Privacy Policy

Information We Collect

Account information: when you create an account, we store your email address via Supabase Authentication.

Content you create: pantry items, shopping lists, meal plans, food ratings, dietary preferences, custom recipes, and your supplement list (name, dose, and timing of anything you choose to track) are stored under your account so they sync across your devices.

Nutrition and food logs: meals you log manually, by scanning a packaged food's barcode, by searching a food database, by photographing a meal, or by typing a short description of a meal are stored under your account, including the calories and macros associated with each entry.

Camera access: used to scan barcodes (pantry items, food logging, supplements) on-device, and to photograph a meal for AI-estimated macros. Barcode scans never leave your device as an image. A meal photo - or, if you use the "describe a meal" option instead, the text you type - is sent to our AI provider (see Third-Party Services) for analysis and is not stored by us afterward.

Microphone access: if you use hands-free voice commands in Cooking Mode, spoken commands are converted to text using your device's built-in speech recognition system. Depending on your device and settings, this may send a short audio clip over the network to Apple's or Google's speech recognition service to be transcribed - the same standard behavior as Siri or Google Assistant dictation elsewhere on your phone. We do not ourselves record, retain, or have access to this audio; it is used only to produce the text of your spoken command.

Health & Fitness Data

Body weight, body fat percentage, and body measurements (neck, shoulders, chest, arm, waist, abdomen, hip, thigh, calf) that you enter manually, that sync from a paired Bluetooth scale, or that you import from a CSV file you exported from another measurement app, are stored under your account and used to show your weigh-in history and trends, and to power features like adaptive calorie targets during a cutting phase and safe-rate-of-loss guidance.

Apple Health / Google Health Connect (optional, off by default): if you explicitly turn this on, we read your weight and body fat data (and, on iOS, waist circumference where available) from Apple Health or Google Health Connect so scales that sync there - even ones we don't otherwise support - work automatically. This is read-only: the app never writes anything back to Apple Health or Health Connect, and nothing is read from either until you turn the feature on in Settings. You can disconnect it at any time, which stops all further reading immediately.

Progress photos (optional): photos you choose to add are stored in a private location that only your account can access. They are never public, and are only ever viewed through short-lived, per-request links - not a permanent public URL.

All of the above is used only to show it back to you (history, trends, and the features listed above) and is never sold or shared with advertisers.

Household & Group Sharing

Households (optional): you can create or join a household using an invite code to share a shopping list and meal plan with family members. Anyone in the household can see and edit the shared list/plan, along with the display name you've set for yourself in that household. Leaving a household immediately stops your access to its shared data, and it stops appearing to other members.

Groups (optional): you can create or join a private group (e.g. a gym or running club) and invite people to it by email. Inviting someone checks whether that email address already has an account: if it does, they receive an in-app invite; if it doesn't, we send an invitation email to that address on your behalf (with links to download the app), and automatically connect the pending invite to their account if and when they sign up using that same email address. Once someone joins a group, other members can see their display name and role, and any recipes, shopping list items, or meal plan entries they choose to share into that group.

Group workout activity (optional, off by default, per group): you can separately choose to share a read-only weekly workout count (e.g. "2 workouts this week") with one specific group. This is an aggregate count only - your actual weight, body fat, workout plan contents, or any other health data described above is never shared with a group, regardless of this setting. You can turn this off for any group at any time, which removes your activity from that group's view immediately.

How We Use Your Information

Your data is used to provide the app's features: syncing your pantry, shopping list, meal plan, and nutrition/health tracking across devices, and personalizing recipe search results and calorie/macro targets to your dietary preferences, ratings, and logged history. We do not sell your data.

Third-Party Services

Recipe search uses external recipe databases (Spoonacular, Edamam, TheMealDB, Tasty, YMove) and image services (Pexels) - search terms and ingredient names may be sent to these providers to return results. Nutrition lookups may use the FatSecret API, USDA FoodData Central, or Open Food Facts (barcode product lookups). The Workout Plan feature also uses the YMove API to source exercises, including short instructional videos. Your account credentials are never shared with these services.

Subscriptions: if you purchase Premium, RevenueCat processes and manages your subscription status (which features you've unlocked), tied to your account. The App Store or Play Store handles your actual payment details (card number, etc.) directly - we never see or store that information ourselves.

AI meal analysis: if you photograph a meal to log it, or type a short description of it instead, that photo or text is sent to Anthropic's Claude API to estimate the food items and macros, and is not stored by us or, to our knowledge, retained by Anthropic beyond processing the request.

Apple Health / Google Health Connect: see Health & Fitness Data above - this integration is opt-in and read-only.

Sign in with Apple / Google: if you use these options, the respective provider authenticates you and shares your email address with us; we never see or store your Apple or Google password.

Crash reports: if enabled, technical crash/error data (not your personal content) may be sent to Sentry to help us fix bugs.

Product analytics: if enabled, we send app usage data (which screens and features you use) to PostHog, associated with your account's user ID and email so we can, for example, respond to a support request about your account. This does not include your pantry contents, recipes, health data, or other personal content you create.

Transactional email: password reset links, account confirmation links, and group invitation emails (see Household & Group Sharing above) are sent through Resend, our email delivery provider. This means the relevant email address - yours, for a password reset or confirmation, or an invited person's, for a group invite - is shared with Resend solely to deliver that email. Resend is not used for marketing and does not receive any other account data.

Data Storage & Security

Your data is stored in a Supabase (PostgreSQL) database with row-level security, meaning your account can only access your own data. Data in transit is encrypted (HTTPS/TLS). Progress photos are stored in a private file bucket with the same per-account access restriction, never a public URL.

Your Choices

You can edit or delete your pantry items, shopping list, ratings, custom recipes, individual weigh-ins, body measurements, progress photos, supplements, and nutrition log entries at any time from within the app. If you import measurements from a CSV file, the file is read on your device and only the measurement values and their dates are saved to your account - the file itself is not uploaded or kept. You can turn Apple Health / Google Health Connect syncing off at any time from Settings, which stops it immediately. You can leave any household or group at any time, which immediately stops your shared data from being visible to its other members, and turn off group workout-activity sharing per group at any time. You can permanently delete your account and all associated data, including all health and nutrition data described above, from Profile > Account Settings.

Children's Privacy

This app is not directed at children under 13, and we do not knowingly collect information from children under 13.

Changes to This Policy

We may update this policy as the app changes. Continued use of the app after an update means you accept the revised policy.

Contact Us

Questions about this policy or your data can be sent to support@seasonalchefapp.com.