Privacy Policy

1. Introduction

CookFlow ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the CookFlow mobile application ("App").

By using the App, you agree to the collection and use of information in accordance with this policy. If you disagree with any part of this policy, please do not use our App.

2. Information We Collect

2.1 Personal Information

We collect information that you provide directly to us, including:

• Email Address: Used for account creation, authentication, and communication
• Name: Optional display name for your account
• Profile Picture: Optional avatar uploaded by you
• Authentication Credentials: Securely stored tokens for maintaining your session

2.2 User Content

We collect and store content you create or upload to the App, including:

• Recipes you create, import, or save
• Meal plans and schedules
• Grocery lists you generate
• Recipe collections and folders
• Images you upload (recipe photos, cookbook scans)
• Notes and modifications you make to recipes

2.3 Device and Usage Information

We automatically collect certain information when you use the App, including:

• Device type and operating system
• Unique device identifiers (for authentication purposes)
• App version and build number
• Usage statistics and analytics
• Crash reports and performance data
• Timestamps of your activities

2.4 Subscription and Payment Information

If you subscribe to premium features, we collect:

• Subscription status and plan type
• Subscription start and renewal dates
• Purchase history (processed through Apple App Store or Google Play)

Note: We do not collect or store your payment information. All payments are processed securely through Apple App Store or Google Play Store.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Provision: To provide, maintain, and improve the App's features
• Authentication: To verify your identity and secure your account
• Data Synchronization: To sync your data across multiple devices
• Feature Enhancement: To enable AI-powered recipe parsing and OCR services
• Communication: To send you important updates, security alerts, and support messages
• Analytics: To understand how users interact with the App and improve user experience
• Subscription Management: To manage your premium subscription and access
• Security: To detect, prevent, and address technical issues and fraudulent activity
• Legal Compliance: To comply with legal obligations and enforce our Terms of Service

4. Data Sharing and Disclosure

4.1 Third-Party Service Providers

We may share your information with trusted third-party service providers who assist us in operating the App:

Service Provider	Purpose	Data Shared
Firebase (Google)	Cloud database, authentication, analytics	User account data, recipes, usage analytics
OpenRouter (accessing Google AI)	AI features (Recipe Parsing, Meal Planning, Chef Assistant, Image Recognition/OCR)	User-provided content required for AI features, including: recipe URLs, recipe text, images of food or cookbooks, chat history, and dietary preferences.
RevenueCat	Subscription management	Subscription status and purchase events
Apple App Store / Google Play	App distribution and payment processing	Subscription and purchase information

4.2 No Sale of Personal Data

We do not sell your personal information to third parties for marketing or advertising purposes.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal requests, such as:

• Court orders or subpoenas
• Government investigations
• Protection of our rights, property, or safety
• Prevention of fraud or illegal activity

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new owner. We will notify you of any such transfer.

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: Data is encrypted in transit and at rest using industry-standard encryption protocols
• Secure Authentication: We use Firebase Authentication with secure token-based authentication
• Access Controls: Strict access controls limit who can access your data
• Regular Audits: We regularly review our security practices to identify and address vulnerabilities
• Data Minimization: We only collect data necessary to provide our services

However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

6.1 Retention Period

We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this policy:

• Account Data: Retained while your account is active
• User Content: Retained until you delete it or your account
• Analytics Data: Retained for up to 24 months
• Subscription Data: Retained as required by app store policies and tax laws

6.2 Account Deletion

When you delete your account, we will:

• Immediately delete your account credentials
• Delete all your recipes, meal plans, and grocery lists within 30 days
• Remove your personal information from our active databases
• Retain anonymized analytics data as permitted by law

7. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Request transfer of your data to another service
• Objection: Object to processing of your personal information
• Restriction: Request restriction of processing your personal information
• Withdraw Consent: Withdraw consent for processing where consent is the legal basis

7.1 Exercising Your Rights

To exercise any of these rights, please contact us at peterguo1983@gmail.com. We will respond to your request within 30 days.

7.2 Account Deletion

You can delete your account and all associated data directly from the App by:

1. Go to Settings
2. Select "Account"
3. Tap "Delete Account"
4. Confirm your decision

Alternatively, you may contact us at peterguo1983@gmail.com to request account deletion.

8. Children's Privacy

The App is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that we have collected such information, we will take immediate steps to delete it.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at peterguo1983@gmail.com.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.

By using the App, you consent to such international transfers of your information.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new policy in the App
• Sending you an email notification (if you've provided your email)
• Displaying a prominent notice in the App

Your continued use of the App after such changes constitutes your acceptance of the updated Privacy Policy.

11. California Residents (CCPA)

If you are a resident of California, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Information about the categories of personal information we collect and how we use it
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt-out of the sale of your personal information (we do not sell personal information)
• Right to Non-Discrimination: Not be discriminated against for exercising your privacy rights

To exercise these rights, please contact us at peterguo1983@gmail.com.

12. European Residents (GDPR)

If you are a resident of the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Lawful Basis: We process your data based on your consent, contract performance, and legitimate interests
• Data Subject Rights: You have the rights listed in Section 7
• Data Protection Officer: You may contact our Data Protection Officer at peterguo1983@gmail.com
• Right to Lodge a Complaint: You may lodge a complaint with your local data protection authority

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

Email: peterguo1983@gmail.com
Website: https://cookflow-f57a4.web.app
Address: CookFlow AI, United States