Privacy Policy

1. Information We Collect

We collect information you provide directly to us, and limited data required to operate the app.

Account Information

• Email address (used for sign-in via Supabase Auth)
• Display name (optional)
• Sign-in provider identifier (Apple or Google) if you sign in with one of those

User Content

• Recipes you save and any photos or video URLs you submit
• Collections, grocery lists, and personal ratings
• Feedback messages you send us

Usage and Analytics

• Device type, OS version, and app version
• Anonymized product usage events (screens visited, extractions performed) via PostHog
• AI usage data (tokens, model, latency) via PostHog LLM Analytics

Subscription Information

• Subscription status (active, trial, expired) via Superwall and Apple's App Store
• We never see or store your payment card; Apple handles all billing

2. How We Use Information

• Operate and improve the app (extraction, saving, organizing recipes)
• Process the videos, photos, or text you submit through third-party AI providers to generate structured recipes
• Enforce usage limits and prevent abuse of our AI services
• Verify your subscription status
• Respond to support requests and feedback
• Understand feature usage so we can improve the product

3. Third-Party Services

We rely on the following services to operate the app. Each has its own privacy policy.

• Supabase — authentication, database, and file storage for your recipes and account.
• Apple App Store (StoreKit) — billing and subscription management. We receive only the active status and product identifier, not your payment details.
• Superwall — paywall presentation and entitlement checks.
• Third-party AI providers — used to extract structured recipes from the videos, images, or text you submit. The submitted content is passed to the provider for processing and is not retained or used to train any model.
• Cobalt (self-hosted) & yt-dlp — download the public video you submitted so it can be analyzed; the video is not retained.
• PostHog — product analytics and AI usage tracking.
• Vercel — hosts our backend API.

4. Information Sharing

We do not sell or trade your personal information. We share the minimum necessary data with the third-party services listed above, and only to operate the app. We may also disclose information if required by law or to protect our rights, property, or safety.

5. Data Security

Data is transmitted over HTTPS and stored in Supabase with row-level security — users can only access their own rows. Payment information is handled by Apple and never touches our systems. No method is 100% secure, but we follow industry-standard practices.

6. Data Retention

Your data is retained for as long as your account exists. Submitted videos are processed in memory and not retained after extraction. You can delete your account from Settings → Delete Account in the app; this permanently removes all your recipes, collections, grocery items, and account data.

7. Your Rights

• Access and update your account information from Settings
• Delete your account and all associated data at any time
• Request a copy of your data by emailing us
• Cancel your subscription from iPhone Settings → Subscriptions (subscription cancellation is separate from account deletion)

8. Children's Privacy

Cooked is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with information, contact us and we will delete it.

9. Changes to Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be reflected here with an updated date. Continued use of the app after changes means you accept the updated policy.

10. Contact Us

Questions about this Privacy Policy:

Email: pixelzod@gmail.com