Privacy Policy

1. What we collect

Account information

Your email address, and the public-key credentials for the passkeys you register. We use passkeys (WebAuthn) rather than passwords, so we never store a password for your account. We also keep a record of the devices you have linked, so you can manage and remove them.

Your content

Everything you create or save in the app: recipes, cookbooks, notes, shopping lists, meal plans, cooking history, photos you take or upload, AI-generated images, your cooking preferences, and your dietary preferences and restrictions. Also the text of requests you make to our AI features.

Subscription and purchase information

Which tier you are on, whether your subscription is active, your renewal state, and your credit balance and usage. Purchases are handled by Apple or Google, and our subscription management provider passes us a subscriber identifier and your entitlement status. We never receive or store your card number or payment details.

Device and security information

When you create an account, the app asks Apple or Google to confirm it is a genuine, unmodified installation (App Attest on iOS, Play Integrity on Android). We receive the resulting verdict and use it only to prevent automated abuse and fraudulent sign-ups. We also record the IP address a sign-up came from, for the same purpose.

Diagnostics and analytics

The app asks your permission for optional diagnostics, and respects your answer. There are two levels:

• Essential — the minimum needed to operate and secure the Service, such as error counts and request timings. This is the default.
• Full — adds crash reports and usage analytics about which screens and features are used, so we can find and fix problems. We only collect this if you agree.

You can change your choice at any time in Settings, under Usage Analytics.

Voice input

Where you dictate instead of typing, speech-to-text is performed by your device's own built-in speech recognition — Apple's or Google's, depending on your device. We do not record or receive your audio; we receive only the text it produces. Whether that audio is processed on your device or on Apple's or Google's servers is determined by your device and its settings, under their privacy policies, not ours.

2. How we use it

We use your information to:

• create and secure your account, and sign you in;
• store, sync, and display your recipes and other content across your devices;
• provide the AI features you ask for — parsing, generating, and translating recipes, planning meals, building and sorting shopping lists, and generating images;
• share content with the people you choose to share it with;
• manage your subscription, credits, and usage limits, and enforce tier limits;
• detect and prevent fraud, automated abuse, and runaway usage costs;
• send you service messages, and marketing only if you opt in; and
• comply with our legal obligations.

If you are in the EEA or the UK, our legal bases are: performance of our contract with you (running your account and providing the features you request); our legitimate interests (securing the Service, preventing abuse and fraud, and fixing defects); your consent (optional analytics and crash reporting, marketing, and any health-related information you choose to enter); and compliance with legal obligations.

3. AI processing

The app's AI features work by sending the thing you are working on to an AI provider acting on our behalf, which processes it and returns a result. Depending on the feature, what we send includes recipe text, photos you are importing or generating images from, the URL or video link you asked us to import, your question or instruction, and relevant preferences such as dietary restrictions.

We do not use your content to train or improve AI models, and our providers are contractually not permitted to use it for their own purposes, including training. Your content is processed to produce your result, and for nothing else.

We use aggregated, de-identified statistics about feature usage — for example how often recipe imports fail — to operate and improve the Service. These do not contain your content and cannot reasonably be linked back to you.

Worth being clear about: when you photograph a recipe to import it, that photo is sent to our AI provider to be read. It is not kept by them and not used to train anything, but it does leave our systems.

4. Who we share it with

We do not sell your personal information and we do not share it for advertising. We share it with service providers who process it on our instructions, only as needed to run the Service:

We may also disclose information where we are legally required to, or to establish or defend legal claims. We require a valid and legally binding request before producing data in response to a government or civil demand, and we will tell you about it where we are permitted to. If our business is ever sold or merged, your information may transfer as part of it, subject to this policy.

5. What other users can see

Most of your content is private to you. It becomes visible to others only when you choose:

• Sharing — recipes or cookbooks you share with a person or a share group are visible to those people, along with your display name.
• Publishing — a cookbook you publish publicly, and your display name alongside it, can be found and viewed by any user of the Service.

Once someone can see your content they may save their own copy. Withdrawing access stops further access but cannot retrieve copies already made. Please treat publishing as permanent.

6. Connected apps

If you authorise a third-party application or AI assistant to connect to your account, it can read and change your data within the scope you approve — your recipes, cookbooks, shopping lists, meal plans, and sharing settings. What that application does with the data it retrieves is governed by its own privacy policy, not this one. You can review and revoke connected apps at any time in your account settings; revoking stops future access but does not recall data already retrieved.

7. Health-related information

If you record dietary preferences, restrictions, or allergen information, some of it may count as consumer health data under laws such as Washington's My Health My Data Act or Nevada's SB370.

We collect it only because you entered it, and we use it for one purpose: personalising recipes and suggestions for you. We share it only with the providers in the table above, acting on our instructions, and only to deliver features you have asked for. We do not sell it, we do not use it for advertising, and we do not use it to train AI models. You can view, change, or delete it at any time in the app, and deleting your account removes it. You may withdraw your consent to our processing of it at any time by deleting it or by contacting us.

8. Advertising

We do not show third-party advertising in the app, we do not collect an advertising identifier, and we do not share your information with advertisers, data brokers, or ad networks. We do not track you across other apps or websites. If this ever changes, we will update this policy and tell you before it takes effect.

9. How long we keep it

• Your account and content — for as long as your account is open. You can delete individual items at any time, and deletion in the app is immediate.
• After account deletion — removed at the end of the 30-day grace period described below.
• Backups — we keep operational backups for a limited period, so deleted content may persist in them briefly before being overwritten.
• Billing records — retained in anonymised form where tax, accounting, and chargeback rules require it. These are no longer linked to your identity.
• Diagnostics and crash reports — retained for a limited period for debugging, then discarded.
• Abuse and security records — retained as long as needed to protect the Service.

10. Deleting your account

You can delete your account from within the app, or from our account deletion page if you no longer have the app installed. The process is:

1. You request deletion. We email you a confirmation link, which is valid for 24 hours.
2. You click that link. Your account is then scheduled for permanent deletion 30 days later, and we email you a second message containing a cancellation link valid for those 30 days.
3. If you change your mind, you must use that cancellation link. Simply signing in again does not stop the deletion.
4. At the end of the 30 days, your account and content are permanently deleted.

Two things deletion does not do. It does not cancel a subscription bought through the App Store or Google Play — cancel that separately in your store account, or you may keep being charged. And it cannot remove copies of content that other users saved while you were sharing it.

11. Your rights and choices

Depending on where you live, you may have the right to access your personal data, receive a copy of it, correct it, delete it, restrict or object to how we use it, and withdraw consent. These rights apply on every tier, including free accounts.

You can exercise most of them directly in the app:

• Access and correct — view and edit your content and profile at any time.
• Delete — delete individual items, or your whole account (section 10).
• Withdraw consent to analytics — Settings, under Usage Analytics.
• Notifications — the app's notification settings, and your device settings.

To receive a copy of your data, or to make any other request about your rights, email us at support@cookincopilot.com. We will provide it in a commonly used format and respond within the period required by the law that applies to you. This is available on any tier, including free accounts. Subscribers can also retrieve their content themselves at any time through a connected app (section 6).

We may need to verify your identity before acting on a request — we will not hand over an account's data to someone who cannot show the account is theirs. We do not charge for a straightforward request. Where the law allows — for example where a request is manifestly unfounded, excessive, or repetitive, or where you ask for further copies of data we have already provided — we may charge a reasonable fee based on the administrative cost of responding, or decline to act. If we do either, we will tell you why first.

We do not sell your personal information and we do not share it for cross-context behavioural advertising, so there is nothing to opt out of. We do not use your data for automated decision-making that has a legal effect on you.

We will never treat you differently for exercising a privacy right. If you are unhappy with how we have handled a request, you can complain to your local data-protection authority; if you are in the EEA or UK, you may do so in your country of residence.

12. Where your data is processed

We operate from the United States, and your data is stored and processed there, along with in the regions our providers use to deliver their services. If you are in the EEA or the UK, this means your data is transferred outside your country. Where it is, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, in our agreements with those providers.

13. Security

We protect your information with encryption in transit and at rest, passkey-based authentication with no stored passwords, device attestation to block automated abuse, access controls that limit which staff can reach personal data, and monitoring for unusual activity.

No system is perfectly secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you and the relevant authorities as the law requires.

14. Children

The Service is for users aged 13 and over, and 16 and over in the EEA and the UK (or the minimum age set by your country's law, if lower). We do not knowingly collect personal information from children under 13. If you believe a child under 13 has given us personal information, email support@cookincopilot.com and we will delete it.

15. Changes to this policy

We will update this policy as the Service changes. The version and effective date at the top of this page always show the current version. For material changes — such as adding a new category of data, a new purpose, or a new kind of provider — we will give you notice in the app or by email before the change takes effect.

16. Contact us

For any privacy question, to exercise a right, or to request a copy of your data: support@cookincopilot.com.

Joshua Week, controller of personal data for Chef Copi. See also our Terms of Use.