Privacy Policy
Last updated: 2026-11-01
Who we are
Today's Dish («طبق اليوم») is a meal-suggestion app made by Moonshift. This policy explains what the app and its servers collect, why, where it is kept, for how long, and the choices you have. It applies to the Android and iOS apps and to this website.
Contact: info@moonshift.app
What we collect
When you use the app without an account (guest)
- The settings you choose on your phone: language, market, cuisines, diet, ingredients you don't eat, the ingredients you pick for a search. They are sent with each request for suggestions and are not stored on our servers against your identity.
- An install identifier: a random number created when the app is installed. It is not linked to your name, phone number or advertising ID. It is used to limit how many requests one phone can make and to count how the app is used (see "Usage statistics").
When you create an account
- Your email address and a password (stored only in a protected, one-way form), or the account identifier from Google or Apple if you sign in with them, and your name if that service provides it.
- Your preferences: language, market, cuisines, diet, ingredients and ingredient groups you don't eat, and the ingredients you choose on Home.
- Your pantry, if you turn it on: the ingredients you have and how much is left.
- Your meal plan and history: the meals you accept, the dates, and whether you cooked them.
- Your favorites, and any custom tags you type in (reviewed by our team before they are used for everyone).
Usage statistics
The app records simple events such as "the app was opened", "suggestions were shown", "a meal was accepted" or "a side dish was swapped", with the install identifier, the time and, when you are signed in, your account. They contain no names, emails or free text. Our server also counts each set of suggestions it sends. We use these numbers to understand how the app is used and to plan its capacity.
Technical data
Like any website, our servers receive your IP address and the time of each request. They are used to keep the service secure and working and are not used to identify you.
What stays on your phone
Meal reminders are scheduled on your phone and are never sent to us. The app also keeps a copy of your plan, pantry and favorites on the phone so you can see them offline.
Why we use it
- To suggest meals that fit your choices and to keep your plan, pantry and favorites in your account.
- To send the codes that verify your email or reset your password.
- To protect the service, for example by limiting repeated requests.
- To improve the app and plan its capacity, from usage statistics.
We do not sell your data, show ads, or use your data to track you across other apps or websites.
Who processes it for us
- Hosting: data is stored on servers of a cloud hosting provider in Saudi Arabia; the location of the cloud servers may change according to technical needs.
- Email: verification and sign-in codes are sent through an email service provider.
- Sign-in: if you choose Google or Apple, they confirm your identity to us under their own privacy policies.
These providers process the data only to provide their service to us.
How long we keep it
- Your account data is kept while you have an account. When you delete your account in Settings, you are signed out at once and your personal data is deleted permanently 30 days later.
- Usage statistics are kept in detailed form for 90 days, then only as daily totals without individual identifiers, for up to 13 months. After account deletion, the remaining events are kept without any link to you.
- Technical logs are kept for a short time for security and troubleshooting.
Your rights
Wherever you live, you can ask to know what personal data we hold about you, to get a copy, to correct it, or to have it deleted, and you can object to its processing. You may also have further rights under the laws of your country, such as Egypt's Personal Data Protection Law (Law No. 151 of 2020). You can change your preferences and delete your account directly in the app (Settings → Delete account). For anything else, contact us at info@moonshift.app.
Children
The app is not directed at children under the legal age. If you believe a child has given us personal data, contact us and we will delete it.
Security
Data travels between the app and our servers over encrypted connections (HTTPS). Passwords are stored in a one-way form that cannot be read back. Access to our servers and admin tools is limited and protected.
Changes to this policy
When this policy changes, we update the date at the top of this page and, for important changes, tell you in the app.