← Back to Home

1. Introduction

Welcome to Cooky ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and web application (collectively, the "App").

Cooky is developed and operated by Dor Tal, an individual developer based in Israel. We are committed to protecting your privacy and handling your data in an open and transparent manner.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide when using the App:

• Account Information: When you create an account, we collect your email address and authentication credentials.
• Recipe Data: Recipes you create, import, or modify, including ingredients, instructions, serving sizes, and nutritional information.
• Photos: Images you upload or take of recipes through the App.
• User Preferences: Settings, sorting preferences, and app configuration choices.

2.2 Automatically Collected Information

• Usage Data: Information about how you use the App, including features accessed and actions taken.
• Device Information: Device type, operating system, unique device identifiers, and mobile network information.
• Log Data: IP address, browser type, access times, and pages viewed.

2.3 Information from Third Parties

When you use certain features, we may receive information from:

• OpenAI: When using AI-powered recipe parsing and analysis features.
• Authentication Providers: If you sign in using third-party authentication methods.

3. How We Use Your Information

We use your information for the following purposes:

• Provide Services: To operate the App and deliver the features you request.
• Account Management: To create and manage your account, authenticate your identity, and communicate with you.
• AI Features: To process your recipes through AI for parsing, nutritional analysis, and smart recommendations.
• Improve the App: To analyze usage patterns, fix bugs, and enhance user experience.
• Security: To detect, prevent, and address technical issues and security threats.
• Legal Compliance: To comply with applicable laws and regulations.

4. Data Storage and Security

4.1 Where Your Data is Stored

Your data is stored securely using Supabase, a third-party cloud database service. Supabase provides enterprise-grade security and is compliant with industry standards including SOC 2 Type II and GDPR.

4.2 Security Measures

We implement appropriate technical and organizational security measures to protect your data:

• Encryption of data in transit using HTTPS/TLS
• Secure authentication and password hashing
• Regular security updates and monitoring
• Access controls and authentication requirements

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

5. Data Sharing and Disclosure

5.1 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

5.2 Service Providers

We share your information only with trusted service providers who assist us in operating the App:

• Supabase: Cloud database hosting and authentication services
• OpenAI: AI-powered recipe parsing and analysis (only recipe text is sent, not personal information)
• Vercel: Web hosting and content delivery

These service providers are contractually obligated to protect your data and use it only for the purposes we specify.

5.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities.

6. Your Rights and Choices

6.1 Access and Update

You can access and update your account information and recipes at any time through the App.

6.2 Data Portability

You have the right to request a copy of your data in a machine-readable format.

6.3 Account Deletion

You have the right to delete your account and all associated data at any time. To delete your account:

• Contact us at dortaldt@gmail.com with the subject "Account Deletion Request"
• Include your account email address
• We will process your request within 30 days and confirm deletion

Upon account deletion, all your personal data, recipes, and photos will be permanently deleted from our servers. This action cannot be undone.

6.4 Opt-Out of Communications

You can opt out of promotional emails by following the unsubscribe link in any email we send.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide you services. If you delete your account, we will delete your data within 30 days, except where we are required to retain it for legal purposes.

8. Children's Privacy

Cooky is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

10. Third-Party Links

The App may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Updating the "Last Updated" date at the top of this policy
• Posting the new Privacy Policy on this page
• Sending you an email notification (for material changes)

Your continued use of the App after any changes indicates your acceptance of the updated Privacy Policy.

12. Your California Privacy Rights (CCPA)

If you are a California resident, you have additional rights:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to say no to the sale of personal information
• Right to delete personal information
• Right to equal service and price

Note: We do not sell personal information.

13. GDPR Rights (European Users)

If you are in the European Economic Area (EEA), you have the following rights:

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Rights related to automated decision-making

14. Contact Us

15. Data Protection Officer

For GDPR-related inquiries or to exercise your rights under GDPR, you can contact:

Email: dortaldt@gmail.com