Privacy Policy

Interpretation and Definitions

Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

• Account means a unique account created for You to access our Service.
• Company (referred to as either "the Company", "We", "Us" or "Our") refers to Recipe One.
• Cookies are small files placed on Your Device containing details of your browsing history.
• Device means any device that can access the Service such as a computer, cellphone or tablet.
• Personal Data is any information that relates to an identified or identifiable individual.
• Service refers to the Website and Recipe One application.
• Usage Data refers to data collected automatically from the Service.

Collecting and Using Your Personal Data

Types of Data Collected

Personal Data

While using our Service, we may ask you to provide us with:

• Email address
• First and last name
• Usage Data
• Recipe preferences and saved content

Usage Data

Usage Data is collected automatically when using the Service, including:

• Device's Internet Protocol address (IP address)
• Browser type and version
• Pages visited and time spent
• Device information and identifiers

Use of Your Personal Data

We may use Personal Data for the following purposes:

• To provide and maintain our Service
• To manage Your Account and registration
• To contact You about updates or changes to the Service
• To provide customer support
• To analyze usage and improve our Service
• To protect against fraud and abuse

How We Use Artificial Intelligence (AI)

Recipe One uses artificial intelligence (AI) to turn the content you save into structured recipes, and to power features such as recipe translation, nutrition estimates and the AI Chef assistant. The AI models we use are Google's Gemini models. We do not run these models ourselves: the content described in this section is sent to Google for processing, either from our servers through the Gemini API or, for the AI Chef, from the app through Firebase AI Logic.

When you save a recipe

Depending on how you add a recipe, the following is sent to Gemini so that it can extract the title, ingredients, steps and other recipe details:

• Photos and PDFs you upload – the image or document itself or, for PDFs that contain readable text, the text taken from the document.
• Notes and text you type or paste.
• Links you save – the text, images or video that we retrieve from the web page or social media post the link points to. For YouTube links, the link itself may be passed to Gemini, which reads the video directly.
• Videos from social media posts – the video file is uploaded to Google's Gemini Files API so that Gemini can read it. We ask Google to delete the file once the recipe has been extracted, and Google states that files uploaded this way are automatically deleted after 48 hours.
• The names of your custom tags, so that the AI can suggest which of your tags fit the recipe.

Translation and nutrition estimates

When a recipe is translated, the content of that recipe is sent to Gemini. When nutrition is calculated for a recipe, its ingredient list and number of servings are sent to Gemini, which returns estimated values.

AI Chef

The AI Chef is a chat assistant inside the app. When you use it, the following is sent to Gemini:

• The messages you type and any photos you attach to the chat, together with the earlier messages in the same conversation.
• Recipes you attach to the chat and, when needed to answer your request, recipes, cookbooks, grocery list items and meal plans from your account.
• The facts you have asked the AI Chef to remember (its "memory") and the language you use the app in.

Your AI Chef conversations and its memory are stored with your account in our database so that you can return to them. The AI Chef saves something to its memory only after you approve it, and you can review and delete remembered items in the app. Memory is meant for lasting food preferences such as diets, allergies, dislikes, household size and kitchen equipment. Diet and allergy details can reveal information about your health, so please share only what you are comfortable with.

Free tools on our website

Some of the free tools on recipeone.app, such as the grocery list generator, the recipe calorie calculator and the recipe generators, also use Gemini. The text or photo you submit to one of these tools is sent to Gemini to produce the result.

Training of AI models

We do not use your content to train AI models. We use Google's paid Gemini API services, and Google states in its terms for those services that it does not use the content sent to them, or the responses, to improve its products. Google also states that it logs this content for a limited period in order to detect abuse of its services.

Accuracy of AI output

AI-generated content can contain mistakes. Please read the "AI Features and Accuracy" section of our Terms of Service before relying on recipes, nutrition estimates or other AI output.

Connecting Recipe One to AI Assistants

Recipe One offers a connector that lets AI assistants made by other companies, such as ChatGPT (by OpenAI), Claude (by Anthropic) and Cursor, work with Recipe One. Using it is optional. An assistant is connected only if you add Recipe One to it yourself.

Using the connector without an account

Without signing in, an assistant can ask Recipe One to show a recipe as a recipe card or to lay out a meal plan with a shopping list. The assistant sends the recipe or plan from your conversation to our server, which arranges it and sends it back. We do not save these drafts, and no Recipe One account is created.

Signing in and permissions

To work with your own recipes, the assistant sends you to auth.recipeone.app, where you sign in to your Recipe One account with Google, Apple, or an email address and password. You can also create an account there; an email account must verify its address first. The approval page shows which app you are connecting and the permissions it asks for. If you approve, the assistant can:

• see your name, email address and plan, and account details such as your remaining import credits, number of recipes and unit preferences (every connection can see these);
• search, view, create, edit and delete your recipes, view your cookbooks, and add recipes to or remove them from cookbooks you own that are not shared with anyone;
• view and change your weekly meal plan;
• view your grocery list, add items to it, check items off and remove them.

The assistant receives an access token for Recipe One. It does not receive your password or your Google or Apple sign-in.

What the assistant receives and what we receive

When the assistant uses one of Recipe One's tools, our server returns the data that tool needs, such as the recipes that match a search, the full content of a recipe, your meal plan or your grocery list. Changes the assistant makes are saved to your account and appear in the app. Data returned to the assistant is then processed by the company that provides the assistant (for example OpenAI for ChatGPT or Anthropic for Claude) under its own terms and privacy policy. We do not control how that company stores or uses it, so please review its privacy policy.

We do not receive your conversation with the assistant. We receive only the requests the assistant sends to our tools, such as a search phrase, a recipe to save or change, a meal to add to your plan, grocery items, or a link to import.

When an assistant imports a recipe from a link, the link is processed in the same way as a link you save in the app, as described in "How We Use Artificial Intelligence (AI)" and "Service Providers and Other Third Parties", and the import uses your import credits in the same way.

What we store

• Connection records. We store the sign-in grant for each connection, its refresh tokens and the registration of the connected app. Token values themselves are not stored in readable form. Access tokens expire after 15 minutes. A refresh token is valid for up to 60 days after it was last renewed, and a connection lasts up to 365 days, after which you sign in again. Expired records are deleted automatically.
• Trash and edit backups. A recipe deleted through an assistant is kept in a trash for 30 days, during which the assistant can restore it. The first time an assistant edits a recipe on a given day, we keep a copy of the previous version for 30 days. Both are then deleted automatically.
• Usage counters. Daily counts of the recipes saved, imported and deleted and of other changes made through assistants, kept with your account to apply daily limits.
• Technical logs. For each tool call, our server logs your account ID, the ID of the connected app, the tool used, whether the call succeeded, how long it took and, if it failed, an error code or error message. The sign-in server logs sign-ins, approvals and refusals with account IDs, app IDs, the permissions approved and the reason for a refusal. These logs do not contain the details of your requests, recipe content, tokens or email addresses. For a link import, we also log the website's domain and the result.

We use your IP address to limit abuse of the sign-in page and the connector.

Connection analytics

The sign-in server sends events about the connection steps to PostHog: viewing the sign-in page, a successful or refused sign-in, approving a connection, and cancelling. The events include which assistant is connecting and the name the app gives itself, the sign-in method, whether the account is new, the permissions approved and the reason a sign-in was refused. Once you have signed in, they are linked to your Recipe One account ID; before that, they are counted without a profile. They do not include your email address, tokens or recipe content. As with our other analytics, these events are not removed automatically when you delete your account (see "Data Retention and Deletion").

Disconnecting and deleting

You can disconnect Recipe One at any time in your assistant's settings, for example in the connectors or apps settings of ChatGPT or Claude. Our connection record then expires as described above. Deleting your Recipe One account removes all of your connections, so no assistant can access your account any more, together with the trash, edit backups and usage counters described above. Data that an assistant has already received stays with its provider under that provider's policies.

Chrome Extension

The Recipe One Chrome extension lets you save a recipe from the page you are looking at. This section covers only the extension; the rest of this policy covers the app and the website.

What it does

• Sign in. "Sign in" or "Create account" opens the Recipe One web app in a tab, where you sign in with the account you use in the app. The web app then hands the extension a sign-in for that account, and the extension keeps it in its own storage until you sign out or it ends.
• Save. When you click the Recipe One button on a page and choose Save recipe, the extension reads that one page (its address, title and HTML), finds the recipe in it and sends the address and the recipe it found to Recipe One, which saves it to your account.
• Account. It reads whether your account can save more recipes, to show the right screen.

What it does not do

• It does not read a page until you click the button, and never your other tabs.
• It does not keep a browsing history or the pages you looked at.
• It never sees your password: you sign in on the Recipe One web app.
• It does not sell data or use it for advertising.

Extension analytics

Five events (installed, signed in, recipe saved, upgrade clicked and signed out) go to Mixpanel with your Recipe One account ID (or an anonymous install ID before you sign in), the extension version and, for a save, the website's host name and whether it worked. They contain no page content and no location: the events are sent without IP-based location.

Signing out removes the sign-in from the extension. Uninstalling removes everything it stored.

Service Providers and Other Third Parties

We share Personal Data with the companies listed below so that they can help us run the Service. The list describes what each of them receives. These companies handle the data under their own terms and privacy policies.

• Google (Gemini API and Firebase AI Logic) – AI processing. Receives the content described in "How We Use Artificial Intelligence (AI)" above.
• Google (Firebase and Google Cloud) – sign-in, database, file storage, servers, analytics and diagnostics. Receives your account details (such as email address, name and sign-in identifiers), the content you keep in the app (recipes, uploaded photos and PDFs, cookbooks, grocery lists, meal plans, onboarding answers, AI Chef conversations and memory, and settings), app usage events, crash reports with device information, and app-integrity checks.
• Apple and Google (sign-in) – if you sign in with Apple or Google, that company confirms your identity to us and shares the name and email address you allow it to share.
• Apple App Store and Google Play – payments. Purchases are processed by Apple or Google. We receive records of your purchases and subscription status, but not your payment card details.
• Superwall – paywalls and subscription management. Receives your account ID, purchase and subscription events, your app language, the answers you give during onboarding, and install-attribution information.
• Mixpanel – product analytics. Receives app usage events, device information, your account ID, the answers you give during onboarding and, if you signed in with an email address, your email address and name.
• AppStack – advertising attribution. See "Advertising and Attribution" below.
• Expo – push notifications. Receives your device's push notification token and the content of the notifications we send you, which are delivered through Apple's and Google's push services.
• Firecrawl – retrieving web pages. Receives the web links you save and, when a social media post refers to a recipe published elsewhere, search queries built from that post so that the full recipe can be found.
• Apify – retrieving social media posts and web pages. Receives the links you save from TikTok, Instagram, Facebook and Pinterest, and some web links, so that the post, its caption and its video or images can be retrieved.
• Internet Archive (Wayback Machine) – if a page you saved is no longer online, we may request an archived copy, which sends the link to the Internet Archive.
• The websites and platforms you save from – when you save a link, our servers and, in some cases, the app on your device request that page from the website that hosts it, in the same way a browser would.
• Vercel, PostHog and Airtable (website only) – recipeone.app is hosted by Vercel. We use PostHog and Vercel Analytics to measure how the website is used and to detect errors; they receive information about your visit such as the pages you view, the actions you take, and your browser and device details. If you join a waitlist on the website, the email address you submit is stored in Airtable. PostHog also receives the connection events described in "Connecting Recipe One to AI Assistants" above.
• AI assistants you connect – if you connect Recipe One to an AI assistant, the company that provides it (such as OpenAI or Anthropic) receives the data described in "Connecting Recipe One to AI Assistants" above.

We do not sell your Personal Data. We share it only as described in this Privacy Policy.

Advertising and Attribution

We advertise Recipe One on other platforms, such as Apple Ads, Meta, Google and TikTok. The Recipe One app does not display third-party advertising.

To understand which of our ads lead people to install the app and subscribe, we use an attribution provider called AppStack. Through its software in the app, AppStack receives:

• an identifier that AppStack creates for your device, and information about the campaign or ad that led to the install;
• events such as starting a free trial or making a purchase (including its price and currency), and a signal we send when your activity suggests you are likely to stay subscribed;
• if you sign in with an email address: your email address, your name (if available) and your account ID.

AppStack uses this information to attribute installs and purchases to our advertising campaigns and to report those results to the advertising platforms we use. As part of this, AppStack may share a hashed (scrambled) version of your email address with those platforms, so that they can match a purchase to an ad they showed.

We also pass the AppStack identifier and the campaign information to Superwall, so that subscription events can be linked to the campaign that led to the install.

On iPhone and iPad, the app asks for your permission to track your activity through Apple's App Tracking Transparency prompt. If you decline, the app cannot read your device's advertising identifier. The other information listed above is sent to AppStack whether or not you allow tracking. You can change your choice at any time in the iOS Settings app under Privacy & Security > Tracking. Measurement of Apple Ads campaigns uses Apple's AdServices framework, which works independently of this permission.

On Android, AppStack also collects your device's advertising ID. You can reset or delete that ID in your device's Android settings.

If you reach our website through a creator's referral link, we store the referral code in your browser for up to 60 days so that the referral can be credited.

Data Retention and Deletion

We keep the content in your account for as long as your account exists, unless you delete it earlier. This includes your saved recipes, cookbooks, grocery lists, meal plans, and AI Chef conversations and memory.

When you delete a recipe, we also delete the photos and PDFs you uploaded for it. Any uploaded files still in our storage are deleted when your account is deleted.

You can delete your account at any time from the Profile screen in the app, or by emailing us as described on our Delete Your Account page. Deleting your account removes the following from our systems:

• your sign-in account and profile;
• your recipes, uploaded photos and PDFs, cookbooks, grocery lists and meal plans;
• the links you created to share recipes;
• feedback you sent us through the app;
• your AI Chef conversations and memory;
• your connections to AI assistants, and the trash, edit backups and usage counters kept for them.

If you are a member of a cookbook that someone else shared with you, you are removed from it, but the cookbook stays with its owner. Deleting your account does not cancel a subscription bought through the App Store or Google Play; you need to cancel it in your store account.

As described on the Delete Your Account page, we delete your account and associated personal data within 30 days of a verified request. We may keep a limited set of records for longer where required: purchase and transaction records that we must keep for legal, tax and accounting purposes (for up to 7 years), which are held with our subscription provider, Superwall; a minimal record needed to prevent fraud or abuse or to comply with a legal obligation, including a record of the deleted account's internal ID so that its data cannot be re-created; and aggregated or anonymized data that can no longer be used to identify you.

Deleting your account removes data from our own systems. Information that was already sent to the providers listed above, such as analytics events held by Mixpanel or attribution data held by AppStack, is not removed automatically, and we do not delete it on a fixed schedule. You can ask us to delete it at any time by contacting us at support@recipeone.app.

Our servers keep technical logs for debugging and security. These logs can include the links you save, recipe titles and your account ID.

Data Security

The security of Your Personal Data is important to us. We implement appropriate security measures to protect your information. However, no method of transmission over the Internet or electronic storage is 100% secure.

Children's Privacy

Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13.

Changes to this Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Contact Us

If you have any questions about this Privacy Policy, you can contact us at:
support@recipeone.app