vegetarian, halal or nut-free), the number of people in your household, the meals already planned that week, and any suggestions you have just rejected — so the next set is different.
Ingredient lists. When the app works out what to buy for a meal, we send the dish name and the number of people it is for. If you have attached a recipe video to that meal, we also send the video's title, so the ingredients match that version of the dish.
Festive dishes. When you plan for a festival, we send the festival's name.
Estimated store prices. For the Smart Store feature, we send general product categories and your region and currency.

None of these requests contains your name, your email address, your account identifier, or your location coordinates.

Google processes these requests to return a result to you. Google's own handling of API data is governed by its terms for the service we use: https://ai.google.dev/gemini-api/terms

Prices returned this way are estimates only — not live or verified prices, and not supplied by any retailer. See the in-app disclosure for details.

3.6 What we do not collect

To be explicit, because it is as important as what we do collect:

No analytics or behavioural tracking. The app does not operate any analytics or crash-reporting product. We do not log screen views, taps, searches, or in-app journeys. (Firebase records basic account metadata such as when an account was created and last signed in; AdMob collects its own signals as described in section 3.4.)
No payment or card details. The Remove Ads purchase is processed entirely by the app store you downloaded the app from — Google Play or the Apple App Store. Your card details never pass through, and are never visible to, DivineMeals369.
No messages between users. The app has no chat, direct-message, or user-to-user messaging feature of any kind.
No contacts, no microphone, no SMS, no call data.
No calendar reading. If you connect Google Calendar, the app adds meal events to your calendar. It does not read, import, or store your existing calendar entries.

4. Permissions the App Requests

Android and iOS ask for permissions differently and give them different names. The table below describes what the app asks for and why, rather than the technical name your particular device uses.

Camera — taking a photo inside the app, for example a profile picture or a meal photo.

Photos on your device — choosing an existing photo to upload, and saving a meal-plan card you generate (see section 3.2).

Location, while you are using the app — finding nearby stores, restaurants and venues (see section 3.3).

Notifications — shopping and meal reminders, if you turn them on.

Calendar — adding your meal plan to your calendar, if you connect one. The app writes events only; it never reads your existing entries.

Internet access, and restarting reminders after your phone reboots — core app function. On Android these are declared permissions; on iOS they are handled by the system and are not shown to you.

You can refuse any of these, and change your mind later in your device settings. The app continues to work without them; the features that depend on them will say so.

5. How We Use Your Information

We use your information to:

Provide the core app functionality — meal planning, shopping lists, pantry tracking, and family coordination
Return location-based store, restaurant, and venue results
Generate AI-assisted ingredient lists and price estimates
Operate the vendor directory, if you choose to use it
Communicate with you about your account or support requests
Serve advertising, unless you have purchased Remove Ads
Investigate and fix problems you report to us

6. Vendor Business Listings — Not Currently Available

The app includes a directory where local food businesses can list themselves. Registration for new business listings is not open in the current version of the app, and no business listings are currently published.

When vendor registration opens, the information a business submits — business name, category, description, contact details, address and listing photos — is intended to appear publicly in the app's vendor directory. No listing will be published automatically: every submission will be reviewed and approved by our team before it becomes visible to other users. A business will be able to ask us to remove or unpublish its listing at any time by emailing support@divinecreations369.com.

Business listing details are business contact information, published deliberately. Please do not include personal information in a listing that you would not want publicly visible.

We will update this policy before vendor registration opens.

7. Community Features — Not Currently Active

Earlier versions of this policy described community features such as public recipe posting, user profiles, and a community feed.

These features are not active and are not reachable in the current version of the app. No user-generated posts, comments, likes, or public profiles exist, and no content you create is visible to users outside your own family group. The only exception is a vendor business listing, which is covered by section 6.

The app does show food and recipe news summaries. This is editorial content we source and summarise — it is not posted by other users.

If we activate community features in the future, we will update this policy and notify you before doing so.

8. Account Deletion

You can delete your DivineMeals369 account and the personal data associated with it at any time.

How to request deletion. Email support@divinecreations369.com from the email address associated with your account, with the subject line "Delete my account".

You do not need to give a reason. If you are unable to email from your account address, contact us anyway and we will verify your identity another way.

The app also offers a delete-account option in Settings, which opens this page.

What gets deleted. Your account record, profile, meal plans, shopping lists, pantry data, uploaded photos, family membership, and any vendor listing you own.

What may be retained. Records we are required to keep for legal, tax, or accounting reasons — for example a record that a purchase occurred. These are retained only for as long as the law requires and are not used for any other purpose. Purchases made through Google Play are also recorded by Google under Google's own policies.

Anonymised or aggregated data that can no longer identify you may be retained.

How long it takes. We complete deletion requests within 5 to 30 days of receiving them, depending on the nature and complexity of the request. We will confirm by email once it is done.

Deleting only some of your data. If you want to delete specific content — a photo, a business listing, a family member — rather than your whole account, email us and say what you would like removed. Most content can also be deleted directly in the app.

9. Your Other Rights

Depending on where you live, you may also have the right to:

Access the personal information we hold about you
Correct inaccurate information
Request a copy of your data in a portable format

To exercise any of these rights, contact us at support@divinecreations369.com. Data export requests are currently handled manually by our support team, within the same 5 to 30 day window described in section 8.

If you are in New Zealand and are not satisfied with how we have handled your request, you may complain to the Office of the Privacy Commissioner (privacy.org.nz).

10. Third-Party Services We Use

We draw a deliberate distinction below between service providers, who process data on our instructions and only for us, and sharing, where a third party receives data for its own purposes.

Service providers (processing on our behalf — not "sharing")

Google Firebase (Authentication, Firestore, Realtime Database, Storage) — account management and data storage, hosted in Sydney, Australia. Data involved: your account, family, meal plan, shopping list and business listing data, and the photos you upload.

Google Gemini API — generating meal ideas, ingredient lists and price estimates. Data involved: dish and festival names, dietary requirements, household size, region and currency. No name, email address, account identifier or location. See section 3.5.

Google Maps Platform (Places, Geocoding) — finding nearby stores, restaurants and venues. Data involved: your device coordinates at the moment of a search.

These providers act on our instructions and are not permitted to use your data for their own purposes.

Sharing with a third party

Google AdMob — displaying advertisements. Data involved: the advertising identifier provided by your device, together with device and usage signals, used by Google for ad selection, delivery, measurement and personalisation.

This is the only third party with which we share data in this sense.

Other

The Remove Ads purchase is processed by the app store you downloaded the app from — Google Play Billing on Android, or Apple's in-app purchase system on iOS. Your payment details go to Google or Apple, not to us.

Zoho Mail hosts our support inbox. If you email us, your message and email address are stored there — the same as with any business you email.

We do not sell your personal information to anyone.

11. Data Retention

We retain your information for as long as your account is active, or as long as needed to provide the app's services. If you delete your account, we will delete or anonymise your personal information within 5 to 30 days, except where we are required to retain it for legal or accounting purposes (see section 8).

12. Data Security

We use industry-standard security measures to protect your information:

All data is transmitted over encrypted HTTPS connections.
Data is encrypted at rest by our hosting provider's standard infrastructure encryption.
Access to your data is restricted by server-side security rules, so that your family's data is readable only by your family, and administrative data only by us.

We have not commissioned an independent third-party security audit. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

13. Children

DivineMeals369 is intended for adults. Accounts are created and managed by adults, and the app does not offer child accounts or profiles.

We do not knowingly collect personal information from children. The app is not directed at children and is not marketed to them. It is not distributed through any app store programme aimed at children — it is not part of Google Play's Designed for Families programme, and is not listed in the Apple App Store's Kids Category. If we become aware that we have collected personal information from a child, we will delete it.

Adults sharing a household see the same meal plans, shopping lists and photos. Please only add content you are comfortable sharing with everyone in your household.

14. International Data Transfers

Your information may be processed and stored in Australia (via our Firebase hosting in Sydney) and may be transmitted to Google's servers, which may be located in various countries, for the AI processing, mapping, and advertising services described in section 10.

By using the app, you understand your information may be transferred outside your country of residence. We rely on our providers' contractual and technical safeguards for these transfers.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through the app or by email, and we will always update the "Last updated" date at the top of this page.

16. Contact Us

If you have questions about this Privacy Policy, or wish to exercise any right described in sections 8 or 9, contact us at:

support@divinecreations369.com

Divine Creations NZ Limited · NZBN 9429031005975 · Auckland, New Zealand