Privacy Policy

This Privacy Policy explains how LetsCookIt ("we", "us", "our") collects, uses, protects, and shares your information when you use the LetsCookIt mobile app and related services. By using LetsCookIt, you agree to the practices described below.

1. Information We Collect

We collect information you provide directly to us, including:

• Account information: email address, date of birth, username, display name, profile picture, and bio.
• Authentication data: your password, stored only in encrypted (hashed) form. We never have access to your plain-text password.
• Content you create: recipes (titles, ingredients, steps, photos, tags, cook/prep times), comments, likes, bookmarks, follows, and reports.
• Usage data: how you interact with the app, used to improve features and stability.
• Device data: push notification tokens for the devices you sign in on, so we can deliver notifications you've opted into.

2. Device Permissions

LetsCookIt requests the following device permissions:

• Camera — used solely so you can take photos for recipes and your profile picture. We do not capture, record, or store photos without your explicit action.
• Photo Library — accessed only when you choose to select a photo for a recipe or profile picture. We do not access or store any photos beyond what you select.
• Notifications — used to send push notifications about activity on your account (likes, comments, follows, and cooking timers). You can manage or disable notifications at any time in the app settings or your device settings.

No permission data is shared with third parties or used for advertising purposes.

3. Personal Information We Protect

The personal information we treat as private and protect includes:

• Your email address (used for authentication and account recovery).
• Your password (stored only as a salted hash — we never see it in plain text).
• Your date of birth (collected during registration for age verification and legal compliance, stored securely, and only accessible to you and authorized personnel when required for legal purposes).
• Any private account settings you configure (e.g., a private profile).

Your public information — username, display name, profile picture, bio, and recipes you post publicly — is visible to other users by design.

4. How We Protect Your Information

We protect your personal information through:

• Secure authentication via Supabase (industry-standard auth provider).
• Encrypted password storage — your password is hashed and never stored in plain text.
• Secure HTTPS connections for all data transmission between the app and our servers.
• Row Level Security (RLS) policies in our database, ensuring users can only access and modify their own data.
• Regular security audits of our database policies.

5. How We Secure Your Information

Your data is secured using:

• Supabase's enterprise-grade infrastructure with automatic backups.
• A PostgreSQL database with Row Level Security enforced at the database level.
• Secure cloud storage for images with access controls.
• Session-based authentication with automatic token refresh.
• Rate limiting to prevent abuse and protect against automated attacks.

6. How We Use Your Information

We use your information to:

• Provide, operate, and maintain LetsCookIt.
• Personalize your experience (e.g., recommendations, your activity feed).
• Send service-related communications, including notifications you've opted into.
• Improve features, fix bugs, and develop new functionality.
• Detect, investigate, and prevent fraud, abuse, or violations of our Terms.

7. Information Sharing

We do not sell your personal information.

• Other users: your public profile and the recipes you post publicly are visible to other users of the app.
• Service providers: we share data with vendors who help us operate the app, such as Supabase (database hosting, authentication, file storage). These providers are contractually required to protect your data and use it only to provide services to us.
• Legal compliance: we may disclose information if required by law, subpoena, or other legal process, or to protect the rights, property, or safety of our users or others.

8. Data Security

We implement administrative, technical, and physical safeguards to protect your information. However, no method of transmission over the internet or electronic storage is 100% secure. We encourage you to use a strong, unique password for your account and to keep your sign-in credentials confidential.

If we become aware of a security incident affecting your personal information, we will notify you in accordance with applicable law.

9. Data Deletion

You can delete your account and personal data at any time from inside the app. When you delete your account, all your personal data is permanently removed from our systems — including your profile, recipes, likes, bookmarks, follows, blocks, notifications, and push tokens. This process is irreversible.

Recipes you saved from other users may also disappear if those users delete their accounts or recipes.

For step-by-step instructions, see:

• Delete Your Account
• Delete Your Data

10. Data Retention During App Updates

As LetsCookIt evolves, we may add, update, or remove features. While we make every effort to preserve your data during these changes, we cannot guarantee that all information will be retained during major updates or changes to the app's structure.

11. Your Rights

You have the right to:

• Access your information through the app.
• Update or correct your profile information at any time via Profile → Edit Profile.
• Delete your account and personal data via Profile → Settings → Delete Account.
• Export your data as a JSON file via Profile → Privacy Settings → Download My Data.
• Withdraw consent for non-essential processing by adjusting your settings or deleting your account.
• Depending on your jurisdiction, you may also have additional rights under laws such as GDPR or CCPA, including the right to lodge a complaint with a data protection authority.

To exercise any rights that aren't available in-app, email us at support@letscookit.app.

12. Children's Privacy

LetsCookIt is not intended for children under 13. We do not knowingly collect personal information from children under 13. During registration we ask for date of birth to verify age. If we learn that we have collected information from a child under 13, we will delete it promptly. If you believe a child under 13 has provided us with personal information, please contact us at support@letscookit.app.

13. International Users

LetsCookIt is operated using infrastructure provided by Supabase. By using the app, you understand that your information may be processed and stored in countries other than your own, which may have different data protection laws.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you in-app. Your continued use of LetsCookIt after changes take effect means you accept the updated policy.

15. Contact Us

For privacy-related questions or requests, contact us at:

support@letscookit.app

You can also reach us through the Contact Us option in the app menu.