1. Who we are
Extinct & Co. operates Fossil Fuel and is the controller of the personal information described in this notice. We are based in Glasgow, Scotland, United Kingdom. You can contact us at info@extinctandco.com.
This notice applies to the Fossil Fuel website, Android and iOS applications, connected wearable features and related support services.
2. Information we use
Depending on how you use Fossil Fuel, we may process:
- Account information: email address, account identifier, authentication records and account status.
- Household information: household membership, invitations, member email addresses, household size and shared settings.
- Food and planning information: meal plans, recipes, custom recipes, portions, schedules, shopping lists, completed items, batch-cooking events, substitutions and cooking preferences.
- Dietary and nutrition information: allergens, intolerances, dietary preferences, calorie and macronutrient targets and other health-related preferences you choose to provide.
- Billing information: membership tier, subscription status, transaction references, trial and renewal dates. Card details are collected and held by Stripe, not by us.
- Sharing information: referral status, invite links, calendar feed tokens and public recipe-link identifiers.
- Technical and usage information: device and app version, IP address and request metadata, session activity, feature usage, diagnostic events, hashed crash fingerprints and security/audit logs.
- Communications: messages and information you provide when you contact us.
We receive most information directly from you. We may also receive authentication information from your sign-in provider, billing status from Stripe, information entered by another member of your household and technical information automatically from your device or hosting infrastructure.
An email address and authentication information are required to create and secure an account; without them, we cannot provide an account. Payment information is required only if you choose a paid subscription. Dietary, allergy, household and planning details are optional, although features that depend on information you do not provide may not work or may be less personalised.
3. Why we use information and our legal bases
| Purpose | Legal basis |
|---|---|
| Create and secure your account; provide plans, recipes, lists, household features, calendar feeds and support. | Performance of our contract with you. |
| Take payments, administer trials and subscriptions and keep required transaction records. | Performance of our contract and compliance with legal obligations. |
| Prevent abuse, investigate faults, protect accounts, enforce limits and maintain service reliability. | Our legitimate interests in operating a secure and dependable service. |
| Understand feature use and improve Fossil Fuel using limited product analytics and diagnostics. | Our legitimate interests in improving the service; consent where required by law. |
| Send service messages such as security, billing or material service-change notices. | Performance of our contract and our legitimate interests. |
| Send optional marketing communications. | Your consent. You may withdraw it at any time. |
Fossil Fuel uses rules and preferences to recommend and organise meals. These suggestions do not produce legal or similarly significant effects and are not solely automated decisions of that kind.
4. Dietary, allergy and health-related information
Allergy, intolerance and nutrition information may reveal information about your health and may be special category data under UK data-protection law. We use it only when you choose to provide it, to personalise your experience and attempt to exclude or flag unsuitable items. Where special category rules apply, we rely on your explicit consent. You can withdraw that consent by removing the information or deleting your account, although this does not affect earlier lawful processing.
Fossil Fuel is not an allergy-management or medical service. Our data can be incomplete, outdated or affected by substitutions and recipe or manufacturer changes. Always check the physical product label, full ingredient list and “may contain” warnings every time you buy and before anyone consumes a product. If there is doubt, do not use the product and seek appropriate professional advice.
5. Households, referrals and public links
Members of a linked household can see and change shared planning information, which may include food preferences, meal plans, recipes, shopping lists and the email addresses of household members. Only invite people you trust. A household owner may remove members, and a member may leave, using the available account controls.
Referral and household invitation links contain identifiers or secret tokens. Anyone who receives an active invitation may be able to use it, so do not publish it. We record referral relationships to administer eligibility and rewards.
A live calendar feed is deliberately accessible without an interactive Fossil Fuel login so calendar services can subscribe to it. Anyone with the non-guessable feed URL may be able to read the events and details it exposes, including meal, shopping and batch-cooking information. Keep it private, remove it from services you no longer use, and rotate it if you believe it has been shared unintentionally.
Public recipe links are designed to be viewed by anyone with the link. Do not include personal or confidential information in content you choose to share publicly.
7. International transfers
Some service providers may process information outside the United Kingdom. Where required, we use a lawful transfer mechanism such as UK adequacy regulations, the UK International Data Transfer Agreement or Addendum, together with appropriate contractual and technical safeguards. Contact us if you would like more information about the safeguards relevant to your data.
8. How long we keep information
We keep account and planning information while your account is active and for a limited period afterwards where necessary to complete deletion, resolve disputes, prevent fraud, restore backups or meet legal duties. Billing and transaction records may be retained for up to seven years where needed for tax, accounting or legal purposes. Security, diagnostic and audit records are kept only for a proportionate period based on their purpose. Backups are deleted or overwritten on a rolling schedule.
When you permanently delete your account, associated live application data is deleted or irreversibly anonymised. If you have an eligible recurring Stripe subscription, we instruct Stripe not to renew it and it ends at the close of the current paid period; limited billing records remain subject to Stripe's processes and our tax, accounting, fraud-prevention and legal obligations.
Information another household member independently retains, or information already exported to an external calendar or retailer, is not deleted from that third party when you delete Fossil Fuel data.
9. Security and your responsibilities
We use access controls, encrypted connections, restricted service credentials and other proportionate safeguards. No online service can guarantee absolute security. Use a strong, unique password, protect your device and secret sharing links, and tell us promptly if you suspect unauthorised access.
Fossil Fuel uses essential session cookies and local device storage to keep you signed in, remember settings and operate the service. We do not currently use third-party advertising cookies. If this changes, we will update this notice and obtain consent where required.
10. Your rights
Depending on the circumstances, UK data-protection law may give you rights to access, correct, erase, restrict or receive a portable copy of your personal information. Where processing relies on consent, you may withdraw it at any time.
You have the right to object to our use of your personal information where we rely on legitimate interests. You have an absolute right to object to direct marketing. Contact us using the details below to exercise this right.
You can update or export much of your information within Fossil Fuel. You can also clear your app data while keeping your login, or permanently delete your account and associated app data. You may instead email info@extinctandco.com. We may need to verify your identity and may retain limited information where the law permits or requires it.
You may complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint, but we would appreciate the opportunity to address your concern first.
11. Children
Fossil Fuel accounts are intended for people aged 18 or over. An adult may enter household size and food preferences relating to children in their care, but should provide only what is necessary and must be authorised to do so. Children should not create accounts or submit personal information directly.
12. Changes to this notice
We may update this notice when our service, providers or legal obligations change. We will post the current version here and update the date above. We will give appropriate advance notice of material changes where reasonably possible, and seek fresh consent if required.
13. Contact us
For privacy questions, rights requests or general support, email info@extinctandco.com.