Privacy Policy

1. Introduction

Culinair (“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains what personal data we collect, how we use it, and your rights when you use Culinair at culinair.app.

2. Data We Collect

We collect the following categories of personal data:

• Account data: Email address and hashed password (stored and managed by Supabase).
• Recipe data: URLs you submit, extracted recipe content (ingredients, steps, macros), and your saved recipe library.
• Extraction history: Timestamps and counts of extractions for usage tracking and plan enforcement.
• Subscription & payment data: Subscription plan, billing period, and Stripe customer ID. We do not store card numbers - payment details are held exclusively by Stripe.
• Usage analytics: Aggregated, anonymous page-view data via Plausible Analytics (no personal data, no cookies).

3. How We Use Your Data

• To create and manage your account and authenticate you securely.
• To extract recipe data from the URLs you submit.
• To store and display your saved recipe library.
• To enforce plan limits (free tier, trial, Pro subscription).
• To process payments and manage your subscription via Stripe.
• To send transactional emails (email verification, password reset).
• To improve the service using anonymised, aggregated analytics.

We do not sell your personal data. We do not use it for advertising.

4. Third-Party Services

Culinair uses the following third-party services. Each processes data only to the extent necessary for its function:

5. Cookies

We use only essential cookies - specifically the Supabase authentication session cookie, which is required to keep you logged in. We do not use advertising or tracking cookies. Plausible Analytics is entirely cookie-free.

6. Data Retention

Your account data, recipes, and extraction history are retained while your account is active. If you delete your account, your personal data is permanently removed within 30 days, except where retention is required by law (e.g., billing records). Anonymised analytics data is retained indefinitely as it contains no personal information.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: request a copy of the data we hold about you.
• Correction: request correction of inaccurate data.
• Deletion: request deletion of your account and associated data.
• Portability: request your data in a machine-readable format.
• Objection: object to processing based on legitimate interest.

You can delete your account through your account settings page. For other requests, contact us at support@culinair.app. We will respond within 30 days.

8. Legal Basis (GDPR)

If you are located in the European Economic Area (EEA), our lawful basis for processing your personal data is:

• Contract performance: processing your account, recipes, and subscription is necessary to provide the service you signed up for.
• Legitimate interest: aggregated, anonymised analytics to improve the product.
• Legal obligation: retaining billing records as required by law.

9. Data Location

Your account and recipe data is stored on Supabase infrastructure in the EU. Payment data is processed by Stripe in the US. AI processing (Whisper, Claude) occurs in the US via OpenRouter. We rely on standard contractual clauses where required for cross-border data transfers.

10. Children

Culinair is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or via a notice in the application. Continued use of Culinair after the effective date of the updated policy constitutes acceptance of the changes.

12. Contact

Questions or concerns about this Privacy Policy? Contact us at support@culinair.app.