Privacy Policy

Last updated: May 8, 2026

Kitchen Companion ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile application and related services (collectively, the "Service").

1. Information We Collect

Account Information

When you create an account, we collect:

• Email address — used for account creation, authentication, and communication
• Display name — used to personalize your experience
• Authentication credentials — managed securely through Firebase Authentication (Google, Apple, or email/password sign-in)

Preferences and Usage Data

• Dietary preferences — restrictions, cuisine preferences, cooking skill level, and serving size preferences you provide during onboarding
• Meal plan interactions — meals you approve, regenerate, or mark as favorites
• Grocery list data — items added, checked off, or removed from your lists

Analytics Data

We use PostHog (hosted in the European Union) for product analytics to understand how the app is used and improve the experience. PostHog receives:

• Your Kitchen Companion user ID, email address, and authentication provider (so we can analyze behavior on a per-user basis and respond to data subject requests)
• Product events (e.g., meal plan generated, recipe viewed, grocery item checked, subscription started)
• Device type and operating system version

PostHog acts as a processor on our behalf under a signed Data Processing Addendum. Analytics data is hosted on PostHog's EU infrastructure (eu.posthog.com). You can disable analytics collection at any time from Profile → Privacy → "Help improve the app" inside the app, and you can request deletion of your analytics data using the contact information in Section 10.

Subscription Data

Subscription purchases are processed through Apple App Store or Google Play Store via RevenueCat. We do not collect or store your payment information (credit card numbers, billing address). We receive only:

• Subscription status (active, expired, trial)
• Purchase date and expiration date
• Product identifier (monthly or annual plan)

Push Notifications

If you opt in to push notifications, we collect your device push token to send you meal plan reminders, grocery day alerts, and app updates. You can disable notifications at any time in your device settings or within the app.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Generate personalized meal plans based on your dietary preferences
• Create and manage grocery lists from your meal plans
• Send push notifications you've opted into (meal reminders, grocery alerts)
• Improve the app experience through analytics
• Provide customer support
• Process and manage your subscription

3. How We Share Your Information

We do not sell your personal data. We share information only with the following sub-processors, who process data on our behalf under signed Data Processing Addenda:

• Firebase Authentication (Google LLC) — authentication — United States
• Firebase Cloud Messaging (Google LLC) — push notification delivery — United States
• Heroku (Salesforce, Inc.) — API hosting and PostgreSQL database (sub-sub-processor: Amazon Web Services) — United States
• PostHog Inc. — product analytics — European Union
• RevenueCat, Inc. — subscription management — United States
• Resend, Inc. — transactional email delivery — United States
• Expo / EAS (650 Industries, Inc.) — push notification token registration — United States

For users in the European Economic Area, the United Kingdom, and Switzerland, transfers to the United States rely on the EU-U.S. Data Privacy Framework, the UK Extension to the DPF, and the Swiss-U.S. DPF, or on Standard Contractual Clauses where DPF is unavailable.

We may also disclose information if required by law, regulation, or legal process.

4. Household Sharing

If you join or create a household, other members of your household will be able to see:

• Your display name
• Shared meal plans
• Shared grocery lists

Your email address, dietary preferences, and account settings are not visible to other household members.

5. Data Storage and Security

Your data is stored on secure servers hosted by Heroku (Salesforce) with PostgreSQL databases. We use industry-standard security measures including:

• HTTPS encryption for all data in transit
• JWT-based authentication for API access
• Firebase Authentication for identity management
• Encrypted database connections

Local app data (preferences, cached content) is stored on your device using encrypted MMKV storage.

6. Recipe Content

Kitchen Companion does not store recipe content from third-party websites. When you view a recipe, you are directed to the original creator's website. We respect content creators and do not scrape, copy, or redistribute their recipes.

7. Your Rights

You have the right to:

• Access your personal data by viewing your account settings
• Update your information through the app's profile settings
• Delete your account and all associated data at any time from the Account screen or by submitting a data deletion request
• Opt out of push notifications through your device settings or the app
• Request a copy of your data by emailing support@kitchencompanion.app

When you delete your account, all personal data is permanently removed from our servers within 30 days.

8. Children's Privacy

Kitchen Companion is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately at support@kitchencompanion.app.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through the app or by email. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or your data, please contact us:

• Email: support@kitchencompanion.app