Website Privacy Policy

Last updated: 24 September 2026

This Privacy Policy applies to the Decrave website only.

The Decrave website is an informational site used to explain what we are building and to collect interest for early access and the Founding Study waitlist. It is separate from the Decrave mobile app. The app has its own privacy policy, which covers how in-app data is handled.

This page explains what data the website collects, why it is collected, and what choices you have.

Plain-English summary

  • If you join the waitlist or contact us, we collect the details you choose to share, such as your email address.
  • With your permission, Google Analytics measures visits and scorecard use. Scorecard answers, scores and email addresses are not included in these events.
  • We do not sell your data.
  • We use this information only to operate the website, understand traffic, and contact you if you have asked us to.

What data the website collects

1. Waitlist and contact information

If you sign up to the waitlist or contact us, we may collect:

  • Email address
  • Name (if provided)
  • Any message or feedback you choose to submit

This information is used only to communicate with you about Decrave.

2. Website analytics

If you choose to allow analytics, Google Analytics receives limited technical and usage data, which may include:

  • Pages visited and time spent on the site
  • Approximate location (city or region level, not precise location)
  • Device type, operating system, and browser
  • Scorecard starts, progress milestones, completions, result views, app-link clicks and confirmed interest registrations
  • Technical network information needed to deliver the request, including your IP address

This data helps us understand how the site is used and what content is useful. We do not include individual answers, scores, email addresses, URL query strings or free text in our analytics events. An app-link click does not tell us whether someone installed the app. A confirmed registration event does not distinguish new and existing registrations.

3. Cookies

The website may use cookies or similar technologies to:

  • Ensure the site functions correctly
  • Measure traffic and site performance

Google Analytics is not loaded until you allow it. Use “Privacy choices” to allow or decline analytics, or to withdraw your choice later. Your preference is stored on this device for up to 180 days. Declining analytics does not prevent you using the scorecard. Withdrawal stops future analytics collection; it does not remove data already received by Google.

4. Appetite Awareness Scorecard

Your 12 answers, questionnaire progress and result are processed in your browser. We use session storage to preserve them across refreshes in the same tab, for up to 24 hours. Start again clears your answers. Closing the tab normally clears session storage, although your browser may restore it when restoring a session. If storage is blocked, progress lasts only while the page remains open. We do not send these answers or your score to our server, Google Analytics or the interest list.

If you register interest from your result, we separately store your email address, selected platform, time of registration and the version of the availability-email consent you accepted. This request is only for availability emails about the platform you select; it is not consent to unrelated marketing. Repeated requests for the same email and platform do not create duplicate registrations. Contact hi@getdecrave.com to withdraw your request or ask for deletion.

Cloudflare Turnstile protects the interest form from abuse. It processes technical browser and network information to verify the form, and we validate its security token on our server. It does not receive your scorecard answers from us. Hosting and database services process registrations to operate the interest list. We keep short-lived counters to limit repeated attempts; these counters are not used for advertising.

What the website does not collect

The scorecard does not transmit answers or scores to our systems. The website does not receive the following from the Decrave app:

  • Health data
  • Food logs, craving logs, or sleep data
  • Any data entered into the Decrave mobile app

App data is handled separately under the Decrave App Privacy Policy.

Why we collect this data

We collect website data to:

  • Operate and secure the website
  • Understand how visitors use the site
  • Improve clarity and content
  • Contact you if you join the waitlist or reach out to us

Legal basis for processing (UK GDPR)

We rely on:

  • Consent for waitlist sign-ups and communications you opt into
  • Consent for optional website analytics
  • Legitimate interests for security and website operation

You can withdraw consent at any time.

Who we share data with

We may use third-party service providers to operate the website, such as:

  • Website hosting
  • Analytics services
  • Email or waitlist tools
  • Form providers

These services process data on our behalf and only for the purposes described above. We do not sell personal data or share it for advertising purposes.

How long we keep data

  • Waitlist and contact data: kept until you unsubscribe, ask for deletion, or it is no longer needed for its original purpose.
  • Analytics data: retained for the period configured in Google Analytics. Analytics cookies set by this website expire after up to 180 days.
  • Scorecard session data: expires after 24 hours and is cleared when you start again. It is stored only in your browser tab.

Your rights

You have the right to:

  • Request access to your data
  • Ask for corrections
  • Request deletion
  • Withdraw consent for communications

You can do this by contacting us using the details below.

Security

We take reasonable technical and organisational steps to protect website data. However, no website can guarantee absolute security. Please do not submit sensitive personal or medical information through website forms.

Children

The Decrave website is intended for people aged 18 or over. If you are under 18, you must not use Decrave or provide personal data through this website, even with parental permission. We do not knowingly collect personal data from anyone under 18. If you believe someone under 18 has provided personal data, contact us at hi@getdecrave.com and we will take appropriate steps to delete it.

Changes to this policy

We may update this Website Privacy Policy as the site evolves. Any changes will be posted here with an updated "Last updated" date.

Contact

If you have questions about this Website Privacy Policy or want to make a data request, contact:

Email: hi@getdecrave.com