Privacy Policy

Recipe Manager ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and share information when you use our service.

Service operator: Recipe Manager

Contact: privacy@recipe-manager.app

1. Data We Collect

Account data: Name and email address.

User-generated content: Custom recipes, meal plans, shopping lists, photos, notes, and ratings.

Technical data: IP address, device identifiers, browser type, operating system, and crash logs.

Usage data: Pages visited, features used, session duration, and click patterns.

Shopping data: Items added to cart, store preferences, and price comparison history.

Cookie data: Session cookies and authentication tokens.

2. How We Use Data

• To provide and maintain the service
• To process subscriptions and payments
• To sync recipes, meal plans, and shopping lists across devices
• To power automated recipe import and structuring (from URLs, photos, text)
• To calculate nutritional estimates (calories, protein, macros)
• To enable price comparison across stores (Walmart, Costco, BJs, Aldi, Kroger)
• To redirect shopping carts to Instacart and other retailers
• To improve the app through aggregated, anonymized analytics

3. Service Providers & Data Sharing

We do NOT sell your personal data. We share data only with vetted service providers who process it on our behalf and under contract, solely to operate the service:

• Hosting & storage — infrastructure and database hosting
• Payment processing — subscription billing (PCI-DSS compliant)
• Automated recipe processing — when you import a recipe (from a URL, photo, or PDF), the content is sent to specialized providers that automatically extract and structure the recipe data. This content is used only to structure your recipe and is notused to train the providers' models.
• Image storage & delivery — storing and serving recipe images
• Retail & cart partners — to redirect shopping carts to the retailers you choose
• Legal / safety — only when required by law

A current list of these providers, their location, and their purpose is available on our Service Providers page. Some providers are located in the United States. For transfers subject to EU/UK rules, we rely on providers certified under the EU-U.S. Data Privacy Framework or on Standard Contractual Clauses, as applicable per provider.

4. Data Retention

Personal data is retained only while your account is active. After account deletion, all data is permanently destroyed within 30 days.

Exception: Billing records are retained for tax and legal compliance as required by law.

5. Your Rights

We extend the following rights to all users, wherever you are. If you are in Mexico, these include your ARCO rights under the LFPDPPP (see the Spanish-language notice at /es/privacy); if you are in the EU or California, they include your rights under GDPR and CCPA respectively.

• Right to access: Request a copy of all your data
• Right to rectification: Correct inaccurate data
• Right to erasure ("right to be forgotten"): Delete your account and all associated data
• Right to data portability: Export recipes in PDF, JSON, or plain text
• Right to object: Opt out of marketing communications at any time
• Right to restrict processing

6. Children's Privacy (COPPA)

This service is not directed at children under 13. We do not knowingly collect data from minors. Parents or guardians can contact us at privacy@recipe-manager.app to request deletion of a child's data.

7. International Users

• Mexico is our primary market: we process personal data in accordance with the LFPDPPP, and the Spanish-language notice at /es/privacy details the purposes and legal bases of processing (necessary vs. voluntary).
• We extend the access, correction, deletion, portability, objection and restriction rights described above to all users, including those protected by the GDPR (EU/EEA) and the CCPA (California).

Legal bases. We process your data (a) to perform our contract with you — operating your account, your recipe book and your subscription; (b) with your consent — for analytics cookies and optional communications, which you can withdraw at any time; and (c) for our legitimate interest in securing and improving the Service, balanced against your rights.

8. Security

• All data encrypted in transit (TLS/SSL)
• Data encrypted at rest in our cloud databases
• Zero-trust architecture with minimum privilege access
• Regular security audits

Breach notification. If a security incident materially affects your personal data or your rights, we will notify you without undue delay, and we will notify the relevant data-protection authorities where the law requires it (including within 72 hours where the GDPR applies).

9. Contact

For any privacy-related questions or requests, contact us at privacy@recipe-manager.app.