Privacy Policy

At YummiPlates, your privacy matters. This Privacy Policy explains how we collect, use, protect, and share your information when you use our recipe management and meal planning platform.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Basic details: Name, email address, password (encrypted)
• Profile information: Optional profile photo, display name
• Authentication data: Login credentials and session tokens

1.2 Dietary Preferences & Health Data

To personalize your experience, you may provide:

• Dietary preferences: Cuisine types, cooking skill level, meal goals
• Restrictions: Allergies, dietary restrictions (vegetarian, vegan, gluten-free, etc.)
• Health goals: Nutritional targets, calorie preferences (optional)
• Household info: Number of people, serving preferences

1.3 Usage & Recipe Data

We automatically collect:

• Recipes: Recipes you save, create, adjust, or extract from URLs
• Shopping lists: Ingredients you add to shopping lists
• Meal plans: AI-generated meal plans you create or subscribe to
• Interactions: Recipe views, searches, favorites, adjustments
• Feedback: Ratings, notes, and modifications you make to recipes

1.4 Technical & Device Information

• Device data: IP address, browser type, operating system, device identifiers
• Usage analytics: Pages visited, features used, time spent, click patterns
• Cookies: Essential and analytics cookies for functionality

1.5 Payment Information

When you subscribe to premium features, payment processing is handled by Stripe. We store your subscription status, plan details, and customer ID, but never your full payment card details.

1.6 Third-Party Account Data

If you sign in with Google or other OAuth providers, we receive:

• Email address, name, profile picture
• Account ID from the provider
• Any additional permissions you grant

2. How We Use Your Information

2.1 Core Services

• Account management: Create and maintain your account
• Recipe features: Save, organize, extract, and adjust recipes
• Shopping lists: Generate and manage ingredient lists
• Meal planning: Create personalized meal plans based on your preferences

2.2 AI-Powered Personalization

We use your dietary preferences, recipe interactions, and meal history to:

• Generate personalized recipe recommendations
• Create meal plans tailored to your tastes and restrictions
• Adjust recipes to match your dietary needs
• Extract and parse recipes from external websites
• Estimate nutritional information

2.3 Service Improvements

• Analyze usage patterns to improve features and user experience
• Debug issues and optimize performance
• Develop new features based on user behavior

2.4 Communication

• Transactional emails: Account verification, password resets, subscription updates
• Service updates: Important changes to our service or policies
• Marketing (optional): New features, tips, recipe suggestions (you can opt-out anytime)

3. Third-Party Services & Integrations

3.1 Service Providers

We use trusted third-party services:

• Supabase: Database, authentication, storage (data hosted on secure servers)
• Stripe: Payment processing for subscriptions
• Resend: Transactional email delivery
• Vercel: Hosting and deployment infrastructure
• OpenAI: AI-powered recipe extraction and personalization

3.2 External Recipe Sources

When you extract recipes from external URLs, we fetch publicly available content from those websites. We don't share your personal information with these sites during extraction.

4. AI Features & Data Processing

4.1 Recipe Extraction

When you provide a recipe URL, we use AI to extract recipe details (title, ingredients, instructions, images). This process is automated and the URL is not associated with your personal profile beyond your saved recipes.

4.2 Recipe Personalization

Our AI analyzes your dietary preferences and restrictions to:

• Adjust ingredient quantities and substitutions
• Recommend suitable recipes from your saved collection
• Generate meal plans that match your goals

5. How We Share Your Information

We do not sell your personal information to third parties.

5.1 Service Providers

We share data with third-party service providers only as necessary to operate our service (hosting, analytics, email, payments). These providers are contractually obligated to protect your data.

5.2 Legal Requirements

We may disclose data when required by law or to:

• Comply with legal processes (subpoenas, court orders)
• Protect our rights, property, or safety
• Prevent fraud or security threats
• Enforce our Terms of Service

6. Data Security

We implement industry-standard security measures:

• Encryption: Data in transit (HTTPS/TLS) and at rest
• Access controls: Limited employee access to personal data
• Secure authentication: Password hashing, OAuth integrations
• Regular updates: Security patches and vulnerability monitoring
• Supabase RLS: Row Level Security to protect your data

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Data Retention

• Active accounts: We retain data as long as your account is active
• Deleted accounts: Data deleted within 30 days, except where required by law
• Backups: Backup systems may retain data for up to 90 days
• Analytics: Aggregated, anonymized data may be retained indefinitely

8. Your Privacy Rights

You have the following rights:

8.1 Access & Correction

• Access: View and export your personal data from your account settings
• Update: Correct inaccurate information in your profile

8.2 Deletion

• Delete account: Remove your account and associated data at any time
• Delete recipes: Remove individual recipes or data

8.3 Opt-Out

• Marketing: Unsubscribe from promotional emails (link in every email)
• Cookies: Manage cookie preferences via browser settings

8.4 How to Exercise Your Rights

To exercise any of these rights, contact us at privacy@yummiplates.comor use your account settings.

9. Children's Privacy

YummiPlates is not intended for children under 13. We don't knowingly collect data from children. If you believe we have collected data from a child, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We'll notify you of material changes via email or in-app notification. Continued use after changes constitutes acceptance.

11. Contact Us

For privacy-related questions or requests: