Privacy Policy

Food Challenge Hub

Last updated: 7 October 2026

Food Challenge Hub Ltd (“Food Challenge Hub”, “we”, “us”, or “our”) operates the website foodchallengehub.com and the Food Challenge Hub mobile application (together, the “Service”), which allows users to discover, book, and compete in restaurant food challenges.

This Privacy Policy explains what information we collect, how we use it, who we share it with, and how you can exercise your rights over your data.

1. Who We Are

Food Challenge Hub Ltd is a company registered in England and Wales, with a registered office at Unit A, 82 James Carter Road, Mildenhall, IP28 7DE, United Kingdom. We are the data controller responsible for your personal data.

2. Information We Collect

2.1 Information you give us directly

Account information: name, email address, username, password, profile photo.
Challenge activity: challenge attempts you book or log, results you submit (including times, quantities, or outcomes), photos or videos you upload or link to as proof of a challenge.
FCH League entries: if you enter a Food Challenge Hub League competition, the video and self-reported result you submit. This is stored privately and is only reviewed by our staff and (if approved) shown to other users once that competition's results are revealed — it isn't visible to anyone else beforehand.
Max Out Log entries (Premium): if you use the Max Out Log, the food and water weights, calories and nutrition figures, notes, and optional photos you record. These are private to your account and are not shown to other users.
Information about other people: a result or leaderboard entry may name another person, for example a guest competitor added by a venue or moderator, or a result suggested by another user on someone's behalf. Suggested results are reviewed by our staff before they appear publicly.
Content you post: comments, leaderboard entries, links to third-party video content (e.g. YouTube or Instagram links shared via oEmbed), Community Forum threads and replies, and any other user-generated content.
Reports and blocks: if you report another user's content, or block another user, we keep a record of that action (who reported/blocked whom, when, and why) to operate moderation and keep it working correctly for you.
Social features: who you follow, who follows you, likes, and other interactions.
Competition entries: information you provide when entering prize competitions or league points challenges, including any details required to verify eligibility or award a prize.
Communications: messages you send us, such as support requests or feedback.
Payment information: if you subscribe to a paid Premium tier, our payment processors (see section 5) collect and process your card details directly — we never see or store your full card number.

2.2 Information collected automatically

Usage data: pages and screens viewed, features used, challenges browsed, search queries, timestamps, and general interaction data.
Device and technical data: IP address, device type, operating system, browser type, and mobile identifiers.
Location data: approximate or precise location, where you enable location permissions, used to show nearby food challenges on the map and to look up addresses.
Push notification token: a device identifier used to deliver notifications to your device, where you've enabled them.
Cookies and similar technologies: used on the website to keep you logged in, remember preferences, and understand how the Service is used.

2.3 Information from third parties

If you sign in using a third-party account (Google, Facebook, or Apple), we receive basic profile information from that provider as permitted by your settings with them.
If you choose to connect your Facebook account separately from signing in, we use Meta's official cross-app identity tools to match a public @foodchallengehub tag or comment you make on Facebook back to your account.
If you choose to connect a Facebook Page that you manage, Meta gives us the Page's name and ID and an access token for that Page, which we store so we can read public posts that tag @foodchallengehub on that Page. You can disconnect the Page at any time.
If you share a video via a YouTube or Instagram link, we store the link and retrieve publicly available embed information (via oEmbed) to display it; we do not store the underlying video file.

3. How We Use Your Information

We process your information for the following purposes:

Purpose	What we use
To create and manage your account	Account information
To let you find, book, and log food challenges	Challenge activity, location data
To operate leaderboards and league points (e.g. British Eating League)	Challenge activity, results, account information
To display user-generated content, comments, Community Forum posts, and shared videos	Content you post
To operate content reporting and user-blocking, and to moderate the Community Forum	Reports and blocks, content you post, account information
To run and administer prize competitions	Competition entries, account information
To personalise your experience (e.g. showing nearby challenges or people you follow)	Usage data, location data, social features
To send push and in-app notifications you've opted into	Push notification token, account information
To process Premium subscription payments	Payment information (handled by our payment processors, see section 5)
To communicate with you (service updates, support, promotional emails where you've opted in)	Account information, communications
To maintain the security and proper functioning of the Service	Technical and usage data
To comply with legal obligations, including age and eligibility checks for competitions	Account information, competition entries

4. Legal Basis for Processing (UK/EU Users)

Where UK GDPR or EU GDPR applies, we rely on the following legal bases:

Contract: to provide the Service you've signed up for.
Consent: for optional features such as marketing emails, precise location, push notifications, or entering prize competitions.
Legitimate interests: to improve the Service, keep it secure, and understand usage patterns.
Legal obligation: where required, for example in relation to running prize promotions.

5. Who We Share Information With

We do not sell your personal data. We work with a number of specific service providers who process data on our behalf, each only for the purpose described:

Provider	What they do
Supabase	Hosts our database, user authentication, and file storage (photos, videos).
Stripe	Processes Premium subscription payments made via our website.
RevenueCat, Apple, and Google	Process Premium subscription payments made via the iOS App Store and Google Play.
Meta (Facebook)	Provides Facebook sign-in, and (if you choose to connect your account) matches your public Facebook activity to your profile.
Google	Provides Google sign-in, maps, and address/venue search (Google Places).
Mapbox	Calculates driving times from your approximate location (rounded to roughly 1 km) to nearby venues, if you are logged in and have location enabled.
Anthropic	Analyses a food photo you choose to scan in the Max Out Log (Premium) to read the scale weight and estimate calories and nutrients. The photo is sent only for that scan and is not stored by us unless you attach it to an entry.
Open Food Facts	A free, open food database. If you use the food or barcode lookup in the Max Out meal planner, the text or barcode you type is sent to it to find nutrition information. No account details are sent.
OpenStreetMap (Nominatim)	A free, open mapping service. Venue addresses are sent to it to find map coordinates. If you use “Use my current location” when adding an address, or have location enabled for drive times, your device coordinates are sent to it to work out the address or country. On the website, map tiles are also loaded from OpenStreetMap, so your IP address is visible to it. No account details are sent.
Ideal Postcodes	Looks up UK postal addresses when you enter a postcode.
Expo / Amazon Web Services	Delivers push notifications to your device via Apple and Google's own notification services.
Resend	Sends account-related emails, such as email confirmation and password reset.

We may also share information with:

Restaurants and venues, where necessary to confirm a booking or challenge attempt.
A competition sponsor, only where you win or place in a sponsored FCH League competition and a prize needs to be arranged — and only the details actually needed for that (e.g. your name and a way to contact you), never your full account data.
Other users, for information you choose to make public, such as your username, results, comments, and leaderboard position. Community Forum posts are visible to everyone who can access that section of the Forum — some sections are restricted to specific groups of users (for example, verified members or Premium subscribers), but a post is never private to just you and one other person.
Video platforms, such as YouTube or Instagram, when you choose to link content through those services.
Legal and regulatory authorities, where required by law, or to protect our rights, users, or the public.
A future buyer or successor, in the event of a merger, acquisition, or sale of assets, subject to this Policy or a successor policy.

6. International Transfers

Where your data is transferred outside the UK or European Economic Area, we take steps to ensure it is protected to a standard consistent with UK/EU data protection law, such as using standard contractual clauses with our service providers.

7. Data Retention

We keep personal data for as long as your account is active, or as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we delete or anonymise it.

8. Your Rights and How to Delete Your Data

Depending on where you live, you may have the right to:

Access the personal data we hold about you
Correct inaccurate data
Request deletion of your data
Object to or restrict certain processing
Request a copy of your data in a portable format
Withdraw consent at any time, where processing is based on consent

To request deletion of your data or exercise any of these rights, email us at support@foodchallengehub.com or use the delete-account option within the app (Settings > Account > Delete Account). We will action deletion requests within a reasonable time, except where we are required to retain certain information for legal or legitimate business purposes (e.g. competition and fraud records).

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk, or your local data protection authority.

9. Children's Privacy

The Service is for adults aged 18 and over and is not directed at children or anyone under 18, and we do not knowingly collect personal data from anyone under this age. If you believe a child has provided us with personal data, please contact us so we can delete it.

10. Cookies

Our website uses cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Service is used. You can control cookies through your browser settings; disabling some cookies may affect how the Service functions.

Our website is hosted by GoDaddy, which, as a hosting provider, processes standard technical data (such as your IP address) in order to serve pages. We have switched off GoDaddy's optional performance-monitoring script on our website.

11. Security

We use reasonable technical and organisational measures to protect your data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version here with a new “Last updated” date, and where changes are significant, we will provide additional notice.

13. Contact Us

Food Challenge Hub Ltd
Registered office: Unit A, 82 James Carter Road, Mildenhall, IP28 7DE, United Kingdom
Email: support@foodchallengehub.com