Privacy Policy

Last updated: May 11, 2026

This Privacy Policy describes how TastePapa ("we", "us", "our") collects, uses, and discloses information when you use the TastePapa mobile application, website, support forms, and related services (the "Service").

1. Information We Collect

We collect the following categories of information:

• Account information. Name, email address, sign-in provider, profile photo, account status, and a unique account identifier.
• User content. Items you add to your fridge and pantry, grocery lists, saved recipes, collections, meal plans, prep guides, dietary preferences, calorie targets, and Ask Papa conversation history.
• Imported and scanned content. Recipes, URLs, captions, screenshots, photos, and other files you submit for recipe import, OCR, image extraction, or social-share import, including parsed recipe title, ingredients, instructions, source link, and import status.
• Voice input text. Voice features rely on speech recognition. We do not collect raw audio recordings, but the transcribed text may be sent to the Service to add grocery/kitchen items or answer cooking questions.
• Subscription information. Subscription status, entitlement identifiers, renewal state, and related purchase metadata managed by RevenueCat, Apple, or Google. We do not receive or store your full payment card details.
• Diagnostics, support, and usage data. Crash reports, local error logs you choose to export, support request messages, device type, operating system version, app version, feature usage, operational telemetry, App Check/device integrity signals, and aggregate analytics.
• Notifications data. Device push notification tokens, notification preferences, and delivery metadata for reminders and recipe suggestions.

We do not collect precise location, contacts, advertising identifiers for ad targeting, or raw microphone recordings.

2. How We Use Information

We use information to:

• Operate, secure, troubleshoot, and improve the Service.
• Sync your recipes, kitchen items, groceries, meal plans, preferences, and account settings across devices.
• Provide AI-assisted features, including recipe generation, recipe chat, Ask Papa, recipe import, OCR/image extraction, recipe translation, nutrition estimates, meal planning, and prep guides.
• Send notifications you choose to receive.
• Provide customer support and investigate bugs, abuse, fraud, or service reliability issues.
• Manage subscriptions, quotas, entitlements, and billing-related support.
• Comply with legal obligations and enforce our Terms.

3. AI Processing

TastePapa uses third-party AI providers, including Google Gemini and OpenAI, to power features such as Ask Papa, recipe chat, recipe ideas, imports, image/OCR extraction, translation, nutrition estimates, and meal-prep guidance. When you use these features, we send the relevant prompt and limited context needed to fulfill your request, such as recipe text, kitchen items, grocery items, meal plan entries, imported page content, or an image you selected.

We do not use your private user content to train external AI models. AI output may be inaccurate, incomplete, or unsafe for your situation. You are responsible for reviewing recipes, ingredients, allergens, cooking temperatures, nutrition, and any changes Ask Papa suggests before relying on them.

4. Sharing and Disclosure

We disclose information only as needed to operate and protect the Service:

• Google Firebase and related Google services for authentication, database, hosting, cloud functions, storage, push notifications, analytics, crash reporting, and App Check.
• RevenueCat, Apple App Store, and Google Play for subscription management, purchase validation, and billing support.
• Google Gemini and OpenAI for AI processing as described above.
• Expo and platform notification services for push notification delivery.
• Service providers that help us host support forms, monitor reliability, prevent abuse, or respond to support requests.

We do not sell or rent your personal information. We do not share your information with advertisers. We may disclose information if required by law, in response to valid legal process, or to protect TastePapa, users, or the public.

5. Third-Party Sources and Imports

If you import from websites, Instagram, TikTok, Photos, Files, or another app, TastePapa processes the content you choose to share so we can extract and save a recipe. Third-party sites and platforms are not operated by TastePapa, and their own terms and privacy policies continue to apply.

6. Data Retention

We retain account information and user content while your account is active or as needed to provide the Service. Import jobs, operational telemetry, diagnostics, support requests, and security logs may be retained for limited periods for troubleshooting, fraud prevention, abuse prevention, accounting, and legal compliance. When you delete your account, we delete or de-identify synced user content within thirty (30) days unless we are required or permitted to retain limited records.

7. Your Rights and Choices

You can manage your information in the app:

• Manage notification preferences in Settings > Notifications.
• Change your language preference in Settings > Language.
• Control diagnostic collection and export diagnostics in Settings > Privacy & Data.
• Export your account data in Settings > Privacy & Data > Export my data.
• Delete your account in Settings > Account > Delete account, or follow the instructions on our account deletion page.

8. Regional Rights

Depending on your jurisdiction, you may have rights under data protection laws such as the GDPR, UK GDPR, CCPA/CPRA, and LGPD. These rights may include access, correction, deletion, portability, restriction, objection, or appeal. To exercise rights, contact us through our support page. We will respond within the time required by applicable law.

9. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us so we can delete it.

10. Security

We use reasonable administrative, technical, and organizational safeguards, including authentication controls, Firebase security rules, App Check for sensitive functions, and monitoring for abuse. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

11. International Transfers

Your information may be processed in countries other than your own, including the United States. Where required, we use appropriate safeguards for cross-border transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the app, website, or email. Your continued use of the Service after changes take effect means you accept the updated Policy.

13. Contact

For privacy questions or to exercise your rights, contact us through our support page.