Recipe Book Privacy Policy

What we collect

We process account identifiers, email, display name, sign-in provider, locale and unit preferences; recipes, revisions, source URLs and uploaded images; memberships, invitations and share settings; OCR, translations, extraction evidence, inferred tags, generated-media and moderation metadata; and limited request, device, diagnostic and security data.

How we use it

We use data to operate accounts and recipe books, import and translate recipes, provide collaboration and sharing, preserve history, generate and moderate media, secure the service, prevent abuse, troubleshoot failures and comply with law. For EEA and UK users, anticipated bases are contract, legitimate interests, legal obligation and consent where required.

Providers and transfers

Designed providers include Google Firebase Authentication, Amazon Web Services, Apple identity and distribution services, and Google identity and distribution services. Processing may occur outside your country under applicable provider terms and transfer safeguards. We do not sell personal data or use it for targeted advertising.

AI processing of imported recipes

When you import a recipe from a photo, a link or pasted text, that content is sent to AI models on Amazon Bedrock, supplied by Anthropic, Amazon and Stability AI, to read it, detect its language, structure it, choose its main ingredients and generate a cover image. Only the content for that import and your language preference are sent; your account details are not.

To use Anthropic’s most capable reading model, we have enabled Amazon Bedrock’s provider data-sharing mode. Amazon Bedrock may retain the inputs and outputs of AI requests and share them with the model provider for up to 30 days, where they may be reviewed, including by people, to detect misuse. This applies to every AI request the service makes. The provider states this data is not used to train its models. Recipes you type in yourself are not sent to AI models unless you ask for a generated cover image. Deleting a recipe or account does not shorten that 30-day period.

Sharing

You choose collaborators and public links. Anyone with an active public link can view its read-only public-safe projection. Private source/provenance fields and non-approved media are excluded. Links can be revoked.

Retention

Active content is retained while needed to provide the service. Recipe history is intentionally non-destructive until its book is deleted. Logs are planned for 30 days and encrypted database backups for 35 days. Deleted data can remain in backups until they expire, subject to legal holds.

Your rights

You can update preferences, revoke links, download a JSON export and request account deletion in the app. Owners must transfer or delete owned books first. Depending on location, you may have access, correction, deletion, restriction, objection, portability, consent-withdrawal and complaint rights.

Security, storage and children

Controls include encrypted transport/storage, private assets, token verification, transactional role checks, rate limits, checksums, immutable history, scanning, backups and incident procedures. Firebase uses browser storage to maintain sessions. Recipe Book is not directed to children under 13.

Contact

Privacy: privacy@stnc.com. Support: support@stnc.com. STNC LTD must add its registered address, company number, lead supervisory authority and any required representatives before this draft becomes effective.