Privacy Policy

Last updated: April 30, 2026

This Privacy Policy describes how TastePapa ("we", "us", "our") collects, uses, and discloses information when you use the TastePapa mobile application and related services (the "Service").

1. Information We Collect

We collect the following categories of information:

• Account information. Name, email address, sign-in provider, and a unique account identifier.
• User content. Items you add to your fridge and pantry, your grocery list, saved recipes, collections, meal plan, prep guides, and Ask Papa conversation history.
• Imported content. Recipes you import from third-party sources (websites, Instagram, TikTok), including the parsed title, ingredients, instructions, and source link.
• Subscription information. Subscription status and entitlements managed by RevenueCat against your Apple App Store or Google Play purchase records.
• Diagnostic and usage data. Crash reports, device type, operating system version, app version, and aggregate usage metrics collected via Firebase Crashlytics and Firebase Analytics.
• Notifications data. Device push notification tokens and your alert preferences.

We do not collect precise location, contacts, or audio recordings. Voice input is transcribed by your device's operating system and only the resulting text is sent to the Service.

2. How We Use Information

We use the information we collect for the following purposes:

• To operate and maintain the Service, including syncing your data across devices.
• To provide AI-assisted features, including recipe generation, recipe import, recipe translation, and the Ask Papa assistant.
• To send notifications you have opted in to receive.
• To investigate and resolve technical issues and improve the Service.
• To process subscription billing and manage entitlements.
• To comply with applicable legal obligations.

3. AI Processing

Certain features rely on third-party artificial intelligence services, specifically Google Gemini and OpenAI. When you use these features, the relevant prompt and minimal context (such as the contents of your fridge for recipe suggestions) are transmitted to the AI provider for processing. We do not use your private content to train external AI models.

AI-generated output is provided for informational purposes only and may be inaccurate or incomplete. Nutritional values are estimates and do not constitute medical or dietary advice.

4. Disclosure of Information

We disclose information only to the service providers required to operate the Service:

• Google Firebase (authentication, database, hosting, push notifications, analytics, crash reporting).
• RevenueCat (subscription management).
• Google Gemini and OpenAI (AI processing).
• Apple App Store and Google Play (in-app purchases and subscription billing).

We do not sell or rent your personal information. We do not share your information with advertisers. We may disclose information when required by law, in response to valid legal process, or to protect our rights and the rights of other users.

5. Data Retention

We retain account and user content for as long as your account remains active. Upon account deletion, we remove your synced data within thirty (30) days. Limited records, including billing receipts and fraud-prevention logs, may be retained longer where required by law or applicable app store policies.

6. Your Rights and Choices

You may exercise the following rights through the app or by contacting us:

• Manage notification preferences in Settings > Notifications.
• Change your language preference in Settings > Language.
• Disable diagnostic data collection in Settings > Privacy & Data.
• Export your data in Settings > Privacy & Data > Export my data.
• Delete your account in Settings > Account > Delete account, or use the web deletion form.

7. Regional Rights

Depending on your jurisdiction, you may have additional rights under applicable data protection laws, including the European General Data Protection Regulation (GDPR), the United Kingdom GDPR, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), and the Brazilian General Data Protection Law (LGPD). These rights may include access, correction, deletion, portability, and objection to processing. To exercise these rights, contact us at the address below. We will respond within the timeframes required by applicable law.

8. Children

The Service is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we may delete it.

9. Security

We implement reasonable administrative, technical, and physical safeguards to protect information. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

10. International Transfers

Your information may be processed in countries other than your own, including the United States. Where required, we use appropriate safeguards for cross-border transfers in accordance with applicable law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the app or by email. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

12. Contact

For privacy questions or to exercise your rights, contact us at victor@tastepapa.com.