Privacy Policy

When you save or generate a recipe, we store the text you submitted and the rewritten output, along with anything you build from it: your library, meal plan, grocery list, parties, and kitchen profile. Each recipe is filed under a random ID, and that ID is what makes its link work. Recipe links are unlisted but public: anyone who has one can view that recipe, so only share a link with people you'd show the recipe to. We ask search engines not to index them.

If you tell us what missed when you swap a suggested dinner, we keep that note and a short summary we work out from it, and we use them to fit later suggestions to you. Both live under “Your taste profile” in Kitchen Settings, where you can read them, delete them, or switch the learning off. We also keep short-lived operational records that make the app work, such as background job status and the counters behind rate limits and the free allowance.

To read and rewrite your recipe, we send its text, and any photo or PDF you import, to Anthropic's API (the company behind the Claude AI models). Anthropic processes it to return a result, under its own privacy policy, and doesn't use what we send to train its models. If you import from a link, we fetch that page to read the recipe on it. If you email a recipe in, it travels through our email provider on the way (named below).

A small number of companies each handle a piece of your data so the app can work. Each is covered by its own privacy policy, and the list can change as the app changes. Here is all of them, and what each one holds:

• Clerk runs sign-in. It holds your email address, your name, and how you sign in.
• Neon hosts our database. It holds the things you make: recipes, Cook Plans, your meal plan, grocery list, kitchen profile, taste notes, and parties.
• Vercel hosts the app itself and, like most hosts, keeps standard server logs, which include IP addresses.
• Upstash holds short-lived working data — the status of background jobs and the counters behind rate limits and the free allowance — which expires on its own.
• Anthropic is the AI. Recipe text, photos and PDFs you import go there to be read and rewritten, as described above.
• Stripe handles payments. Card details are entered on Stripe's own checkout page; we never see or store your card number. What we keep is what tells us whether your subscription is live.
• PostHog is our product analytics. It records what happens in the app and, when you're signed in, ties that to your account ID, email and name.
• Postmark carries email: recipes you email in to your import address, and the emails we send you, pass through it.
• Cloudflare runs the quick are-you-a-robot check on the sign-in screen, and sees the ordinary connection details any website sees.
• Jina is a fallback reader for recipe imports. When a recipe website refuses our server's request, the page is fetched once through Jina's service instead, so your import still works. Jina sees the address of the recipe page, nothing about you.
• Impact is the affiliate network behind the store links on our homepage. If you tap a link to a store like Walmart, it records the click so the store can credit us for sending you. It runs on the homepage only, not inside the app.

Our servers and providers also keep standard logs that include IP addresses, which we use to keep the service running, investigate problems and prevent abuse.

Signing in sets the cookies that keep you signed in; the app doesn't work without them. Our analytics runs through our own web address rather than a third-party tracker's. There are no advertising cookies here and no ad network. The one exception to “no tracking” is the store links above: if you tap one, the affiliate network uses a cookie so a purchase you make at the store can be credited to us.

You can delete your account in the app: open the menu, tap “Manage account”, and delete your account there. If you'd rather we did it, or you can't sign in, email hello@enoughcooks.com from the address on your account and we'll do it for you.

Deleting your account deletes your sign-in record and the data attached to it: your recipes and Cook Plans, meal plan, grocery list, kitchen profile, taste notes, sprite collection, and any parties you planned, including their menus and your host notes. Links you've already shared stop working. It can't be undone, so keep a copy of anything you want first.

Some things survive on purpose: billing records, because payment records have to be kept for accounting; a minimal marker that the account was deleted, with the email and name removed; the usage counters behind the free allowance and our rate limits, which hold only counts — no recipes, no names — and are kept so that deleting an account can't be used to reset them; and your seat in someone else's plan, which is unlinked rather than deleted. Copies may also remain for a while in routine backups and in our providers' systems.

We don't sell your data. We don't show ads. We don't track you across other apps or websites; the closest thing to it is the store-link click counting on the homepage, described above.

We can update this policy as the app changes. The current version is the one on this page, and a change takes effect when it's posted.

Questions about any of this? Email hello@enoughcooks.com.