Privacy Policy

Astra Innovations LLC, a limited liability company organized in Florida, United States, is the controller of the personal information described in this policy. This policy applies to the Service and to our communications with you. It does not cover third-party services you reach through the Service (for example YouTube, Instagram, TikTok or advertisers), which have their own policies. Our Terms of Service govern your use of the Service.

Information you give us

• Account details. Email address, name (first and last, if you provide them), a password (stored only as a salted hash), and — if you use Sign in with Apple or Google Sign-In — the identifier, name and email your provider shares with us. You can use a fun preset avatar or upload a profile photo.
• Preferences. Diet and allergy settings, unit preference, appearance, and notification preferences.
• Chef page (optional). A short bio and tagline you write, and which of your shared recipes you feature. Only shown if you share at least one recipe. Which chefs you follow.
• Kitchen friends and sharing (optional). The people you send or accept kitchen-friend requests with, and the friends you mute or block; invite links you create (we store only a scrambled fingerprint of each link, which expires after 7 days); what you toss to a friend or they toss to you (the recipe, video or grocery items, a copy of a tossed recipe, the preset note you chose and when it was sent); a shared household grocery list you start or join (its name, members and pending invites, and who added or ticked each item); quiet-hours settings and your time zone for them; and reports you file about another user or a toss.
• Kitchen content. Pantry items, recipes you generate, remix, write, edit or import (including titles, ingredients, steps, servings, nutrition estimates and dish images), ratings, saved recipes and collections, meal plans and grocery lists, cooking progress and notes, and links you paste or share into the app.
• Prompts. The cravings, instructions and remix directions you type.
• Photos for scanning. Photos of your fridge, counter, groceries, receipts, recipe pages or plated dishes that you choose to submit for ingredient or dish detection. These are sent to our AI provider for analysis and are not stored on our servers (see Section 3). Receipts may contain store names, dates, prices and, occasionally, payment details — we recommend cropping anything you don’t want analysed.
• Selfies for an AI chef portrait (optional). If you use “Make me a chef,” the photo of yourself you take or choose is sent to our AI providers to draw illustrated chef portraits of you. The selfie is not stored on our servers; only the portraits are (see Sections 3 and 9).
• Photos you attach to a cooked dish. These stay on your device unless a future version lets you share them, in which case we will ask first.
• Support and correspondence. Anything you send us by email, including deletion or privacy requests.

Information we collect automatically

• Purchase and plan status. When you buy a subscription, credit pack or Remove Ads in the app, Apple sends us a signed transaction record containing the product, transaction and original-transaction identifiers, purchase and expiry dates, environment and renewal status. When you buy on the web, Stripe sends us the matching records: a customer identifier, the product, amounts, payment, subscription, renewal, refund and dispute status, and the name and email you gave at checkout. We use these records to grant and verify your benefits and to prevent you being charged twice. We never receive your full card number.
• Usage and balances. Credits, monthly allowance usage, generations and scans performed, rewarded-ad completions (via Google’s server-side verification callback, which sends us your app user ID and a transaction ID), and which features you use.
• Device and technical data. IP address, device model, operating-system version, app version, language, time zone, request timestamps and diagnostic logs when something goes wrong. We do not use third-party analytics or crash-reporting SDKs.
• Notification tokens. If you allow notifications, the push token Apple issues for your iPhone, and — if you turn on notifications in a browser — that browser’s push subscription, together with a device label (for example “iPhone” or “Chrome on Mac”). We use them only to deliver tosses, friend requests, follow and household notices, and items sent from another of your devices.
• Anonymous usage statistics. The app and recipe-wizard.app record which video features are used (opening Watch, plays, how long a video was watched, saves, sending to another device, and turning a video into a recipe) under a random identifier that is not linked to your account. These records contain no search text or personal data, are collected by us directly (no third-party analytics), are switched off in browsers that send Do Not Track or Global Privacy Control, and are deleted after 180 days.
• Advertising data (free tier only). Google AdMob may collect device information, IP address, coarse location inferred from IP, and advertising identifiers in accordance with your device settings and Google’s policies (see Section 7).

Information from others

• Apple and Google when you sign in with them (identifier, name, email, and whether the email is verified).
• Apple App Store Server Notifications about renewals, refunds, revocations and grace periods.
• Publicly available recipe text from a page or post you ask us to import.

Recipe Wizard is built on third-party AI models. When you use an AI feature, the information needed for that request is sent to the provider, processed, and the result is returned to you and, for recipes, saved to your account.

• Text generation, remixes, cooking tips, receipt reading and ingredient detection are performed by OpenAI (currently GPT-4o-class models via the OpenAI API). Requests include your prompt, your diet and allergy settings, the relevant recipe or pantry items and — for scans — the photo you submitted.
• Content screening. Prompts are checked with OpenAI’s moderation service and a classifier so that the Service is used for food and cooking only.
• Dish images are generated from a text description of the recipe by fal.ai. No photo of yours is used to generate dish images.
• AI chef portraits (optional). When you ask for one, your selfie is first checked with OpenAI’s moderation service, then sent to fal.ai, which uses an image model to draw three illustrated chef portraits from it. The selfie is held in memory only for that request and is not stored by us. The three portraits are stored so you can pick one: the one you pick becomes your profile photo, and the others are deleted when you pick or leave the screen. We do not use facial recognition, and we do not create or keep face geometry, faceprints or any other biometric identifier from your photo.
• Not used for training. We use these providers’ API services, under terms that do not permit them to use your inputs or outputs to train their models. We do not train models on your data either.
• Provider retention. Providers may retain request data for a limited period (OpenAI states up to 30 days) for abuse and misuse monitoring, after which it is deleted, unless law requires otherwise. We do not store scan photos or chef-portrait selfies; recipes and prompts you generate are stored with your account (Section 9).
• Labelling. AI-generated dish images are marked as AI-generated in the app, and generated recipes are flagged as AI-generated in our records.

• Provide the Service: generate, store and sync recipes, pantry, meal plans and grocery lists across your devices and to your Apple Watch, widgets and Live Activities.
• Run kitchen friends and sharing: deliver what you toss to the friend you chose, keep a shared household list in sync for its members, and send the notifications you allow (silently during your quiet hours).
• Personalise output to your diet, allergies and pantry.
• Manage accounts, sign-in, password resets (sent by email) and security.
• Grant, verify and enforce plans, credits, allowances and fair-use limits; detect fraud and abuse of purchases, rewarded ads and rate limits.
• Keep social features safe: limit how many requests and tosses an account can send, hold back new or unconfirmed accounts from reaching out, honour blocks and mutes, and review reports.
• Screen requests for content that is not about food or is otherwise inappropriate.
• Show advertising on the free tier and grant credits for completed rewarded ads.
• Send service messages: receipts from Apple, password resets, changes to terms, prices or features, security notices. We do not send marketing email unless you opt in, and you can unsubscribe at any time.
• Diagnose problems, keep the Service secure, and improve features (using aggregated or de-identified statistics where possible).
• Comply with law, enforce our Terms, and protect the rights, safety and property of users, the public and us.

Where the GDPR, UK GDPR or a similar law applies, we rely on:

• Performance of a contract — to provide the Service you signed up for, including AI processing of what you submit and purchase verification.
• Legitimate interests — to secure the Service, prevent fraud and abuse, understand aggregate usage, and communicate service changes, balanced against your rights.
• Consent — for camera, photo-library, microphone and speech-recognition access on your device, for creating an AI chef portrait from a selfie you submit, for personalised advertising where consent is required, and for any optional marketing. You can withdraw consent at any time in your device settings or by contacting us.
• Legal obligation — to keep records required by tax, accounting or consumer law and to respond to lawful requests.

We do not sell personal information, and we do not share it with third parties for their own marketing. We share it only as follows:

Service providers (processors)

• OpenAI — text generation, vision (ingredient and receipt scans), cooking tips, moderation (including screening selfies submitted for chef portraits).
• fal.ai — dish image generation from recipe descriptions, and AI chef portraits drawn from a selfie you choose to submit.
• Apple — App Store purchases, subscriptions and notifications; Sign in with Apple; the Apple Push Notification service, which carries notifications to your iPhone; Apple Watch, Live Activities, widgets and speech recognition on your device (Section 8).
• Browser push services — if you turn on notifications on the web, your browser’s maker (for example Google, Apple or Mozilla) relays them to that browser. The notification text is encrypted so that only your browser can read it.
• Stripe and Link — purchases on the web. Stripe and its affiliate Link sell web purchases to you as merchant of record: they collect your payment details, name, email, billing address and device information at checkout, calculate and remit tax, prevent fraud and send receipts, and handle that information as independent controllers under the Stripe Privacy Policy. We share your account email and an account identifier with them so a purchase lands on the right account.
• Google — Google Sign-In (if you use it) and AdMob advertising on the free tier, including rewarded-ad verification.
• Amazon Web Services (S3) — storage of generated dish images, uploaded profile photos and AI chef portraits.
• Database and server hosting — our API and database run on hosting providers in the United States.
• Email delivery — transactional email (for example password resets) is sent through an email service operated by Astra Innovations LLC.

Providers may only process your information to provide their services to us and under contractual confidentiality and security obligations.

Other users

Recipes are private by default. If you make a recipe public, its content is visible to other users, who can rate, save and cook it, shown under your first name and avatar. Anyone can then open your chef page, which shows your first name, avatar, bio and tagline (if you wrote them), your shared recipes and aggregate figures derived from them (recipe count, average rating, number of cooks). Your email is never shown. Unshare a recipe or clear your bio at any time in the app; other users can report or hide a chef page, and we may remove content that breaks our Terms. When you follow a chef, they may be told, with your first name and avatar, at most once a month per chef.

Kitchen friends. A kitchen friend sees your first name and avatar — never your email — and what you choose to toss to them. A tossed recipe arrives as a copy, even if the recipe is private in your kitchen; the friend can save that copy to their own account, and it stays with them if you later change or delete yours. People you have not become friends with cannot toss you anything. Someone holding an invite link you created sees your first name and avatar until the link is used or expires. Muting a friend stops their notifications; blocking someone ends the friendship, removes their tosses to you, stops them following you or seeing your chef page, and they are not told.

Household lists. Everyone on a shared household list sees and edits its items, sees who is on it and who has been invited, and sees who added or ticked each item. When you join, the items on your own list are added to it. Anyone holding a share link to a member’s grocery list sees the household list while that member belongs to it.

Legal, safety and business transfers

We may disclose information if required by law or legal process, to enforce our Terms, to protect the rights, safety and property of users, the public or us, or as part of a merger, acquisition, financing or sale of assets (in which case this policy will continue to apply to your information until it is changed).

• Ads appear only on the free tier and are served by Google AdMob. Rewarded ads grant credits when Google confirms completion. Subscribing or buying Remove Ads stops ads entirely.
• AdMob may use device identifiers and other data to serve, measure and (where permitted by your settings and applicable consent) personalise ads. Learn more and control this at policies.google.com/technologies/ads.
• App Tracking Transparency. Where iOS requires permission before an advertising identifier can be used for tracking, ads are non-personalised unless you grant that permission. You can change your choice at any time in Settings → Privacy & Security → Tracking, and limit ad personalisation in Settings → Privacy & Security → Apple Advertising.
• EEA/UK/Swiss users are shown a consent choice for advertising before personalised ads are served, and can revisit it in the app where offered.
• Serving ads through AdMob may be considered “sharing” or “targeted advertising” under some U.S. state laws; see Section 12 for how to opt out. We do not use ad data for any purpose other than showing and measuring ads in the app.
• We do not use third-party analytics SDKs, and our website sets no advertising or analytics cookies (Section 16).

• Camera and photo library are used only when you choose to scan or upload a photo. Only the photo you select is sent for processing.
• Microphone and speech recognition power hands-free cooking commands (“next,” “back,” “repeat,” “start timer”). Recognition is performed by Apple’s speech services on your device or, depending on your iOS settings and language, on Apple’s servers under Apple’s privacy terms. Audio is never sent to our servers or stored by us. Spoken steps are produced by your device’s text-to-speech.
• Apple Watch. The current cook session (recipe title, steps, current step and timers) is mirrored from your iPhone to your Watch over Apple’s Watch Connectivity and kept on the Watch for the complication. It does not pass through our servers.
• Widgets and Live Activities read your next planned meal, grocery count and active timers from storage shared between the app and its extensions on your device.
• Notifications for timers and meal reminders are scheduled locally on your device. Other notifications — tosses, kitchen-friend requests, follows, household invites and items sent from another of your devices — are sent by our servers through Apple’s push service or your browser’s, only if you allow them. You can turn them off in your device or browser settings at any time.
• Share extension. When you share a link to Recipe Wizard from another app, only that link is handed to the app for import.

• Account and kitchen content — for as long as your account exists.
• Scan photos — not stored by us; processed transiently by our AI provider (Section 3).
• Chef-portrait selfies — not stored by us; processed transiently by our AI providers (Section 3). Portraits you don’t pick are deleted when you pick one or leave the screen; the one you pick is kept as your profile photo until you change it or delete your account.
• Purchase records — for as long as needed to honour your benefits and to meet tax and accounting obligations (generally up to seven years).
• Server logs — typically up to 90 days, longer only if needed to investigate a security incident or abuse.
• Password-reset tokens — expire automatically within a short window.
• Tosses — deleted 30 days after they were sent (a recipe you saved from a toss is yours and stays in your account); follow notices are also deleted after 30 days.
• Kitchen-friend invite links — expire after 7 days or once used.
• Friendships, blocks and household lists — until you remove them, leave, or delete your account. A household list is deleted when its last member leaves; each person who leaves keeps a copy of it on their own account.
• Reports — kept while we review them and for as long as needed to keep the Service safe.
• Notification tokens — until you sign out on that device, turn notifications off, or the token stops working.
• Backups — deleted data may persist in encrypted backups for a limited period before being overwritten.

Deletion removes your profile, pantry, recipes, ratings, meal plans, grocery lists, collections, images and balances, and your kitchen friendships, requests, invite links, blocks, tosses you sent or received, follows and notification tokens. You leave any household list you were on; the items on it stay with its other members. We may keep minimal records where the law requires it (for example purchase records) and public recipes you shared may remain available in anonymised form unless you ask us to remove them. Deleting your account does not cancel an App Store subscription — cancel it with Apple first.

Depending on where you live, you may have the right to:

• access the personal information we hold about you and receive a copy in a portable format;
• correct inaccurate information (name, avatar and preferences can be changed in the app);
• delete your information (Section 10);
• object to or restrict certain processing, including processing based on legitimate interests;
• withdraw consent where processing is based on consent;
• opt out of the sale or sharing of personal information and of targeted advertising (Section 12); and
• complain to a supervisory authority — in the EEA, your national data-protection authority; in the UK, the Information Commissioner’s Office.

To exercise a right, email contact@recipe-wizard.com. We will verify your identity (usually by confirming control of the account email) and respond within the time the law allows — normally within 30 days. You may use an authorised agent where the law permits; we may ask the agent for proof of authority and may still verify with you directly. We will not discriminate against you for exercising your rights.

Residents of California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland and other states with comprehensive privacy laws have the rights described in Section 11, subject to those laws.

• Categories collected in the last 12 months: identifiers (name, email, account and device identifiers, IP address); customer records (purchase history from Apple); commercial information (plans, credits, usage); internet/network activity (app interactions, logs); social connections (kitchen friends, follows, household list membership) and what you send to them; audio-visual information (photos you submit for scanning, and a selfie you submit for an AI chef portrait, both processed transiently, plus the portrait you keep as your profile photo); inferences limited to your stated food preferences; and, where you provide them, health-related information such as allergies and dietary restrictions, which we use only to tailor recipes.
• Sources and purposes are described in Sections 2 and 4. We do not use or disclose sensitive personal information for purposes other than providing the Service you request.
• Sale / sharing / targeted advertising. We do not sell personal information. Serving ads through AdMob on the free tier may constitute “sharing” for cross-context behavioural advertising or “targeted advertising.” To opt out: decline tracking when iOS asks, turn off personalised ads in your device’s Settings, subscribe or buy Remove Ads (which stops ads entirely), or email us. We honour Global Privacy Control signals sent by browsers on our website; our website does not serve ads.
• Retention is described in Section 9. We do not knowingly sell or share the personal information of anyone under 16.
• California “Shine the Light.” We do not disclose personal information to third parties for their direct-marketing purposes.

We are based in the United States and our servers and providers process information there and in other countries. If you use the Service from the EEA, UK, Switzerland or elsewhere, your information is transferred to the United States. Where required, we rely on the European Commission’s Standard Contractual Clauses (and the UK Addendum or IDTA) with our providers, and on providers’ participation in the EU-U.S. Data Privacy Framework where available, to protect your information.

We protect information with encryption in transit (TLS), hashed passwords, signed purchase verification with Apple, access controls on our servers and databases, and least-privilege credentials for our providers. No system is perfectly secure; if we learn of a breach affecting your information we will notify you and the relevant authorities as the law requires. Help us by using a strong, unique password and keeping your device updated.

The Service is not directed to children under 13 (or under 16 where that is the age of digital consent), and we do not knowingly collect personal information from them. If you believe a child has provided us information, email contact@recipe-wizard.com and we will delete it.

recipe-wizard.com is a marketing site. It uses no advertising, analytics or tracking cookies and sets only what is strictly necessary for the site to function. The web app at recipe-wizard.app sets one cookie to keep you signed in (it cannot be read by page scripts) and keeps your preferences in your browser’s local storage; it uses no advertising or analytics cookies either. Our hosting provider records standard server logs (IP address, user agent, pages requested) for security and reliability, retained for a limited period. Links from the site to the App Store are subject to Apple’s privacy policy.

We may update this policy as the Service or the law changes. We will post the new version here with an updated “Last updated” date and, for material changes, notify you in the app or by email before they take effect. Your continued use after that date means the updated policy applies.

Astra Innovations LLC
Privacy requests: contact@recipe-wizard.com
Web: https://recipe-wizard.com