Privacy Policy

1. Information we collect

Information you give us

• Account info — your name, email address, and password (stored only as a salted hash; we never see your plain password)
• Recipe content — titles, ingredients, instructions, notes, tags, attribution, photos, and any text you ingest from external sources
• Payment info — collected and stored by Stripe, not by us. We receive only a customer ID and subscription status.
• Communications — anything you send to support, billing, feedback, or other email addresses

Information collected automatically

• Usage data — pages visited, features used, approximate timestamps. Used to improve the product.
• Technical data — IP address, browser type, device type, operating system, referring URL
• Cookies — we set one HTTP-only authentication cookie when you sign in. It contains an opaque session token, not personal data, and expires after 30 days. We do not use third-party advertising cookies.

Information from third parties

• Stripe sends us subscription status and customer IDs when you upgrade, change plans, or cancel
• Anthropic returns the AI-generated structured recipe and macros when you trigger ingestion or estimation. They do not return any personal data we did not send them.

2. How we use your information

We use your information to:

• Operate and maintain the Service (authenticate you, store your recipes, run searches, generate AI outputs)
• Process payments and manage subscriptions
• Send transactional emails (verification, password reset, billing receipts)
• Send occasional product update emails (you can opt out at any time)
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations
• Improve the product (we look at aggregated, non-identifying usage patterns)

We do not sell your personal information. We do not use your recipe content to train AI models.

3. Third parties we share with

We share data only with the following service providers, each of whom is contractually required to protect it:

4. Where your data lives

Account and recipe data are stored in the United States (US-East). If you are in the EU/UK, your data is transferred to and stored in the U.S. We rely on Standard Contractual Clauses (SCCs) where required.

5. Retention

• Account and recipes: kept as long as your account is active
• After account deletion: removed from production immediately; purged from backups within 30 days
• Logs: retained for up to 90 days

6. Security

We protect your data with industry-standard measures, including TLS 1.2+ encryption, encrypted storage at rest, hashed passwords, and limited admin access.

7. Your rights

Depending on where you live, you have rights to access, correct, delete, or export your data. To exercise these rights, email privacy@recipeapp.io. We respond within 30 days.

8. Children

The Service is not directed at children under 13. If you believe we have collected data from a child, contact us and we'll delete it promptly.

9. Cookies and tracking

We use one required session cookie for authentication. We also use a tracking script on the marketing site for funnel analytics; this does not run inside the core application.

10. AI processing disclosure

When you use AI features, relevant content is sent to Anthropic's API. Per their commercial terms, they do not use this data to train their models and retain it for up to 30 days for safety review.

Contact

For privacy questions, requests, or complaints, email privacy@recipeapp.io.