Privacy Policy

1. Information We Collect

a) Account Information

When you sign in, we collect your email address. This is used solely for authentication via a one-time code (OTP). We do not collect your name, phone number, or address unless you voluntarily provide them.

b) Usage Data

We collect anonymous, aggregated usage data such as which recipes are viewed, search queries, and conversion requests. This helps us improve the App and understand what content is popular. We do not track your precise location.

c) Device-Level Data

The App caches recipes locally on your device for offline access. This data is stored in your device's cache directory and is not transmitted to our servers. It may be cleared by the operating system at any time.

d) Data We Do Not Collect

• We do not access your contacts, photos, camera, microphone, or files.
• We do not collect payment or financial information (the App is free).
• We do not use advertising SDKs or sell data to advertisers.

2. How We Use Your Information

• Authentication: Your email address is used to send one-time login codes and identify your account.
• Favourites & Comments: Your account ID is used to store your favourite recipes and any comments you post.
• Recipe Conversion: YouTube URLs you submit are sent to our server and processed using Google Gemini AI. We store the resulting recipe and a reference to the original video.
• Recipe Customisation: Customisation prompts you enter are sent to our server and processed by Google Gemini AI. Customised recipes are returned to you but are not permanently stored on our servers.
• Service Improvement: Aggregated, anonymous usage data is used to improve recipe quality and App performance.

3. Third-Party Services

The App relies on the following third-party services:

• Google Gemini AI — processes YouTube videos and customisation prompts to generate recipe content. Subject to Google's Privacy Policy.
• YouTube Data API — used to search for cooking videos. Subject to Google's Privacy Policy and YouTube Terms of Service.
• Amazon Web Services (AWS) — our database and storage infrastructure is hosted on AWS in the US East region.

We do not share your personal data with any third party for marketing or advertising purposes.

4. Data Storage & Security

Your account data and favourites are stored in a PostgreSQL database hosted on AWS. Communication between the App and our servers is encrypted using HTTPS/TLS. We implement reasonable technical and organisational measures to protect your data, but no system is 100% secure.

5. Data Retention

• Account data: Retained as long as your account is active.
• OTP codes: Automatically deleted after use or after 10 minutes, whichever comes first.
• Cached recipes (on device): Automatically expire after 7 days or when cleared by the OS.
• Conversion jobs: Stored for 30 days to enable deduplication, then may be purged.

6. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Delete your account and associated data by contacting us at the email below.
• Withdraw consent at any time by stopping use of the App and requesting account deletion.

7. Children's Privacy

The App is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of the App after changes constitutes acceptance of the updated policy.

9. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at cook@fullmeals.com.