OmadMode
Log In Sign Up

Privacy Policy

Last updated: November 08, 2026

This Privacy Policy explains how OmadMode ("OmadMode", "we", "us", "our"), a product operated by ialae, collects, uses, shares, and protects personal data when you use https://omadmode.ialae.com and related services (the "Service"). We are the data controller for the personal data described here. You can reach us at contact@ialae.com. Please read this together with our Cookie Policy and Data Processing Agreement.

1. Data we collect

  • Account data you provide when you register or contact us, such as your name, email address, password (stored only as a secure hash), and, if you sign in with a third party such as Google, the identifier and basic profile information that provider shares.
  • Profile and preference data you provide to use the Service, such as dietary preferences, goals, calorie and macro targets, chosen ingredients, cuisines, and saved meals.
  • Generated and usage Content, such as the meals and recipes generated for you and items you save to your library.
  • Billing data relating to your subscription. Payments are processed by our payment provider; we receive subscription status and limited billing metadata but do not store your full card or payment credentials.
  • Usage and analytics data collected automatically through our analytics provider, ScoutVibe (see section 4): pages visited, clicks, time on page, referring channel, approximate (city-level) location derived from a hashed IP address, and a device fingerprint used to recognise returning visitors and sessions.
  • Technical data such as IP address, browser and device type, operating system, and log data, used for security, debugging, and fraud prevention.
  • Communications you send us, such as support emails.

2. How we collect it

We collect data directly from you (when you register, set preferences, subscribe, or contact us), automatically (through cookies, local storage, device fingerprinting, and server logs as you use the Service), and from third parties (such as your sign-in provider and our payment provider).

3. Why we use it and our legal bases

We use personal data to:

  • provide and operate the Service, including generating meals and saving your library (legal basis: performance of our contract with you);
  • create and secure your Account, prevent fraud and abuse, and keep the Service safe (legitimate interests; legal obligation);
  • process subscriptions, billing, and renewals (performance of contract; legal obligation);
  • send transactional and service emails (such as password resets and important notices) (contract; legitimate interests);
  • understand and improve the Service through analytics (consent, where required; otherwise legitimate interests);
  • respond to your requests and provide support (contract; legitimate interests); and
  • comply with legal obligations and enforce our Terms (legal obligation; legitimate interests).

Where we rely on consent (for example, non-essential analytics), you may withdraw it at any time; this does not affect processing carried out before withdrawal.

4. Analytics, cookies, and device fingerprinting

We use ScoutVibe to understand how the Service is used. This may involve cookies, local storage, and device fingerprinting (combining signals about your device and browser to recognise return visits) and processing of a hashed IP to estimate city-level location. Where consent is required, analytics loads only after you accept via the consent banner. See our Cookie Policy for details and how to manage your choices.

5. Automated processing and AI

The Service uses automated systems and AI providers to generate recipes and nutritional estimates from your inputs. This processing does not produce legal or similarly significant effects about you; it produces meal suggestions. Your inputs may be processed by our AI sub-processor to generate outputs. We do not use your personal data to make decisions that have a legal or similarly significant effect on you.

6. How we share data

We do not sell your personal data. We share it only with:

  • Sub-processors and service providers who process data on our behalf under contract, including hosting and storage, our AI provider, email delivery, analytics (ScoutVibe), and payment processing. They are listed in our DPA.
  • Authentication providers you choose to use (such as Google).
  • Authorities and others where required by law, to comply with legal process, to protect our rights, safety, or property, or to prevent fraud or abuse.
  • A successor in connection with a merger, acquisition, or sale of assets, subject to this Policy.

7. International transfers

Our infrastructure and sub-processors may process data in countries outside your own, including outside the EEA/UK. Where we transfer personal data internationally, we rely on appropriate safeguards (such as standard contractual clauses) where required by applicable law.

8. Retention

We keep personal data for as long as your Account is active and as needed to provide the Service. After you delete your Account, we delete or anonymise your personal data within a reasonable period, except where we must retain certain records to comply with legal, tax, accounting, or dispute-resolution obligations, or to enforce our agreements. Analytics and log data are retained for limited periods consistent with their purpose.

9. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, hashed passwords, access controls, and least-privilege practices. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your credentials safe.

10. Your rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal data, to object to or restrict certain processing, to withdraw consent, to data portability, and to lodge a complaint with your data protection authority. If you are in the EEA/UK, these are your GDPR rights. If you are a California resident, you have rights under the CCPA/CPRA, including the right to know, delete, correct, and to opt out of "sale" or "sharing" (we do not sell personal data). To exercise any right, use our Data Request page or email contact@ialae.com. We will not discriminate against you for exercising your rights.

11. Children

The Service is not intended for anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

12. Third-party links

The Service may link to third-party sites and services we do not control. This Policy does not apply to them; review their privacy notices.

13. Changes to this Policy

We may update this Policy from time to time. Material changes will be notified via the Service or by email, and the "Last updated" date will change. Continued use after changes take effect constitutes acceptance where permitted by law.

14. Contact

Questions, requests, or complaints: contact@ialae.com. If you are in the EEA/UK and are not satisfied with our response, you may contact your local supervisory authority.

This document is provided for transparency and does not constitute legal advice.