Last updated: January 24, 2026
1. Introduction
CookFlow ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the CookFlow mobile application ("App").
By using the App, you agree to the collection and use of information in accordance with this policy. If you disagree with any part of this policy, please do not use our App.
2. Information We Collect
2.1 Personal Information
We collect information that you provide directly to us, including:
- Email Address: Used for account creation, authentication, and communication
- Name: Optional display name for your account
- Profile Picture: Optional avatar uploaded by you
- Authentication Credentials: Securely stored tokens for maintaining your session
2.2 User Content
We collect and store content you create or upload to the App, including:
- Recipes you create, import, or save
- Meal plans and schedules
- Grocery lists you generate
- Recipe collections and folders
- Images you upload (recipe photos, cookbook scans)
- Notes and modifications you make to recipes
2.3 Device and Usage Information
We automatically collect certain information when you use the App, including:
- Device type and operating system
- Unique device identifiers (for authentication purposes)
- App version and build number
- Usage statistics and analytics
- Crash reports and performance data
- Timestamps of your activities
2.4 Subscription and Payment Information
If you subscribe to premium features, we collect:
- Subscription status and plan type
- Subscription start and renewal dates
- Purchase history (processed through Apple App Store or Google Play)
Note: We do not collect or store your payment information. All payments are processed securely through Apple App Store or Google Play Store.
3. How We Use Your Information
We use the information we collect for the following purposes:
- Service Provision: To provide, maintain, and improve the App's features
- Authentication: To verify your identity and secure your account
- Data Synchronization: To sync your data across multiple devices
- Feature Enhancement: To enable AI-powered recipe parsing and OCR services
- Communication: To send you important updates, security alerts, and support messages
- Analytics: To understand how users interact with the App and improve user experience
- Subscription Management: To manage your premium subscription and access
- Security: To detect, prevent, and address technical issues and fraudulent activity
- Legal Compliance: To comply with legal obligations and enforce our Terms of Service
4. Data Sharing and Disclosure
4.1 Third-Party Service Providers
We may share your information with trusted third-party service providers who assist us in operating the App:
| Service Provider |
Purpose |
Data Shared |
| Firebase (Google) |
Cloud database, authentication, analytics |
User account data, recipes, usage analytics |
| OpenRouter |
AI-powered recipe parsing |
Recipe URLs and text content (for parsing only) |
| RevenueCat |
Subscription management |
Subscription status and purchase events |
| Apple App Store / Google Play |
App distribution and payment processing |
Subscription and purchase information |
4.2 No Sale of Personal Data
We do not sell your personal information to third parties for marketing or advertising purposes.
4.3 Legal Requirements
We may disclose your information if required to do so by law or in response to valid legal requests, such as:
- Court orders or subpoenas
- Government investigations
- Protection of our rights, property, or safety
- Prevention of fraud or illegal activity
4.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new owner. We will notify you of any such transfer.
5. Data Security
We implement industry-standard security measures to protect your information:
- Encryption: Data is encrypted in transit and at rest using industry-standard encryption protocols
- Secure Authentication: We use Firebase Authentication with secure token-based authentication
- Access Controls: Strict access controls limit who can access your data
- Regular Audits: We regularly review our security practices to identify and address vulnerabilities
- Data Minimization: We only collect data necessary to provide our services
However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
6. Data Retention
6.1 Retention Period
We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this policy:
- Account Data: Retained while your account is active
- User Content: Retained until you delete it or your account
- Analytics Data: Retained for up to 24 months
- Subscription Data: Retained as required by app store policies and tax laws
6.2 Account Deletion
When you delete your account, we will:
- Immediately delete your account credentials
- Delete all your recipes, meal plans, and grocery lists within 30 days
- Remove your personal information from our active databases
- Retain anonymized analytics data as permitted by law
7. Your Privacy Rights
Depending on your location, you may have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your personal information
- Portability: Request transfer of your data to another service
- Objection: Object to processing of your personal information
- Restriction: Request restriction of processing your personal information
- Withdraw Consent: Withdraw consent for processing where consent is the legal basis
7.1 Exercising Your Rights
To exercise any of these rights, please contact us at peterguo1983@gmail.com. We will respond to your request within 30 days.
7.2 Account Deletion
You can delete your account and all associated data directly from the App by:
- Go to Settings
- Select "Account"
- Tap "Delete Account"
- Confirm your decision
Alternatively, you may contact us at peterguo1983@gmail.com to request account deletion.
8. Children's Privacy
The App is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that we have collected such information, we will take immediate steps to delete it.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us at peterguo1983@gmail.com.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.
By using the App, you consent to such international transfers of your information.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
- Posting the new policy in the App
- Sending you an email notification (if you've provided your email)
- Displaying a prominent notice in the App
Your continued use of the App after such changes constitutes your acceptance of the updated Privacy Policy.
11. California Residents (CCPA)
If you are a resident of California, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to Know: Information about the categories of personal information we collect and how we use it
- Right to Delete: Request deletion of your personal information
- Right to Opt-Out: Opt-out of the sale of your personal information (we do not sell personal information)
- Right to Non-Discrimination: Not be discriminated against for exercising your privacy rights
To exercise these rights, please contact us at peterguo1983@gmail.com.
12. European Residents (GDPR)
If you are a resident of the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):
- Lawful Basis: We process your data based on your consent, contract performance, and legitimate interests
- Data Subject Rights: You have the rights listed in Section 7
- Data Protection Officer: You may contact our Data Protection Officer at peterguo1983@gmail.com
- Right to Lodge a Complaint: You may lodge a complaint with your local data protection authority
Back to Home