Effective Date: [EFFECTIVE DATE]
Last Updated: [EFFECTIVE DATE]
Avonhood LLC, a Delaware limited liability company ("RecipeForm," "we," "our," or "us"), owns and operates the RecipeForm mobile application (the "App") and the website located at recipeform.app (the "Website"), through which we offer recipe collection, digitization, scaling, formatting and cooking tools and related products and services (collectively, the "Services"). Before accessing or using the Services, please read this Privacy Notice (the "Privacy Notice" or "Notice").
This Privacy Notice is supplemental to, and hereby incorporates by reference, our Terms of Use (the "Terms"). Any capitalized terms not defined herein shall be given the meaning ascribed to them in the Terms. IF YOU DO NOT AGREE TO THIS PRIVACY NOTICE, THEN YOU MUST NOT ACCESS OR OTHERWISE USE THE SERVICES.
This Privacy Notice sets forth our practices for handling the information that we collect from or about you. It applies to all Services offered by RecipeForm wherein this Notice is linked or otherwise referenced. By accessing the Services, you are consenting to the information collection and use practices described herein.
1. Collection of Information. We collect several types of information from and about users of our Services. This information is provided to us either directly by you or through your use of our Services.
Information You Provide to Us. We collect the following categories of information when you use the Services:
- Account and sign-in information, including the e-mail address with which you sign in, an account identifier, and, where you sign in with Apple, the identifier and e-mail address (which may be a private relay address) that Apple provides to us. The Services may be used without an account, in which case we associate your recipes with an anonymous account identifier for the purpose of synchronization only;
- Profile information, including your first and last name, should you choose to provide them for the purpose of recipe attribution;
- User Content, including the recipes you create, import, edit, scale, favorite, annotate and organize into cookbooks, together with the source material from which they are derived, such as photographs of recipe pages, pasted text and links;
- Photographs, including photographs of recipe pages captured for digitization and photographs of finished dishes, in accordance with your device permissions. The camera and photo library are accessed only when you elect to scan a page or select a picture;
- Public Content, meaning any recipe you elect to designate as public, together with its photograph and your first name and last initial (see Section 3);
- Commercial information, including records of token packs and Gold subscriptions purchased through Apple and the resulting token grants, expenditures and refunds; and
- Correspondence you send to us, including support requests and any information you provide when you contact us.
Information We Collect Automatically. We and our service providers automatically collect certain information from the devices you use, including:
- Your device type, operating system and version, App version and default language;
- Internet protocol (IP) address;
- Date, time, duration and outcome of requests made to our servers, including error information, the feature in use and the processing stage at which an error occurred;
- Service engagement information, including the number of recipe additions, conversions and restorations performed and the tokens expended;
- Device attestation identifiers generated by Apple's DeviceCheck and App Attest services, which we use to confirm that requests originate from a genuine copy of the App on a genuine Apple device and to prevent repeated claims of promotional tokens;
- Purchase and subscription status information transmitted to us by Apple in signed form; and
- On the Website, anonymous page-visit counts collected by Vercel Web Analytics, which does not use cookies and does not identify individual visitors.
We do not collect precise geolocation, contacts, microphone audio, advertising identifiers or biometric information, and we do not use advertising networks, social-media trackers or cross-application tracking technologies.
2. Use of Information and Purpose of Data Processing. We use and otherwise process each of the categories of information identified above for the following business purposes:
- Administering and providing the Services that you request, including storing and synchronizing your recipes, authenticating you, maintaining your token balance and delivering purchased tokens and subscription benefits;
- Processing User Content with artificial-intelligence services at your direction, as described in Section 4;
- Communicating with you, including delivering sign-in codes, responding to support requests and notifying you about changes to this Notice or the Terms;
- Keeping the Services, our business and our users safe and secure, complying with applicable laws and regulations, and protecting or exercising our legal rights, including detecting, preventing and investigating fraud, abuse and violations of the Terms;
- Improving the Services, including troubleshooting, testing and the analysis of aggregate or de-identified information that is no longer subject to this Notice; and
- As otherwise described to you at the time of collection.
We do not sell your information, we do not use your information for advertising, and we do not send marketing communications without your consent.
3. Disclosure of Information. We disclose information in the following circumstances:
Service Providers. We engage third-party vendors to perform functions on our behalf, each of which is permitted to process information only as necessary to provide its services to us and subject to contractual obligations of confidentiality:
- Supabase, Inc. hosts our database, authentication and file storage. Supabase processes account information, User Content and photographs, and generates authentication logs that include IP addresses and device metadata associated with sign-in events;
- Resend, Inc. delivers sign-in codes by e-mail and processes your e-mail address for that purpose;
- Apple Inc. provides Sign in with Apple, in-app purchases, subscriptions and device attestation, each subject to Apple's own privacy policy;
- OpenAI, L.L.C. and Anthropic, PBC process the recipe pages, text and links you submit for artificial-intelligence reading, as described in Section 4;
- Railway Corp. hosts the service that verifies signed Apple purchase records; and
- Vercel Inc. hosts the Website and provides anonymous visit counts.
Public Content. Recipes you designate as public are displayed to other users of the Services, together with the recipe photograph and your first name and last initial. Recipes we publish on the Website are retrieved by your browser directly from our Supabase-hosted servers, which receive standard web-request information such as your IP address and browser type.
Legal and Safety. We may disclose information where required by law, subpoena or other legal process; where we believe disclosure is necessary to protect the rights, property or safety of RecipeForm, our users or the public; or to detect, prevent or address fraud, security or technical issues.
Business Transfers. In connection with any merger, acquisition, financing, reorganization or sale of all or a portion of our assets, information may be transferred to the successor entity, which shall remain subject to this Notice.
4. Artificial-Intelligence Processing. When you direct the App to read a recipe from a photograph, pasted text or link, or to restore a scanned page, the App transmits that material to our servers, which transmit it to one of our artificial-intelligence service providers for the sole purpose of converting it into structured recipe data. Only the material pertaining to that request is transmitted; your library as a whole is not. Such processing occurs only when you elect to use a feature that expends tokens. Each provider has represented that content submitted through its developer services is not used to train its models. Results are returned to our servers, validated, and presented to you for review before any recipe is saved. Server-side copies of submitted material are cleared within twenty-four (24) hours of the request.
5. Advertising, Cookies and Similar Technologies. The App does not display advertising and does not employ advertising or analytics software development kits. The Website sets no cookies of its own, offers no sign-in or forms, and stores nothing in your browser. Vercel Web Analytics operates without cookies and without identifying individual visitors. Because we do not engage in cross-site tracking, we do not respond to "Do Not Track" or Global Privacy Control signals, there being no tracking to which such signals would apply.
6. U.S. State Privacy Notice. To the extent that applicable U.S. state privacy laws (including the California Consumer Privacy Act, as amended) apply to you, the following supplemental disclosures apply.
Categories Collected. Within the preceding twelve (12) months we have collected the following categories of personal information: identifiers (e-mail address, account identifier, device attestation identifiers, IP address); personal information described in Cal. Civ. Code § 1798.80(e) (name); commercial information (purchase and token records); internet or other electronic network activity information (service request logs, feature usage); audio, electronic, visual or similar information (photographs you submit); and inferences drawn therefrom solely for the purpose of operating the Services. We do not collect sensitive personal information as that term is defined under applicable law.
Sources and Purposes. We collect such information directly from you, from your device, and from Apple, for the business purposes identified in Section 2.
Sale and Sharing. We do not sell personal information, and we do not share personal information for cross-context behavioral advertising, and we have not done so in the preceding twelve (12) months. We do not have actual knowledge that we sell or share the personal information of consumers under sixteen (16) years of age.
Your Rights. Subject to applicable law, you have the right to: (a) know and access the personal information we have collected about you; (b) request deletion of such information; (c) request correction of inaccurate information; (d) obtain a portable copy of such information; and (e) not be discriminated against for exercising any of these rights. You may exercise these rights by e-mailing contact@recipeform.app or, in the case of deletion, from within the App as described in Section 7. We will verify your identity by confirming control of the e-mail address associated with your account. You may designate an authorized agent to make a request on your behalf, provided that the agent furnishes proof of authorization and we are able to verify your identity. We will respond to verifiable requests within forty-five (45) days, which may be extended once by a further forty-five (45) days where reasonably necessary.
7. Account Deletion. You may delete your account from within the App by navigating to Settings, selecting your account and choosing Delete account. Upon confirmation, your account, your recipes, scans, photographs and Public Content are deleted from our servers and from the App, and your Sign in with Apple authorization is revoked. Deletion is irreversible. Deleting your account does not cancel a Gold subscription, which must be cancelled through your Apple subscription settings, and unused tokens are forfeited. We retain purchase and token records as described in Section 11.
8. United Kingdom and European Economic Area. If you are located in the United Kingdom or the European Economic Area, the following applies. Our legal bases for processing are: performance of our contract with you (providing the Services); compliance with legal obligations (purchase and tax records); and our legitimate interests in securing the Services, preventing fraud and improving the Services, which we have balanced against your interests and rights. You have the right to request access to, rectification or erasure of your personal data, to restrict or object to processing, to data portability, and to lodge a complaint with your supervisory authority, including the Information Commissioner's Office in the United Kingdom. To exercise these rights, contact us as set forth in Section 13.
9. Minors. The Services are not directed to children under thirteen (13) years of age, and we do not knowingly collect personal information from children under thirteen (13). Persons under sixteen (16) years of age located in the European Economic Area or the United Kingdom may use the Services only with the consent of a parent or legal guardian. If you are a parent or legal guardian and believe that your child has provided personal information to us, please contact us at contact@recipeform.app, and we will promptly delete such information and the associated account.
10. International Transfers. We and our service providers are based in the United States, and your information is collected, stored and processed in the United States and in other jurisdictions where our service providers operate, where laws may not be equivalent to those of your place of residence. Where we transfer information from the United Kingdom or the European Economic Area, we rely on contractual safeguards with our service providers, including standard contractual clauses where applicable.
11. Data Retention, Security and Integrity. Your information will be retained only for so long as reasonably necessary for the purposes set out herein and in accordance with applicable law. Specifically: User Content and account information are retained until you delete them or delete your account; material submitted for artificial-intelligence processing is cleared from our servers within twenty-four (24) hours; libraries associated with anonymous accounts are removed from our servers after thirty (30) days without use; purchase and token records are retained for so long as necessary to honor purchases and to satisfy accounting, tax and legal obligations, including following account deletion; and service logs are retained for a limited period consistent with our operational and security needs. Our hosting providers maintain backups for a limited period, from which deleted information is removed in the ordinary course.
We maintain administrative, technical and physical safeguards designed to protect your information from loss, theft, misuse, unauthorized access, disclosure, alteration and destruction, including encryption of information in transit, private storage for User Content and photographs that is accessible only to your account, cryptographic verification of Apple purchase records, and short-lived sign-in codes. However, no data storage system or transmission of data over the internet can be guaranteed to be completely secure. You are responsible for safeguarding the e-mail account associated with your RecipeForm account.
12. Changes to the Privacy Notice. We may modify this Notice from time to time, in our sole discretion. When any such updates are made, we shall revise the "Last Updated" date above and post the new version of this Notice. Where a change materially affects the manner in which we process your information, we will provide notice within the App or by e-mail. We recommend that you review this Privacy Notice periodically in order to stay informed of our practices.
13. Contact. Any questions, comments, complaints or requests pertaining to this Privacy Notice should be e-mailed to contact@recipeform.app, or sent to Avonhood LLC, Attn: Privacy, at the same address.