Privacy, in plain noodles.

Who we are

NoodlePants is operated by Trend Wise Investment Group Pty Ltd ("we", "us"), trading as NoodlePants. We act as the data controller for the personal data described in this notice. Contact us about privacy at hello@noodlepants.com.

What we collect and why

• · Account data — your email address and login credentials, used to create and authenticate your account (legal basis: performance of contract).
• · Subscription data — your plan, billing status, and trial / renewal dates, used to give you access to Pro features (legal basis: performance of contract).
• · Saved items — countries and comparisons you save are stored in your browser's local storage. They never touch our servers (no legal basis needed; stays on your device).
• · Usage and analytics — pages visited, approximate location (country-level), device type, and IP address, used to understand which features are useful and to keep the service secure (legal basis: legitimate interests in improving and securing the service).
• · Support and feedback — messages you send us and any contact details you include, used to respond to you (legal basis: legitimate interests in providing customer support).
• · AI assistant inputs — prompts you send to the in-app assistant, used to generate responses (legal basis: performance of contract). We don't use them to train third-party models.

Payment-card details are collected and processed directly by Lemon Squeezy (see Sharing below). We never see or store your card number.

Who we share data with

• · Lemon Squeezy — our Merchant of Record. Lemon Squeezy handles checkout, billing, tax compliance, invoicing, refunds, and subscription management. They receive your name, email, and payment information. See the Lemon Squeezy Privacy Policy.
• · Hosting and infrastructure — Lovable Cloud (built on Supabase) for database, authentication, and serverless hosting.
• · Email delivery — Resend, to send transactional emails such as trial confirmations and account notifications.
• · AI providers — managed AI gateways (such as NoodlePants AI, Anthropic, and Google Gemini) to generate assistant responses and country comparisons. We send the minimum necessary input — never your login credentials or payment data.
• · Professional advisers — accountants and legal advisers, where reasonably necessary.
• · Authorities — where required by law, court order, or to protect our rights.

We don't sell your personal data and we don't share it for third-party advertising.

Where your data is stored

User data (accounts, subscriptions, saved preferences, analytics events) is stored in a managed Postgres database operated by Lovable Cloud (built on Supabase), hosted on AWS infrastructure in the eu-west-2 (London, United Kingdom) region. Backups are encrypted and retained in the same region. Some processing (e.g. AI inference, email delivery, payment processing by Lemon Squeezy) may temporarily transit servers in other regions — see "International transfers" below.

European Users (GDPR)

If you are located in the European Union, European Economic Area, or United Kingdom, you have the following rights under the GDPR / UK GDPR:

• · Right of access — request a copy of the personal data we hold about you.
• · Right to rectification — ask us to correct inaccurate or incomplete data.
• · Right to erasure ("right to be forgotten") — ask us to delete your personal data.
• · Right to restrict or object to certain processing, including direct marketing.
• · Right to data portability — receive your data in a structured, machine-readable format.
• · Right to withdraw consent at any time, where processing is based on consent.
• · Right to lodge a complaint with your local supervisory authority.

To exercise any of these rights, email hello@noodlepants.com from the address associated with your account. We will respond within 30 days.

Deleting your account and data

Any user, anywhere in the world, can request permanent deletion of their account and associated personal data at any time. Email hello@noodlepants.com from the address on your account with the subject line "Delete my account". We will confirm the request, permanently delete your account data within 30 days, and email you when it's done. Billing and tax records held by Lemon Squeezy may be retained for the period required by applicable law (typically up to 7 years), and fully-anonymised analytics with no link back to you may be retained for product analysis.

Newsletter and email list

Email addresses collected via the newsletter signup are used only to send you the monthly NoodlePants Index email and occasional related product updates you've opted into. We do not sell, rent, trade, or share newsletter email addresses with any third party for their own marketing. Every newsletter email includes a one-click unsubscribe link, and you can also unsubscribe by emailing hello@noodlepants.com.

International transfers

Some of our service providers (e.g. hosting, AI inference) are based outside Australia, including in the EU and the United States. Where personal data leaves your region, we rely on appropriate safeguards such as Standard Contractual Clauses or the providers' own certifications.

How long we keep data

We keep account and subscription data for as long as your account is active, plus a short period after closure to deal with billing, tax, and legal obligations (typically up to 7 years for invoicing records held by Lemon Squeezy and us). Analytics data is retained in aggregated form. Support messages are kept while needed to resolve your issue and for a reasonable period afterwards.

Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or port your personal data, to object to certain processing, and to withdraw consent. You can also lodge a complaint with your local data protection authority (in Australia, the Office of the Australian Information Commissioner). To exercise any of these rights, email hello@noodlepants.com — we'll respond within 30 days.

Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit (HTTPS), encryption at rest, role-based access controls, and Row-Level Security on our database. No system is perfectly secure, but we take this seriously.

Cookies and local storage

We use a small number of strictly-necessary cookies and browser local storage to keep you signed in, remember your saved items, and remember your theme preference. Analytics are recorded server-side using a per-session identifier held in your browser's sessionStorage (cleared when you close the tab) — we do not set advertising cookies, third-party tracking cookies, or any cross-site tracking technology.

Because NoodlePants does not use any non-essential, advertising, or third-party tracking cookies, no cookie consent banner is required under the EU ePrivacy Directive or UK PECR. If we ever introduce non-essential cookies, we will add a consent banner on first visit allowing you to accept or decline them before any such cookie is set. You can clear cookies and local storage anytime in your browser settings.

Changes to this notice

If we change anything material, we'll update the "Last updated" date above and, where appropriate, notify you in-app or by email. No sneaky midnight rewrites.