privacy-policy
Privacy policy
Pitmaster is a social BBQ platform for cooks, profiles, challenges and personal progress. This privacy policy explains which personal data we process, why we process it and how you stay in control.
Last updated: 13 August 2026
Who we are
Pitmaster is operated by Digitally Famous. For privacy questions, requests or complaints, contact admin@digitally-famous.com.
Data we process
We process account data such as your email address, Supabase user id, login provider and provider identities. We also process profile data such as username, name, bio, location, profile photo, favorite BBQ, experience level, language preference and privacy settings.
Cooks, community and progress
When you use Pitmaster, we process content you add or cause: cooks, posts, photos, BBQ details, fuel, smoke wood, techniques, protein/cut, flavor makers, sides, temperatures, notes, challenges, likes, comments, saves, follows, follow requests, badges, streaks and statistics.
Facebook, Google and Apple login
With social login we receive data from the chosen provider, such as provider id, name, email address and profile photo when available. For Facebook, and only with the required permission, we use app-scoped friend data to find friends who also use Pitmaster and show pitmaster suggestions. We do not store a full phone contact list.
Photos and visibility
Uploaded photos can contain personal data, such as faces, locations or recognizable objects. Photos for public cooks, BBQs and avatars are currently made available through public media URLs via Supabase Storage. Only upload media you truly want to share within the selected visibility.
Why we use data
We use data to create and secure your account, show your profile and feed, publish cooks, power social features, track challenges and badges, send notifications, provide support, fix errors, prevent abuse and improve the service.
Legal bases
We process data to perform the service you use, based on your consent where required, based on our legitimate interest for security, support and debugging, and where needed to comply with legal obligations.
Premium and payments
For premium we use RevenueCat, Apple App Store and/or Google Play to process subscriptions. We store subscription status, product id, entitlement, store, customer id and relevant webhook information. We do not store payment card details ourselves.
Push, support and error logs
For push notifications we store data such as your Expo push token, platform and device id. For support and bug fixing we may store auth event logs and app error logs, including user id, platform, app version, build number, error message, stack and technical context. We use these logs to solve issues and investigate abuse.
Who we share data with
We do not sell your personal data. We use processors and platforms required for the service, such as Supabase for database, auth and storage, Expo for push and builds, RevenueCat for subscriptions, Shakebugs for bug reports, Meta/Google/Apple for social login and store functionality, and Vercel/Sanity for website and content management.
International transfers
Some suppliers may process data outside the European Economic Area. Where that happens, we rely on appropriate safeguards from those suppliers, such as contractual terms, security measures and applicable transfer mechanisms.
Retention
We keep account and profile data while your account exists. Cooks, comments, photos and social interactions are kept as long as needed for the app or until you delete them. Billing data is kept as long as needed for subscriptions, administration and legal obligations. Technical logs are kept no longer than needed for support, security and debugging.
Your rights
You can request access, correction, deletion, restriction, portability or objection to processing. Where processing is based on consent, you can withdraw that consent. You can also lodge a complaint with the Dutch Data Protection Authority.
Account and data deletion
To delete your account or Facebook/Meta data, use the instructions on the Data deletion page or email admin@digitally-famous.com from the email address linked to your account. We normally respond within 30 days.
Security
We protect the app with Supabase Auth, encrypted connections, Row Level Security, limited access to admin tables and server-side secrets for sensitive actions. No measure is absolute, but we design the database so tables and permissions avoid unnecessary access.