Privacy.

• Account. Your email address (for sign-in) and an optional display name (shown on recipes you publish).
• Content. Recipes, meal plans, pantry items, grocery lists, cook history, and any reports you file.
• Usage. Tokens and dollar cost of each AI call you make, kept so we can enforce a daily cap.

• Supabase (database, auth, storage, edge functions). Hosting region and provider terms apply.
• OpenAI (recipe generation, URL extraction fallback, ingredient normalization, display-name moderation, and pantry photo recognition). The text of your AI prompts and any pantry photos you snap are sent to OpenAI under their API privacy policy. OpenAI states that API inputs are not used to train their models. We do not send your private recipes, meal plans, or pantry to OpenAI unless you explicitly invoke an AI feature on that data.
• Pantry photos in particular are processed in-memory only — forwarded to OpenAI for recognition, the extracted item list returns to your device, and RecipeGen does not store the image, the base64 payload, or any thumbnail anywhere on our servers.
• Recipe photos linked from URL imports are stored as the source URL only — we don’t copy or re-host the image itself. The original site continues to serve the image; if they take it down, the recipe loses its photo. User uploads of recipe photos aren’t supported in this version.
• RevenueCat (subscription management). When you start, change, or cancel a Pantry Pro subscription, RevenueCat processes your Apple App Store receipt and forwards subscription events (start, renewal, cancellation, expiration) to our server so we can grant or remove Pro access. The data shared is limited to your account ID, the App Store transaction ID, the product identifier you bought, and the subscription expiration date. We do not share your recipes, meal plans, or any content with RevenueCat.
• Apple App Store (in-app purchases). All payment processing happens through Apple. We never receive or store your payment card or banking details.

Apple requires every app to declare which data types it collects and whether they’re used to track you across other apps and websites. For RecipeGen the declared categories are:

• Contact Info — your email address (sign-in only).
• User Content — recipes, photos, meal plans, pantry items, grocery lists, and cook history you create.
• Identifiers — a user ID generated at sign-up to associate your content with your account.
• Purchases — subscription state (free / Pro monthly / Pro yearly / cancelled) and expiration date.
• Usage Data — counts and costs of AI calls you make, used to enforce a daily cap.

All of the above are linked to your user ID (so we can show you your own content) but none of it is used to track you across other apps or websites. RecipeGen does not embed third-party analytics, ad networks, or tracking SDKs.

• Account-linked data (recipes, plans, pantry, grocery lists, cook history, AI usage rows, blocks, reports you filed): kept while your account is active; deleted immediately and irreversibly when you delete your account from Settings.
• Reports filed against your account by others: anonymized (your identity stripped) and retained as moderation history so we can detect repeat offenders. The reports themselves are not shared back to you.
• Custom ingredients you authored: kept after account deletion (anonymized — no longer linked to you) so other users’ saved copies of your public recipes continue to resolve ingredient names and shelf-life data.
• Subscription event history at RevenueCat: retained per RevenueCat’s own retention policy (typically the lifetime of the relationship plus 7 years for accounting purposes).

When you mark a recipe Public, its title, description, ingredients, instructions, and any photo you provided become visible to all users in Discover. Your display name is shown as the author. Don’t publish anything you don’t want public.

We don’t sell your data. We don’t use your private recipes or meal plans for training or analytics. We don’t embed third-party advertising or trackers in the app.

Settings → Delete account permanently removes your account and everything stored under it (recipes, plans, pantry, grocery lists, cook history, blocks, AI usage rows, and reports you filed). Reports filed against your account by others are anonymized but retained for moderation history.

Custom ingredients you authored are kept after deletion (anonymized, not associated with you) so that other users’ saved copies of your public recipes don’t break.

On any public recipe, the “⋯” menu lets you report the recipe or its author and/or block the author. Blocking hides their recipes from your Discover feed; you can unblock from Settings.

The data controller responsible for your personal data is IdeaGen Technologies, a sole proprietorship registered in Malaysia under business registration number JR0189683-T. Contact: james@ideagen.tech.

Privacy questions, data deletion requests, or moderation concerns: james@ideagen.tech. We aim to respond within two business days.

We may update this policy. Material changes will be surfaced in the app before they take effect.