Privacy Policy

1. Introduction

Welcome to RecipePop ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (collectively, the "Service").

Please read this Privacy Policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

2. Information We Collect

2.1 Information You Provide to Us

We collect information that you voluntarily provide to us when you:

Register for an account: Name, email address, password
Use our Service: Recipes you save, create, or import; pantry contents; grocery lists; cooking preferences
Contact us: Any information you provide when you contact our support team
Subscribe to Premium: Payment information is processed by Apple App Store or Google Play Store (we do not store payment details)

2.2 Information Collected Automatically

When you use our Service, we automatically collect certain information:

Usage data: How you interact with the app, features used, time spent, and actions taken (collected via PostHog, anonymized with hashed user IDs)
Device information: Device type, operating system version, unique device identifiers, mobile network information
Log data: IP address, access times, app crashes, error reports
Import processing data: When you import a recipe, we collect performance metrics about the import process, such as how long each step took, which extraction method succeeded, and how confident our AI was in the result. This data helps us improve import accuracy and reliability. It is not shared with third parties.

2.3 Information from Social Media

When you share recipe links with RecipePop from social media platforms or websites (TikTok, Instagram, YouTube, Facebook, or any other website including Reddit and X):

We receive the URL you explicitly share
We fetch and read the web page at that URL to look for recipe information embedded in the page—such as structured recipe markup or descriptive text
When a complete recipe cannot be found directly on the page, we may also retrieve any available text transcript for the video (for example, captions published by the creator)
When structured data and transcripts are not available, we download and process the video's audio on our own servers to extract recipe information. We always attempt the least-invasive method first and only fall back to audio download when necessary. No audio or video data is sent to third parties
The extracted recipe data (ingredients, steps, timing) is added to our shared recipe database and may be visible to other RecipePop users
Recipes in the shared database are anonymous—your identity is never linked to recipes you import, and other users cannot see who added a recipe
We do NOT access your social media accounts, passwords, or any content you haven't explicitly shared

2.4 Information We Do NOT Collect

To be clear, we do NOT collect:

Your social media passwords or login credentials
Videos you haven't explicitly shared with us
Location data or GPS coordinates
Contact lists or address books
Photos from your device (unless you explicitly upload them)
Health or biometric data

3. How We Use Your Information

We use the information we collect to:

Provide the Service: Create and manage your account, save and organize recipes, match ingredients, provide cooking mode
Process recipe imports: Fetch and read shared web pages, retrieve available transcripts, and when necessary transcribe video audio—then extract structured recipe information using AI and save it to your collection
Improve our Service: Analyze usage patterns (anonymized) to improve features, fix bugs, and develop new functionality. Import processing data is used to monitor pipeline health and improve recipe extraction quality
Communicate with you: Send notifications about recipe import status, app updates, respond to support requests
Ensure security: Detect and prevent fraud, abuse, and security issues
Comply with legal obligations: Respond to legal requests and enforce our Terms of Service

4. Data Storage and Security

4.1 How We Store Your Data

Your data is stored securely using Supabase, an open-source database platform hosted on our own infrastructure:

Encryption: All data is encrypted in transit (HTTPS/TLS) and at rest (AES-256)
Row-level security: Personal data such as your pantry, grocery lists, and account details are private—other users cannot access them. Imported recipes are stored anonymously in a shared database without any link to your identity.
Password security: Passwords are hashed using bcrypt and never stored in plain text
Infrastructure: Hosted on our own secure servers with regular security reviews

4.2 Data Retention

We retain your personal information only for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy:

Active accounts: Data is retained as long as your account is active
Import processing data: Records of recipe imports and associated performance metrics are retained for up to 90 days (import records) and 180 days (aggregated performance data), after which they are automatically deleted. This data is used to improve import quality and troubleshoot issues.
Deleted accounts: Data is permanently deleted within 30 days of account deletion
Legal requirements: Some data may be retained longer if required by law

4.3 Security Measures

While we use industry-standard security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we continuously work to protect your personal information.

5. Data Sharing

We do NOT sell, rent, or trade your personal information to third parties for marketing purposes.

We may share your information only in the following limited circumstances:

Service providers: Third-party companies that help us operate the Service, including Supabase (hosting and database), RevenueCat (subscription management), Sentry (crash reporting), and PostHog (anonymized analytics). These providers are contractually obligated to protect your data.
Shared recipe database: Imported recipes are added to a shared database accessible to all RecipePop users. Recipes are stored anonymously—no personally identifying information is attached, and other users cannot determine who imported a recipe.
AI processing: Recipe extraction is performed with the assistance of Anthropic Claude, a third-party AI service. Page content is sent to Anthropic temporarily for processing and is not stored permanently. All other import processing—including video downloading, web page fetching, and audio transcription—is performed on our own self-hosted servers using open-source tools. Your data is not sent to any third party for these steps.
Crash reporting: We use Sentry to collect anonymized crash reports and error diagnostics. User IDs are hashed before transmission, and sensitive data (emails, passwords, recipe content) is scrubbed from reports.
Subscription management: We use RevenueCat to manage in-app subscriptions and purchases. RevenueCat receives your anonymized user ID and subscription status. Payment details are handled entirely by Apple App Store or Google Play Store.
Legal requirements: If required by law, court order, or government request, or to protect the rights, property, or safety of RecipePop, our users, or the public.
Business transfers: If RecipePop is involved in a merger, acquisition, or sale of assets, your information may be transferred. You will be notified via email and/or app notification.
With your consent: We may share information for any other purpose with your explicit consent.

6. Your Rights

Depending on your location, you may have the following rights:

Access: Request a copy of the personal information we hold about you
Correction: Request correction of inaccurate or incomplete information (you can edit most data directly in the app)
Deletion: Request deletion of your account and all associated data (available in Profile → Delete Account)
Export: You can export individual recipes as PDF files. We're working on comprehensive data export (JSON/CSV) for all users.
Opt-out: Unsubscribe from promotional emails (notification settings available in the app)
Restrict processing: Request that we limit how we use your information
Object: Object to our processing of your information

To exercise any of these rights, please contact us at privacy@recipepop.app. We will respond to your request within 30 days.

7. Cookies and Tracking

Our mobile app uses minimal tracking technologies. We do not use traditional "cookies" as you would find on websites, but we do use:

Local storage: To store your login session and app preferences on your device
Analytics: We use PostHog for anonymized usage analytics to understand how users interact with the app and improve features. User IDs are hashed before transmission, and no personally identifiable information is collected
Crash reporting: Automatic error reports to help us fix bugs (no personal information is included)

You can opt out of analytics in the app settings (Profile → Preferences → Analytics).

8. Children's Privacy

RecipePop is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@recipepop.app, and we will delete the information promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

Posting the new Privacy Policy in the app
Sending you an email notification
Displaying an in-app notification

The "Last Updated" date at the top of this policy will reflect when changes were made. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

RecipePop Privacy Team

Email: privacy@recipepop.app

Support: support@recipepop.app

We typically respond to privacy inquiries within 3-5 business days.

Table of Contents