Last updated: November 4, 2026
Hapiga Vietnam Company Limited, also known as Hapiga Studio (“Hapiga,” “we,” “us,” or “our”), provides Soupy: AI Meal Planner (“Soupy”). This policy covers the Android app and the online services we run for it. We decide how personal information is used for these services, including as data controller where that term applies.
Soupy does not ask you to create an account or give us your name or email address. Your household profile, meal plans, shopping lists and calorie log are kept on your device. Some features send information to our servers and to service providers so they can work, as described below.
1. Information stored on your device
- Your household profile: number of adults, children’s ages, country and preferred store, weekly budget, units, food styles, diets, allergies, foods you avoid or love, and kitchen equipment.
- Weekly meal plans, recipes, swaps, shopping list and checked items.
- Calorie goal and meals you log, including estimates and thumbnails of meal photos you analyse.
- Settings, onboarding answers and a cached subscription status.
We do not sync this data to a Soupy cloud account. Android or your device manufacturer may back it up and restore it according to your device’s backup settings. You can delete it at any time with Profile → Reset app data or by uninstalling the app.
2. Installation identifier and secure sessions
The app creates a random installation identifier. It is used to sign the app in to Google Firebase Authentication so that only the app can call our AI features, and as the customer ID for subscription status with RevenueCat. The identifier is not your name, but it can link activity to one installation, so we treat it as personal information where the law requires.
3. AI features
When you generate or swap a meal plan, ask for recipes from ingredients you have, scan your fridge, or analyse a meal photo, the app sends the information needed for that request to our server (Google Cloud Functions for Firebase):
- Meal plans and recipes: the household profile described in section 1, dishes already in your week, and ingredients you enter.
- Fridge scan and meal analysis: the photo you take or choose, resized before upload.
Our server forwards the request to OpenRouter, which routes it to an AI model provider (currently Anthropic) to produce the result, and returns the result to the app. Diet and allergy choices may reveal information about your health; we use them only to tailor and safety-check recipes. Do not include people or other personal details in photos. We do not use your photos or profile to train AI models, and we do not keep the content of your requests on our server after the response is returned. OpenRouter and the model provider process requests under their own terms and may keep them briefly for abuse prevention or as required by law.
To keep the service fair and affordable, our server stores a daily count of AI requests for each installation identifier in Google Cloud Firestore. These records contain only the identifier, the date and the counts, not your profile or photos. Server logs may record technical details such as errors and timestamps and are kept for about 30 days.
AI results are estimates. Check ingredients and labels yourself, especially for allergies; Soupy is not medical or nutrition advice.
4. Subscriptions and purchases
Soupy Pro is sold through Google Play. Google processes your payment; we never receive your card details. RevenueCat receives purchase information from Google Play (such as product, price, currency, purchase and renewal dates, trial status and store transaction identifiers) linked to your installation identifier, so the app can unlock Pro, restore purchases and show subscription status. We use aggregated purchase data for business reporting.
5. Other device features
- Camera and photos: used only when you choose to scan a fridge or a meal. The app uses the system camera and photo picker and does not read your photo library in the background.
- Notifications: if you allow them, used for meal-planning reminders.
- Reviews: the app may show Google Play’s in-app review prompt; Google handles your rating and review.
Soupy does not show ads. To measure which of our own ad campaigns lead people to install Soupy and start a subscription, the app uses Adjust (Adjust GmbH), which shares installs, app opens and subscription events with Meta (Facebook). Adjust receives your device’s advertising ID (where available), the installation identifier, Google Play install referrer information, IP address, device and app information (such as model, OS version, language and app version), app opens, and subscription events (trial started, purchase, renewal, cancellation, with price and currency). Earlier versions of the app may also send app opens to Meta directly through the Meta SDK. You can reset or delete your advertising ID at any time in Android Settings → Privacy → Ads.
Soupy also records usage events in Firebase Analytics: which onboarding pages you reach and finish, your answers to the “what makes dinner hard” and “what would help” questions, when the subscription or offer screens are shown, skipped or used, and when a meal plan is built or a dinner is swapped. These events are not linked to your name or email (Soupy has no accounts) and are used only to improve the app.
6. Service providers
- Google (Firebase Authentication, Cloud Functions, Firestore, Google Play and Play Billing): secure sessions, running our AI features, usage limits, app distribution and payments.
- OpenRouter and the AI model provider it routes to (currently Anthropic): generating meal plans and recipes and analysing photos.
- RevenueCat: subscription status and purchase records.
- Adjust (Adjust GmbH): install and campaign attribution and fraud prevention. RevenueCat sends subscription events to Adjust for the same purpose.
- Meta (Meta Platforms): measuring and optimising our ads for Soupy on Facebook and Instagram, using the install and subscription events Adjust shares with it.
- Google Firebase Analytics (Google LLC): understanding how people use Soupy — for example which setup steps they finish, when the subscription screen is shown or skipped, and when a plan is built — so we can improve the app. It receives an app-instance identifier, the events listed here, device and app information (model, OS and app version, language, country) and an approximate location derived from the IP address. It does not receive your advertising ID, and we have turned off ad personalization for it.
These providers process information for us under contracts and their own policies. We do not sell your personal information for money. Sending app and subscription events to Adjust and Meta to measure our advertising may count as “sharing” for cross-context behavioural advertising under some US state laws; you can opt out by deleting your advertising ID as described above or by emailing support@hapiga.com. We may disclose information if required by law, to protect our rights or users, or as part of a merger or acquisition, subject to this policy.
7. Legal bases
Where the GDPR or similar laws apply, we process information to provide the features you request (contract), to secure the service and prevent abuse (legitimate interests), and to meet legal obligations. Where diet or allergy choices count as health information, we process them based on your explicit choice to enter them and use AI features; you can remove them from your profile at any time.
We measure our advertising campaigns based on our legitimate interest in understanding which marketing works, or on your consent where the law requires it. In the European Economic Area, the United Kingdom and Switzerland, the Adjust and Meta SDKs stay off until you allow ad measurement when the app asks; you can change your choice at any time in Profile → Ad measurement.
In the European Economic Area, the United Kingdom and Switzerland, Firebase Analytics stays off together with Adjust and Meta until you allow it in the app’s measurement prompt, and turns off again if you change that choice in Profile → Ad measurement.
8. International transfers and security
Our servers run in the United States, and our providers may process data in other countries. Where required, we rely on appropriate safeguards such as standard contractual clauses. Data is encrypted in transit (HTTPS), and access to our systems is restricted. No method of transmission or storage is completely secure.
9. Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, restrict or object to the processing of your personal information, to data portability, and to complain to a data protection authority. Most of your data is on your device and under your control. To ask us about server records, email support@hapiga.com with the subject “Soupy privacy”. Because we do not use accounts, we may ask for your installation identifier or Google Play order ID to find records. Deleting data does not cancel a subscription; manage subscriptions in Google Play.
10. Children
Soupy is intended for adults who plan meals for a household. It is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will take appropriate steps, including deletion.
11. Changes and contact
We may update this policy as the app or our practices change. We will update the date above and give notice of significant changes where required.
Hapiga Vietnam Company Limited
34/521 Nguyen Trai, Thanh Xuan District, Hanoi, Vietnam
Email: support@hapiga.com
Website: hapiga.com