Privacy Policy

We collect the following categories of information:

Information you provide directly

• Account details — such as your name, email address, and (optional) mobile phone number when you create an account or opt in to notifications.
• Recipe content — recipes you create, import, edit, share, comment on, or favorite.
• Profile content — your public handle, bio, avatar URL, website, and any profile fields you choose to fill in.
• Photos and media — images and videos you upload as recipe photos, "I made this" photos, or comment attachments.
• Communications — the content of messages you send us and records of your correspondence.

Information collected automatically

• Usage and device data — such as IP address, browser type, pages viewed, and timestamps, collected through cookies and similar technologies.
• Push notification tokens — if you grant notification permission, we store your browser's push-subscription endpoint so we can deliver notifications to you.

We use the information we collect to:

• provide, operate, and maintain the Service;
• extract and parse recipe content from URLs, images, and short-form video you submit;
• calculate nutritional information from the ingredients you list;
• generate share-card images, grocery lists, and meal plans;
• send you notifications you have opted in to receive (for example, when someone comments on your recipe);
• respond to your inquiries and provide customer support;
• improve and secure the Service and prevent fraud or abuse;
• comply with legal obligations.

If you grant browser permission for notifications, we use the resulting subscription solely to send you notifications you have opted in to receive — for example, "X commented on your recipe" or "X started following you." You can revoke notification permission at any time through your browser settings, and the corresponding subscription is removed from our database.

Notification subscription data is never shared with third parties for their own marketing or promotional purposes.

We share information only with the following service providers, under contracts that require them to protect your information and use it only to provide services to us:

• Supabase — database, authentication, and object storage (recipes, photos, profile data).
• Vercel — application hosting and edge network.
• Anthropic / OpenAI — recipe extraction, parsing, and nutritional estimation from user-submitted content. Inputs are not used for training. No personally-identifying information is sent in extraction prompts.
• Unsplash — public stock-photo URLs as recipe hero images (no user data sent).
• Instacart, Amazon, Walmart, Target, Whole Foods — when you click "Shop on X," we open a deep link to the relevant search results page on that store. We do not transmit your grocery list or account data to these services unless you explicitly opt in to a future paid integration.

We do not sell your personal information. We share information only in the limited circumstances below:

• Service providers. With vendors who perform services on our behalf (such as hosting, analytics, and messaging delivery), under contracts that require them to protect your information and use it only for the services they provide to us.
• Public recipes. Recipes you mark as public, including their title, ingredients, instructions, photos, and your @handle, are visible to anyone with the link — including via search-engine indexing. Recipes marked private are visible only to you (and collaborators, if added in the future).
• Legal and safety. When required by law, regulation, legal process, or to protect the rights, property, or safety of our users or others.
• Business transfers. In connection with a merger, acquisition, or sale of assets, subject to this policy.

We use cookies and similar technologies to operate the Service, remember your preferences, and understand how the Service is used. You can control cookies through your browser settings; disabling them may affect some features (such as keeping you signed in). We do not use third-party advertising cookies or trackers.

We maintain reasonable administrative, technical, and physical safeguards designed to protect your information. All data is encrypted in transit (HTTPS / TLS 1.3) and at rest (Supabase managed encryption). However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We retain your account information for as long as your account is active. If you delete your account, we delete your recipes, profile, photos, comments, and notifications within 30 days. Aggregated, anonymized usage statistics may be retained indefinitely.

You can:

• Access the personal information we hold about you.
• Export your recipes and account data (planned v1.1; today, email bruce@mcquillen.net and we'll send you a JSON dump).
• Correct inaccurate data by editing your profile and recipes directly.
• Delete your account at any time (Settings → Delete account). We delete the associated data within 30 days.
• Opt out of notifications at any time via Settings → Notifications or your browser settings.

The Service is not directed to children under 13 (or under 16 in the EEA / UK). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. If the changes are material, we will notify you in-app or by email. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

If you have questions about this Privacy Policy, contact us at:

• 📧 Email: bruce@mcquillen.net
• 👤 Operator: Bruce McQuillen
• 🏢 Mailing address: 1512 Haymarket Way, Hudson, OH 44236