Privacy Policy

Who we are

Maison Théorea Ltd is registered in England and Wales. We operate the Théorea application and website (collectively, “the Service”). References to “we”, “us”, or “our” in this policy refer to Maison Théorea Ltd.

Questions about this policy or your data may be directed to privacy@maison-theorea.com.

What data we collect

We collect the following categories of personal data:

• Account data — your name, email address, and authentication credentials when you register.
• Profile data — tea preferences, flavour profile, ritual style, and any optional information you choose to provide.
• Ritual logs — tea sessions you record, including brewing parameters, tasting notes, and mood reflections.
• Conversation data — messages exchanged with Lou, our AI tea companion, to enable personalised recommendations.
• Usage data — pages visited, features used, and interaction patterns, collected via Google Analytics 4.
• Transaction data — order history and payment references (payment card details are processed by Stripe and never stored by us).
• Device data — device type, operating system, and browser, collected automatically for technical compatibility.

How we use your data

We use your personal data to:

• Create and manage your account and authenticate your identity.
• Provide Lou's personalised tea recommendations based on your preferences and ritual history.
• Process marketplace orders and fulfil purchases.
• Improve the Service through aggregated usage analysis.
• Send service communications (account updates, order confirmations).
• Comply with legal obligations.

We do not sell your personal data to third parties. We do not use your data for automated decision-making that produces legal effects.

Legal basis for processing

Under UK GDPR, we process your data under the following bases:

• Contract — processing necessary to deliver the Service you have requested.
• Legitimate interests — improving the Service and preventing fraud.
• Consent — marketing communications (you may withdraw at any time).
• Legal obligation — compliance with applicable law.

Data sharing

We share data only with trusted service providers who process it on our behalf:

• Supabase — database and authentication infrastructure.
• Anthropic — AI inference for Lou (conversation data is processed but not used to train Anthropic models per our agreement).
• Stripe — payment processing.
• Google Analytics — usage analytics.
• Vercel — application hosting.
• Google Cloud Platform — data storage and infrastructure.

All processors are bound by data processing agreements. Where data is transferred outside the UK, appropriate safeguards (standard contractual clauses) are in place.

Data retention

We retain your account data for as long as your account remains active. Ritual logs and conversation data are retained indefinitely to maintain your personal history, unless you request deletion. Usage analytics are retained for 26 months per Google Analytics default settings.

You may request deletion of your account and associated data at any time by contacting privacy@maison-theorea.com.

Your rights

Under UK GDPR, you have the right to:

• Access — request a copy of the data we hold about you.
• Rectification — correct inaccurate data.
• Erasure — request deletion of your data (“right to be forgotten”).
• Restriction — limit how we process your data in certain circumstances.
• Portability — receive your data in a machine-readable format.
• Objection — object to processing based on legitimate interests.

To exercise any right, contact us at privacy@maison-theorea.com. We will respond within one calendar month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Cookies and analytics

We use Google Analytics 4 to understand how the Service is used. GA4 uses first-party cookies and does not use advertising identifiers. You may opt out of analytics by using the Google Analytics Opt-out Browser Add-on or by enabling a “Do Not Track” signal in your browser.

We use a session cookie for authentication purposes. This cookie is strictly necessary for the Service to function and cannot be opted out of while using the app.

Children

The Service is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided data to us, please contact us immediately.

Changes to this policy

We may update this policy from time to time. Material changes will be communicated via the app or by email. The date at the top of this page reflects the most recent revision.

Contact

Maison Théorea Ltd
Registered in England and Wales
privacy@maison-theorea.com