Privacy Policy

Effective October 22, 2026

Your AI Kitchen ("we", "us") is a recipe box app operated by Your AI Kitchen at youraikitchen.com. This policy explains, in plain language, what we collect, why, who processes it, and how to delete it. Questions: support@youraikitchen.com.

What we collect

• Account info: your email address and the display name you choose. If you use a password, our sign-in provider (Supabase) stores only a secure hash; we never see or store your password itself.
• Your kitchen content: recipes, ingredients, steps, filing (course, cuisine, diet, tags), menus, shopping lists, who you share them with and your default sharing choice, recipe revision history, cached nutrition estimates, and any source or "Inspired by" links.
• Dish photos (Chef plan): if you add a photo to a recipe, we store the image file with that recipe until you replace it or delete the recipe.
• Groups and invites: group names, who is in each group, and the email addresses you invite.
• Billing info: if you subscribe, Stripe processes your payment. We receive and keep your Stripe customer and subscription IDs, your plan, subscription status and renewal or cancellation dates. We never receive or store your full card number.
• Technical data: sign-in sessions and AI connector access tokens; short-lived request counters used for rate limiting; and standard request logs kept by our host (such as IP address, browser type and time), used for security and fixing problems.

On your device

The web app stores your sign-in session in your browser's local storage so you stay signed in, plus a few display preferences (such as light or dark theme and menu view). We do not use advertising or tracking cookies. Signing out removes the session from that browser.

Sign in with Google or X

If you sign in with Google or X, we receive your email address, your name and profile picture as provided by that service, and an account identifier. We keep the email and identifier to sign you in and link that method to your account, and we may suggest your name as a display name. We never post on your behalf, never sell or share this data, and never use it for advertising.

Google: Your AI Kitchen's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Our use of X data follows the X Developer Policy.

How we use your information

Only to run the app: to sign you in, store and show your recipes, share what you choose with your group, compute nutrition, send the invite emails you ask for, bill your subscription, and keep the service secure. There are no ads, and we do not sell your data.

Who processes it

• Supabase stores your account, kitchen data and dish photos (United States) and handles sign-in and password-reset emails.
• Cloudflare hosts the app, protects it from abuse, and keeps request logs. Our sign-in page uses Cloudflare Turnstile, a security check that processes technical signals from your browser to tell people from bots.
• Stripe processes subscription payments and stores your payment details under its own privacy policy.
• Resend delivers the group invite emails you send; it receives the invitee's email address, the group name and the inviter's display name.
• Google and X, only if you choose to sign in with them.
• USDA FoodData Central, for nutrition estimates: we send ingredient names only, never personal information.
• When you ask us to read a recipe link or a photo URL, our server fetches that page or image; the site you link to sees a request from our server, not from you.

AI assistants you connect

If you connect an AI assistant (such as Claude, ChatGPT or Grok), it can read and change your recipes, menus and lists through our connector, only after you approve it and only within what you authorize. You can disconnect it at any time in the app. What that assistant does with information is governed by its provider's privacy policy.

Sharing

Your recipes are private unless you choose to share them with your group or specific members. We do not share your data with third parties except the processors listed above, or if required by law.

Keeping and deleting your data

Deleted recipes go to Trash and are removed permanently after 30 days (drafts after 7 days), or sooner if you empty Trash. Older recipe revisions beyond the most recent 50 are removed automatically.

Delete your account anytime from the Account page in the app: tap Delete account, type DELETE, and confirm with your password (or a fresh sign-in if you use Google or X). Your account is removed from the app immediately, including your recipes (with drafts, past versions and trash), photos, menus, shopping lists, categories, sharing settings, group memberships, AI connections and sign-in. Any subscription is canceled at the same time. If you own a group, it is closed: its members keep their own recipes, lose access to yours, and see a notice in the app. Copies in our database provider's backups are cleared as soon as practical; backups roll off automatically, so this happens within 30 days (currently about 7). Stripe, our payment processor, keeps billing records as the law requires. If you can't sign in, email support@youraikitchen.com from the address on your account and we will delete it for you.

Children

Your AI Kitchen is not intended for children under 13, and we do not knowingly collect information from them. If you believe a child under 13 has created an account, contact us and we will delete it.

Changes

If we change this policy, we will update it here and change the effective date at the top.