1. Information We Collect
a. Information You Provide Directly
- Account info: Email address, display name, city, bio, profile photo (optional)
- Recipe content: Recipe names, ingredients, instructions, photos, tags you create or import
- Meal plans and shopping lists you create in the app
- Cook history: Dates and notes when you cook recipes
- Cuisine preferences and ingredient avoidances you set in your profile
- Cottage Market listings: Title, description, price, location, contact email (Premium feature)
b. Information Collected Automatically
- Usage data: features used, screens visited (via Firebase Analytics)
- Device type, operating system, app version
- Crash reports via Firebase Crashlytics
- IP address and general location (country/region, not precise GPS)
c. Information from Third Parties
- OpenAI (DALL-E 3): When you generate an AI photo, your recipe name and tags are sent to OpenAI
- Edamam: When you use nutrition analysis, your ingredient list is sent to Edamam
- RevenueCat: Purchase metadata when you subscribe to Premium
2. How We Use Your Information
- Provide, maintain, and improve the Service
- Sync your data across devices
- Process Premium subscriptions and verify access
- Enable sharing features
- Send transactional emails (account verification, password reset)
- Analyze usage to improve features and fix bugs
- Comply with legal obligations
We do not sell your personal information. We do not use your recipe content to train AI models.
3. How We Share Your Information
| Recipient | Purpose | Data Shared |
|---|---|---|
| Google Firebase | Database, auth, storage, analytics | All app data (Google DPA applies) |
| OpenAI | AI photo generation (on request only) | Recipe name and tags |
| Edamam | Nutrition analysis (on request only) | Ingredient list |
| RevenueCat | Subscription management | Purchase metadata, user ID |
| Apple / Google | App distribution and IAP | Per their platform policies |
4. Data Retention
- Account data is retained until you delete your account
- Deleted recipes are removed within 30 days
- Firebase Analytics data: 14 months (Google default)
- You may request deletion at any time (see Section 8)
5. Data Security
We use Firebase Security Rules, HTTPS/TLS encryption, and per-user access controls. No method of internet transmission is 100% secure.
6. Children's Privacy (COPPA)
7. Your Rights
- Access: Request a copy of your data
- Correct: Update inaccurate data in the app
- Delete: Request account and data deletion
- Export: Share features allow data export
- Opt out: Contact us to opt out of analytics
California (CCPA): We do not sell personal information. EU/UK/EEA (GDPR): Legal basis is contract performance, legitimate interests, and consent. Contact your local DPA for unresolved concerns.
8. Data Deletion Requests
Email privacy@tastebudkitchen.app with subject "Data Deletion Request" and your account email. We process requests within 30 days.
9. Changes to This Policy
We will notify you of material changes via in-app notification and by updating the "Last updated" date above.
10. Contact Us
TasteBud Kitchen
Privacy: privacy@tastebudkitchen.app
Support: hello@tastebudkitchen.app
Website: tastebudkitchen.web.app