Effective date: July 26, 2026
Last updated: July 26, 2026
This Privacy Policy explains how Dark Nebula AI LLC ("VivEat," "we," "us," or "our") collects, uses, shares, and protects information about you when you use the VivEat mobile application, the website at viveat.com, and related services (collectively, the "Service").
VivEat is a consumer AI meal-planning service. We take a few facts about your household — how many people you feed, what they like, and what they are allergic to — and use AI to generate weekly dinner plans, cooking steps, estimated nutrition, and dish images, then hand off an aggregated grocery list to third-party retailers.
Please read this Policy together with our Terms of Service and our Disclaimers. The Disclaimers contain important safety information about allergens and nutrition that this Policy does not repeat in full.
To plan meals your household can safely eat, we ask you to tell us about food allergies, intolerances, and dietary restrictions. This is health-adjacent, sensitive information, and we treat it with heightened care:
Depending on where you live, allergy and health-related information may be treated as a special category of personal data (GDPR Art. 9) or sensitive personal information (California/CCPA). Where required, we process it based on your explicit consent, which you may withdraw at any time by editing your profile or contacting us.
Data controller: Dark Nebula AI LLC
Postal address: 224 Turnersburg Highway #1064, Statesville, NC 28625, USA
Privacy contact: privacy@viveat.com
If you are in the EU/EEA or UK, we have not appointed an EU/UK representative, because the Service is currently offered to residents of the United States only. If we begin offering it in the EU/EEA or UK, we will appoint one and update this Policy before doing so.
Data Protection Officer: not appointed.
| Category | Examples | Why we collect it |
|---|---|---|
| Account & identity | Email address; name/display name; authentication identifiers from your chosen login provider (Google, Apple, Facebook) via Microsoft Entra External ID | Create and secure your account; sign you in; contact you about the Service |
| Waitlist | Email address | Notify you about early access and launch |
| Household profile | Household size; number and (optional) names or labels of household members | Scale recipes and grocery quantities |
| Dietary preferences | Cuisines, likes/dislikes, dietary styles (e.g., vegetarian) | Personalize meal plans |
| Food allergies & restrictions (sensitive) | Allergens to avoid (e.g., peanuts, shellfish, dairy), intolerances | Filter recipes and ingredients; safety-related personalization |
| Pantry items (optional) | Ingredients you already have | Reduce redundant grocery items |
| Meal-plan history & feedback | Generated plans; ratings; thumbs up/down; free-text feedback | Improve your future plans and the Service |
We aim to minimize automatic collection and do not use third-party advertising trackers. The app currently includes no third-party analytics or crash-reporting SDK; diagnostic logging happens on our own servers. If we add such a tool, we will list it here first.
Where GDPR/UK GDPR applies, we rely on the legal bases noted below.
| Purpose | Legal basis (GDPR) |
|---|---|
| Create your account and provide meal plans, cooking steps, nutrition estimates, and grocery lists | Performance of a contract (Art. 6(1)(b)) |
| Filter meals for allergies/dietary restrictions | Explicit consent for sensitive data (Art. 9(2)(a)), plus contract |
| Generate dish images and format grocery lists via our AI subprocessors | Performance of a contract; legitimate interests (Art. 6(1)(f)) |
| Send waitlist, transactional, and service messages | Consent (waitlist) / contract (transactional) |
| Maintain security, prevent fraud/abuse, debug | Legitimate interests (Art. 6(1)(f)); legal obligation |
| Improve and develop the Service (aggregated/de-identified where feasible) | Legitimate interests (Art. 6(1)(f)) |
| Comply with law and enforce our Terms | Legal obligation; legitimate interests |
| Optional analytics/marketing (if any) | Consent (Art. 6(1)(a)) |
You may withdraw consent at any time; this does not affect processing already carried out.
We do not sell your personal information for money. We share it only with service providers ("subprocessors") who process it on our behalf under contract, and with grocery partners you choose to use.
Current subprocessors and partners: (current as of the date above; we update this table when our providers change)
| Provider | Role | Data involved | Location |
|---|---|---|---|
| Microsoft Azure (Container Apps, Table & Blob Storage, Entra External ID, Azure OpenAI, Azure AI Speech) | Cloud hosting, database/storage, sign-in, AI dish-image generation, optional voice input | Account, profile, dietary/allergy data, meal-plan data | United States |
| Google (Sign in with Google) | Optional sign-in, only if you choose it | Your name, email address and profile picture, received from Google | United States |
| Anthropic Claude, accessed via Microsoft Azure AI Foundry | AI generation of meal plans, recipes, steps, nutrition estimates | Household prefs, dietary/allergy inputs, plan requests (prompt content) | United States (Azure East US 2) |
| Impact (affiliate network) | Affiliate link tracking / commissions | Click and conversion signals (typically aggregated/hashed) | United States |
| Walmart / Instacart / Kroger | Grocery list handoff and fulfillment on their platforms | Aggregated grocery list you send; then governed by their own privacy policies | United States |
| RevenueCat (at launch) | Subscription entitlement management | Subscription/purchase identifiers, app user ID | United States |
| Apple App Store / Google Play (at launch) | In-app purchase / billing | Payment handled by the store; we receive purchase status only | United States |
Anthropic and Azure OpenAI: We use these AI providers under commercial/enterprise terms. Content you submit for meal planning is sent to them to generate your results. We have configured our use so that your inputs and outputs are not used to train their models (see Section 6), subject to those providers' then-current terms.
We may also share information: (a) to comply with law, legal process, or lawful government requests; (b) to protect the rights, safety, and security of users, the public, or VivEat; (c) in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy; and (d) with your direction or consent.
When you tap a grocery link, you leave VivEat and interact with the retailer under their privacy policy and terms. We are not responsible for third-party data practices.
We keep personal information only as long as needed for the purposes described here:
To exercise these, use in-app settings or contact privacy@viveat.com. We will verify your request and respond within the timeframe required by applicable law.
You also have the right to restrict or object to certain processing, to data portability, and to lodge a complaint with your supervisory authority (e.g., your national Data Protection Authority, or the UK ICO). You have the right not to be subject to solely automated decisions producing legal or similarly significant effects; meal planning is a convenience feature and does not produce such effects.
California residents have rights to know/access, delete, correct, and to limit the use of sensitive personal information, and to be free from discrimination for exercising them.
You may submit requests by emailing privacy@viveat.com, or from Settings in the app. Authorized agents may submit requests with proof of authorization.
Residents of states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, Utah and Texas) may have similar rights; contact us to exercise them.
VivEat is a general-audience household tool intended for adults (18+) and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you tell us about household members who are children (e.g., "2 kids"), we use only the count and dietary/allergy needs to size and filter meals — please do not provide a child's contact details, precise identity, or other personal information.
If you believe a child under 13 has provided us personal information, contact privacy@viveat.com and we will delete it.
We use administrative, technical, and organizational safeguards appropriate to the sensitivity of the data, including:
No system is perfectly secure. We cannot guarantee absolute security, and you use the Service at your own risk.
VivEat stores and processes data in the United States. If you access the Service from outside the US (including the EU/EEA or UK), your information will be transferred to and processed in the US and other countries that may have different data-protection laws.
Where required, we rely on appropriate transfer mechanisms such as the EU Standard Contractual Clauses (and the UK Addendum) and supplementary measures.
The Service links to third-party retailers (Walmart, Instacart, Kroger) and relies on third-party login and payment providers. Their handling of your information is governed by their privacy policies, not this one. We encourage you to review them.
We may update this Policy from time to time. If we make material changes, we will notify you through the app, by email, or by other reasonable means, and update the "Last updated" date. Your continued use after changes take effect constitutes acceptance where permitted by law.
Questions or requests about this Policy or your data:
Dark Nebula AI LLC
224 Turnersburg Highway #1064, Statesville, NC 28625, USA
privacy@viveat.com