Privacy Policy

Effective Date: April 1, 2026

Last Updated: April 22, 2026

DeepWoodz LLC, doing business as DeepWoodz Smokehouse ("we," "our," or "us") operates the DeepWoodz Smokehouse mobile application and website (collectively, the "Service"). This Privacy Policy explains how we collect, use, store, and protect your information when you use our Service.

By using the Service, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

Email address
Username (display name)
Password (encrypted via Firebase Authentication — we never see or store your plaintext password)

1.2 Profile Information

You may optionally provide:

Profile photo
Bio/description

1.3 User-Generated Content

When you use the Service, we store content you create including:

Community Feed posts, comments, and photos
Recipes you submit
Reviews and ratings
Smoke logs, batch history, saved sessions, shopping lists, and cost calculations
Bug reports submitted through the app

1.4 Usage Data

We automatically collect anonymous usage data through Firebase Analytics, including:

Which features you use (recipes viewed, calculators used, searches performed)
App open frequency and session duration
Device type, operating system, and app version
General geographic region (country/state level, not precise location)

This data is aggregated and not linked to your personal identity.

1.5 Crash Reports

We use Firebase Crashlytics to collect crash reports including device information and error stack traces. These reports do not contain personal information.

1.6 Push Notification Tokens

If you enable push notifications, we store your device's push notification token to send you notifications about likes, comments, follows, and smoke timer alerts.

1.7 Subscription Information

If you subscribe to DeepWoodz Pro, your subscription is managed by Apple (App Store) or Google (Play Store) through RevenueCat. We receive confirmation of your subscription status but do NOT receive or store your payment card information.

2. How We Use Your Information

To provide, maintain, and improve the Service
To authenticate your account and enable personalized features
To display your content in the Community Feed and recipe sections
To send push notifications you have opted into
To process and manage your subscription
To improve the Service based on usage patterns and crash reports
To enforce our content moderation and community guidelines
To respond to bug reports and support requests
To protect against fraud, abuse, and unauthorized access

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data under the following legal bases:

Purpose	Legal Basis
Account creation and authentication	Performance of contract
Providing app features (recipes, calculators, timer)	Performance of contract
Community Feed and user content	Performance of contract
Subscription management	Performance of contract
Push notifications	Consent (you can opt out anytime)
Analytics and usage data	Legitimate interest (improving the Service)
Crash reports	Legitimate interest (maintaining stability)
Content moderation	Legitimate interest (community safety)
Fraud prevention	Legitimate interest (security)

4. Data Processors and Third-Party Services

We use the following third-party services to operate the Service. Each processes your data according to their own privacy policies:

Service	Purpose	Data Processed
Firebase (Google)	Authentication, database, storage, analytics, crash reports, push notifications, hosting	Email, username, content, usage data, device info, push tokens
RevenueCat	Subscription management	Anonymous user ID, subscription status
Anthropic	AI-powered Smoke Assistant and Recipe Scanner	Messages and images you submit to these features (processed server-side, not stored by Anthropic beyond their standard retention)
Cloudflare	DNS and CDN for website	IP addresses (for routing)

5. Data Storage, Retention, and Security

5.1 Storage Location

Your data is stored on Firebase servers (Google Cloud Platform) in the United States.

5.2 Retention Periods

Account data: Retained until you delete your account
User-generated content: Retained until you delete it or delete your account
Analytics data: Retained for 14 months (Firebase default), then automatically deleted
Crash reports: Retained for 90 days
Push notification tokens: Removed when you log out or delete your account

5.3 Security Measures

We implement industry-standard security measures including:

All data encrypted in transit (HTTPS/TLS) and at rest (Firebase default encryption)
Passwords hashed by Firebase Authentication (never stored in plaintext)
Firestore security rules restricting access to authorized users only
File upload validation (size limits, file type restrictions)
Rate limiting on API endpoints
Firebase App Check to verify legitimate app requests
API keys stored in secure server-side Secret Manager

6. Your Rights

6.1 All Users

You can:

Access and update your profile information within the App
Delete your own posts, comments, and reviews
Block other users
Change your password
Delete your account entirely (Settings → Delete Account), which permanently removes all your data

6.2 European Users (GDPR)

If you are in the EEA, UK, or Switzerland, you additionally have the right to:

Access: Request a copy of all personal data we hold about you
Rectification: Request correction of inaccurate data
Erasure: Request deletion of your data (use the in-app Delete Account feature, or contact us)
Data Portability: Request your data in a machine-readable format
Restriction: Request that we limit processing of your data
Objection: Object to processing based on legitimate interest
Withdraw Consent: Withdraw consent for push notifications at any time via device settings

To exercise these rights, contact us at support@deepwoodz.co. We will respond within 30 days.

6.3 California Residents (CCPA/CPRA)

If you are a California resident, you have the right to:

Know: Request what personal information we collect, use, and disclose
Delete: Request deletion of your personal information
Opt-Out of Sale: We do NOT sell your personal information to third parties
Non-Discrimination: We will not discriminate against you for exercising your rights

To exercise these rights, contact us at support@deepwoodz.co.

7. Do Not Sell My Personal Information

We do NOT sell, rent, or trade your personal information to any third party for monetary or other valuable consideration. We never have and never will.

8. International Data Transfers

Your data is processed in the United States. If you are accessing the Service from outside the United States, your data will be transferred to and processed in the United States. By using the Service, you consent to this transfer. For EEA/UK users, this transfer is covered by Google's Standard Contractual Clauses for Firebase services.

9. Children's Privacy

The Service is not directed to children under 13 (or under 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at support@deepwoodz.co and we will promptly delete it.

10. Push Notifications

We may send push notifications about activity on your account (likes, comments, follows). You can opt out at any time by disabling notifications in your device settings or within the App settings. We will not send marketing push notifications without your explicit consent.

11. Analytics and Opt-Out

We use Firebase Analytics to understand how the Service is used. This data is aggregated and anonymous. You can opt out of analytics tracking by disabling analytics in the App settings (if available) or by contacting us.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

Updating the "Last Updated" date at the top of this page
Posting a notice within the App
Sending an email notification for material changes

Continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy, want to exercise your data rights, or have a privacy concern, contact us at:

DeepWoodz LLC
Email: support@deepwoodz.co