Privacy Policy

1. Who we are

Cookcart is an independent mobile application available on Android. References to "we", "us", or "our" refer to the developer of Cookcart. For any privacy-related questions, contact us at the address listed at the bottom of this page.

2. What data we collect

We collect only the data needed to provide the app's core features.

Account information — When you sign in with Google, we receive your name, email address, and profile photo from Google. This is used to create and identify your account. We do not receive your Google password.

User-generated content — Recipes you create, import, or scan; grocery lists and items you create; notes and descriptions you write; and photos you upload to recipes or your profile. This content is stored on our servers and associated with your account.

Usage data — Basic information about how you use the app, such as which features you interact with. This helps us understand how the app is used and improve it over time.

Device information — We may collect your device type and operating system version for the purposes of diagnosing technical issues.

We do not collect:

• Your precise location
• Your contacts or address book
• Microphone or camera data beyond photos you explicitly choose to upload
• Payment information (subscriptions are handled entirely by Google Play)

3. How we use your data

We use the data we collect solely to operate and improve Cookcart:

• To create and maintain your account
• To store and sync your recipes and grocery lists across sessions
• To display your profile photo and display name within the app
• To diagnose crashes and fix bugs
• To improve features based on how the app is used

We do not use your data for advertising, and we do not sell or rent your data to third parties under any circumstances.

4. How your data is stored

Your account data, recipes, and grocery lists are stored securely using Supabase, a cloud database platform. Data is stored on servers in the United States. Supabase uses industry-standard security practices including encryption at rest and in transit.

Photos you upload (recipe cover images, step images, profile photos, and scanned recipes) are stored in Supabase Storage, also hosted on secure cloud infrastructure.

We take reasonable technical and organisational measures to protect your data from unauthorised access, loss, or disclosure. However, no system is completely secure, and we cannot guarantee absolute security.

5. Third-party services

Cookcart uses a small number of third-party services to provide its functionality:

• Google Sign-In — used for authentication. Governed by Google's Privacy Policy.
• Google Cloud Vision API — used to extract text from photos of paper recipes (OCR). Images sent for OCR are not stored by Google beyond the immediate processing request.
• Supabase — used for database, authentication, and file storage. Governed by Supabase's Privacy Policy.
• Google Play Billing — used to manage in-app subscriptions. Payment information is handled entirely by Google and never passes through our servers.

We do not integrate with advertising networks, data brokers, or analytics platforms that track you across other apps or websites.

6. Your rights and choices

You have full control over your data:

• Access — All of your recipes, grocery lists, and profile information are visible to you within the app at any time.
• Edit — You can update your display name and profile photo at any time from the Profile tab.
• Delete your account — You can permanently delete your account and all associated data directly from the app. Go to Profile → Settings → Delete Account. This action is irreversible and will permanently remove your account, all recipes, grocery lists, and uploaded photos from our servers.
• Data export — If you would like a copy of your data before deleting your account, please contact us and we will assist you.

If you are located in the European Economic Area (EEA) or United Kingdom, you may also have rights under GDPR or UK GDPR, including the right to access, rectify, or erase your personal data, and the right to lodge a complaint with your local data protection authority.

7. Data retention

We retain your data for as long as your account is active. If you delete your account, all personal data associated with your account — including your profile, recipes, grocery lists, and uploaded photos — is permanently deleted from our systems within 30 days.

Anonymised, aggregated usage statistics that cannot be linked back to any individual may be retained indefinitely for product improvement purposes.

8. Children's privacy

Cookcart is not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it promptly.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will notify users within the app. Continued use of Cookcart after changes are posted constitutes your acceptance of the updated policy.

10. Contact us