Privacy Policy

1. Information we collect

Account information: your email address, display name, account identifier, account dates, and authentication and session information. Supabase manages account authentication.

Recipes and activity: recipe titles, ingredients, quantities, instructions, notes, versions, cover images, meal plans, servings, cooking status, ratings, shopping lists, queued links, and sharing activity.

Submitted content: recipe links, pasted text, uploaded photos or videos, and related filenames and file types. When you import a link, we may retrieve available source material, including creator details, platform identifiers, captions, comments, images, video, and audio.

Technical information: import status, errors, timestamps, processing duration, provider references, AI usage, and estimated processing costs. Our providers may also collect IP addresses, browser or device information, request details, and security logs.

Communications: your contact details and the information you provide when you email us.

Information may come directly from you, from your use of the Service, from another user who shares a recipe, or from a website or social post you ask us to import. Imported material can include information about creators or commenters. Please do not submit passwords, financial documents, medical records, or other sensitive or confidential information.

2. How we use information

We use information to create and protect accounts; save and display recipes, meal plans, and shopping lists; process imports and generate recipe images; deliver account emails; provide sharing features; enforce import limits; manage processing costs; troubleshoot problems; prevent abuse; and respond to support, privacy, or content complaints. We may also use information to meet legal obligations and establish or defend legal claims.

3. Providers and AI processing

We use outside providers to operate the Service. Supabase provides authentication, database services, and media storage. Lovable provides hosting, processing functions, and operational error reporting. Apify retrieves supported social-post content from submitted links. Google Gemini analyzes submitted text, images, video, audio, and available captions or comments to extract recipes.

Image-generation requests send recipe titles and selected ingredient names through the Lovable AI gateway to its image-processing providers. Account-email providers receive email addresses and delivery information. Google Fonts receives ordinary network-request information when your browser loads fonts.

AI providers process inputs and outputs under the terms and settings applicable to the service used. Depending on those terms and settings, content may be retained for processing, security, abuse review, or service improvement, including human review or model training where permitted. We do not guarantee that submitted content is excluded from every provider’s training or improvement processes. Avoid including personal or confidential information that is unnecessary for the recipe.

We attempt to request deletion of Google-uploaded processing files after successful analysis. That request does not guarantee immediate removal of every provider record, log, or backup.

Social platforms and linked websites may receive requests when we retrieve content or when you open source links or use their sharing features. Those services have their own privacy practices. Our providers may process information outside your country of residence, where privacy laws may differ.

We may also disclose information to professional advisers when needed, in response to lawful requests, to protect rights or safety, or in connection with a business transfer, subject to applicable law. User-directed sharing is described below.

4. What is private and what is public

Account records, cookbook records, meal plans, shopping lists, and original uploads use restricted access. Authorized personnel and providers may process them to operate, support, and secure the Service.

Recipe cover images are publicly accessible by URL. This includes an uploaded photo reused as a cover, even if the recipe itself is otherwise private.

Anyone with a shared recipe link can view its preview, including the title, your display name, cover, servings, ingredient preview, and ingredient and step counts. A signed-in recipient can save the full recipe snapshot and associated supporting source material to their own cookbook.

Shared links currently have no automatic expiry and no user-facing revocation control. Deleting your original recipe does not remove copies already saved by recipients. External platforms may retain posts or cached previews.

Choose covers and shared content accordingly. To report exposed personal information or request help with a shared link, email hello@joelynnskitchen.com. We will consider requests under applicable law, but cannot guarantee removal from every external service or recipient’s copy.

5. Browser storage and advertising

We use persistent browser storage to keep you signed in and remember a pending recipe-share link during signup. You can manage cookies and site storage through your browser, although clearing or blocking storage may sign you out or affect features.

The Service currently has no advertising features. Hosting, font, email, and processing providers may still collect request information, use their own technologies, and maintain operational logs. Browser privacy settings may affect those providers differently and do not prevent information needed for an import from being sent when you request that import.

6. Retention and deletion

We generally retain account and saved cookbook information while needed to provide your account and saved content. Retention depends on whether your account remains open, whether you or we delete content, the need to investigate an error or prevent abuse, provider retention, and legal obligations. There is currently no fixed automatic deletion deadline for every uploaded file, import record, cover image, or log.

You may edit recipes through the app. For account closure, deletion, correction, access, or a copy of your personal information, email hello@joelynnskitchen.com. There is currently no complete self-service account-deletion or personal-data-export flow. We may ask you to verify your identity before acting on a request.

Deleting an item in the app does not necessarily delete all associated files or processing records. We handle deletion requests across the systems we control, subject to applicable law and legitimate retention needs such as security, legal obligations, and dispute resolution. Some information may remain in backups until replaced or removed under the applicable backup schedule. Other users’ saved copies and external caches are subject to the sharing limitations above.

7. Your privacy rights

Depending on where you live and the laws that apply, you may have rights to access, correct, delete, or obtain a copy of personal information; restrict or object to certain processing; withdraw consent where processing relies on consent; or opt out of certain uses or disclosures. You may also have the right to use an authorized agent, appeal a request decision, or complain to a privacy regulator.

Contact hello@joelynnskitchen.com to exercise a right or appeal a decision. We will respond within applicable legal deadlines, explain any lawful limitations, and will not unlawfully discriminate against you for exercising your rights. Withdrawing consent does not affect earlier lawful processing.

8. Security and age eligibility

We use reasonable technical and organizational safeguards, including account authentication and access restrictions. No website, transmission, or storage system is completely secure. Protect your login credentials and notify us if you suspect unauthorized access.

The Service is intended for adults age 18 and older. People under 18 must not create an account or submit information. If you believe a child has submitted personal information, email hello@joelynnskitchen.com so we can investigate and take appropriate action.

9. Payments and policy changes

The Service does not currently accept payments. If we introduce paid features, we will explain the payment provider and relevant data handling before collecting payment information.

We may update this policy as the Service or our practices change. We will update the date above and provide additional notice of significant changes through the Service or email where appropriate. We will obtain consent when required by law.

For privacy questions or requests, contact hello@joelynnskitchen.com.