Pandough

Privacy Policy

Last updated: August 2026

What Data We Collect

Pandough collects minimal data to help improve your baking experience:

  • •Calculator usage: Which features you use and how you navigate the app
  • •Device information: Browser type, screen size, and whether you're using the app or website
  • •Account data: If you sign in, we store your email to sync your saved recipes
  • •Payment data: If you subscribe to PRO, we store your subscription status (but not your payment details - see below)
  • •What you write: Your bake notes and photos, your conversations with the Pandough AI assistant, and any messages you send us. See "Pandough AI and Your Conversations" below.

Payment Processing

If you subscribe to Pandough PRO, your payment is processed by Stripe, a PCI-compliant payment processor. We do not store your credit card number, CVV, or full billing details.

What we store:

  • •Your Stripe customer ID (to link your subscription)
  • •Subscription status (active, cancelled)
  • •Subscription expiry date
  • •Whether you're a founding member

What Stripe stores (not us):

  • •Your payment card details
  • •Billing address
  • •Payment history

You can manage your payment details and view invoices through the Stripe billing portal, accessible from your account settings.

How We Use Cookies

We use cookies and similar technologies for:

  • •Essential cookies: To keep you signed in and remember your preferences
  • •Analytics cookies: To understand how people use Pandough so we can make it better

Analytics

We use two analytics services to understand how Pandough is used:

  • •Google Analytics 4 - Marketing analytics (page views, traffic sources, user acquisition)
  • •PostHog - Product analytics (feature usage, user flows, session recordings)

This helps us understand which features are popular, where users get stuck, and how to improve the baking experience.

If you are signed in, your analytics activity is linked to your account rather than being anonymous. We also record your IP address and approximate country. We do not sell this data or share it for advertising.

Session Recording: PostHog may record your screen interactions to help us identify usability issues. Everything you type is masked before it leaves your browser, and the text of your assistant conversations and support messages is masked as well. Recordings are stored for up to 30 days.

You can opt out of all analytics tracking at any time by clicking "Reject" on the cookie consent banner, or by using your browser's privacy settings.

Your Rights

Under GDPR and CCPA, you have the right to:

  • •Access the data we hold about you
  • •Request deletion of your data
  • •Opt out of analytics tracking
  • •Export your data in a portable format

Data Retention

  • •Analytics data: Retained for 14 months, then automatically deleted
  • •Session recordings: Retained for up to 30 days
  • •Account data, bakes, and conversations: Retained until you delete your account. We do not delete them on a timer, because your bake history is the point.
  • •Guest conversations: Retained for 90 days after the last activity. An opaque browser token, stored as a secure cookie, is used to let you reopen the conversation and receive replies on that browser.

When you delete your account, we erase your bakes, your notes and photos, your assistant conversations, and your support messages after a 30 day grace period. Some things survive in a form that is no longer linked to you: community contributions such as flours and recipes you submitted stay in the catalog with your name removed, and anonymised research records that were never linked to your identity in the first place remain.

Who Else Sees Your Data

Pandough runs on other companies' infrastructure. Here is every one of them and what it actually receives.

  • •Convex (United States) - Our database and file storage. Receives everything you save: your bakes, notes, photos, assistant conversations, your name and email.
  • •Clerk (United States) - Sign-in. Receives your email, name, profile picture, IP address and device.
  • •Vercel (United States) - Hosting. Receives every request: IP address, browser, pages you visit.
  • •OpenRouter, and Google as its model provider (United States) - Runs the Pandough AI assistant. Receives the messages you type to the assistant, any dough photos you attach, and the bake context we send with them.
  • •Stripe (United States and Ireland) - Payments. Receives your email, name and billing address, plus your card details, which Stripe holds and we never see. If you leave a comment when cancelling, Stripe receives that too.
  • •Resend (United States) - Sends our email. Receives your email address and name, plus short excerpts of messages you send us so we can reply.
  • •PostHog (European Union) - Product analytics and session recordings. Receives usage events, IP address, country, and recordings of your screen as described above.
  • •Google Analytics 4 (United States) - Web analytics. Receives IP address, pages visited and device type.
  • •Your browser's push service (Google, Mozilla or Apple, depending on your browser) - Delivers bake timer notifications. Receives a device identifier and delivery timing. The notification text is encrypted and the push service cannot read it.
  • •Your referring Pandough partner, when applicable - If you arrived through an approved partner, that partner's authorized support members can read and reply to your unified Help conversation. The interface identifies the partner before you write. Mike retains access so he can handle technical issues. Suspended partners and removed support members lose access immediately.

When you click through to a flour or oven retailer, that retailer sees your IP address and browser, the same as if you had typed their address yourself.

Pandough AI and Your Conversations

The assistant runs on Gemini Flash 3.5, reached through OpenRouter. When you send a message, we send OpenRouter your message, the recent conversation, and context we assemble about your bake: your selected flour, your oven, your schedule, and a summary of your last 10 bakes. If you attach a photo of your dough, that photo is sent too.

Your conversations are saved to your account so you can return to them. Signed-in conversations are erased when you delete your account, and you can delete any individual conversation from the conversation list at any time. Guest conversations expire after 90 days of inactivity. Free and guest users receive up to three AI replies per calendar month; messages addressed to a person do not use that allowance.

We do not sell your conversations, and we do not use them to train any AI model.

Who at Pandough Can Read Your Messages

Pandough is built and run by one person. Being straight with you about what that means:

I can read the unified Help conversations. Not routinely, and not for entertainment, but the technical access exists and I use it when something goes wrong. If you came through an approved partner, that partner's authorized support members can also read and reply to the same conversation. Concretely:

  • •When you mention @mike, the message is routed to my inbox and the assistant does not answer it. A partner mention works the same way for an eligible referred user.
  • •I have direct access to the database, which includes conversation history. I use it to debug specific problems, usually ones a user has reported.

I would rather tell you this than let you assume otherwise. If you would prefer the assistant not keep a record, you can delete any conversation from the conversation list, and deleting your account erases all of them.

Children's Privacy

Pandough is not intended for children under 13. We do not knowingly collect data from children.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

Contact

Questions about your privacy? Contact us at contact@pandough.app

← Back to home