Privacy Policy

1. Introduction

Welcome to Cook or Delete ("we," "us," "our"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile applications, and related services (collectively, the "Service").

This Privacy Policy applies to all users of the Service, regardless of location. For users in the European Union, we comply with the General Data Protection Regulation (GDPR). For users in other jurisdictions, we comply with applicable local privacy laws.

Please read this Privacy Policy carefully. By using the Service, you agree to the collection and use of your information in accordance with this policy. If you do not agree with this policy, please do not use the Service.

2. Information We Collect

We collect several types of information from and about users of our Service:

2.1 Information You Provide Directly

We collect information that you voluntarily provide when you:

• Create an account: Email address, username, password, and optional profile information
• Use the Service: Recipe URLs, saved recipes, cooking preferences, dietary restrictions, notes, and grocery lists
• Communicate with us: Contact information and message content when you reach out for support or feedback
• Make purchases: Billing information and payment details (processed securely through third-party payment processors)
• Participate in surveys or promotions: Responses and feedback you provide

2.2 Information Collected Automatically

When you access the Service, we automatically collect certain information:

• Device information: Device type, operating system, browser type and version, unique device identifiers, mobile network information
• Usage data: Pages visited, features used, time spent on pages, click patterns, recipes extracted, recipes cooked vs. deleted
• Log data: IP address, access times, referring/exit pages, error logs
• Location data: Approximate location based on IP address (precise location only with your explicit consent)
• Cookies and tracking technologies: Information collected through cookies, web beacons, and similar technologies (see Section 9 for details)

2.3 Information from Third Parties

We may receive information about you from third-party sources:

• Social media platforms: When you use our recipe extraction feature with TikTok, Instagram, or YouTube links, we may collect publicly available information from these platforms
• Authentication services: If you sign in using third-party services (e.g., Google, Apple Sign-In), we receive basic profile information
• Analytics providers: Aggregated usage statistics and demographic information
• Payment processors: Transaction confirmation and payment status information

2.4 Recipe Extraction Data

When you use our AI-powered recipe extraction feature, we collect:

• Video URLs submitted for extraction
• Extracted recipe content (title, ingredients, instructions, nutrition information)
• Platform metadata (source platform, creator information if publicly available)
• Extraction quality metrics and confidence scores

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 To Provide and Maintain the Service

• Create and manage your account
• Process recipe extractions and generate grocery lists
• Enable the "cook or delete" forcing function and track your cooking habits
• Synchronize data across your devices
• Provide customer support and respond to your inquiries
• Process payments and manage subscriptions

3.2 To Improve and Optimize the Service

• Analyze usage patterns to understand how users interact with the Service
• Improve our AI recipe extraction algorithms and accuracy
• Develop new features and functionality
• Conduct research and analytics to enhance user experience
• Test new features and troubleshoot issues

3.3 To Communicate with You

• Send transactional emails (account confirmations, password resets, payment receipts)
• Provide service announcements and updates
• Send weekly reminders for the "cook or delete" decision cycle
• Deliver push notifications (if enabled) for recipe reminders and cooking deadlines
• Send marketing communications (with your consent, where required)
• Request feedback and conduct surveys

3.4 For Security and Legal Compliance

• Detect, prevent, and address fraud, abuse, and security threats
• Enforce our Terms of Service and other policies
• Comply with legal obligations and respond to lawful requests
• Protect the rights, property, and safety of Cook or Delete, our users, and others
• Resolve disputes and enforce agreements

3.5 With Your Consent

We may use your information for other purposes with your explicit consent, such as:

• Personalized recommendations based on your cooking history
• Location-based features (e.g., local grocery store integration)
• Sharing your cooking achievements on social media (only if you opt-in)

4. Legal Basis for Processing (GDPR)

For users in the European Union, we process your personal data based on the following legal grounds:

• Contractual necessity: Processing necessary to provide the Service you've requested (account management, recipe extraction, subscription services)
• Legitimate interests: Processing necessary for our legitimate business interests, such as improving the Service, fraud prevention, and security (balanced against your rights)
• Consent: Where you have given explicit consent for specific processing activities (marketing communications, location data, social sharing)
• Legal obligations: Where processing is necessary to comply with legal requirements

You have the right to withdraw consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

5. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

5.1 Service Providers

We share information with third-party service providers who perform services on our behalf:

• Cloud hosting: Amazon Web Services (AWS) or similar providers for data storage and infrastructure
• Payment processing: Stripe, PayPal, or other payment processors (they receive only payment-related information)
• Analytics: Google Analytics or similar services for usage analysis (anonymized data when possible)
• Customer support: Helpdesk and communication platforms
• Email delivery: Email service providers for transactional and marketing communications
• AI services: Third-party AI and machine learning providers for recipe extraction

These providers are bound by contractual obligations to keep your information confidential and use it only for the purposes we specify.

5.2 Business Transfers

If Cook or Delete is involved in a merger, acquisition, asset sale, bankruptcy, or other business transaction, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.

5.3 Legal Requirements and Safety

We may disclose your information if required to do so by law or in response to:

• Valid legal processes (subpoenas, court orders, search warrants)
• Requests from law enforcement or government authorities
• Situations involving potential threats to safety or security
• Protection of our rights, property, or safety
• Investigation of fraud or violations of our Terms of Service

5.4 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you. For example, we may share statistics about recipe extraction usage or cooking trends with partners or the public.

5.5 With Your Consent

We may share your information with third parties when you explicitly consent to such sharing, such as when you choose to share your cooking achievements on social media.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

6.1 Active Accounts

While your account is active, we retain your account information, saved recipes, and usage data to provide the Service.

6.2 Deleted Accounts

When you delete your account:

• Your account and profile information are deleted within 30 days
• Saved recipes and personal data are permanently deleted within 90 days
• Backup copies may be retained for up to 180 days for disaster recovery purposes
• Some information may be retained longer if required by law (e.g., payment records for tax compliance)
• Anonymized usage data may be retained indefinitely for analytics purposes

6.3 Inactive Accounts

Accounts inactive for more than 3 years may be automatically deleted after notice is sent to your registered email address.

6.4 Legal and Compliance

We may retain certain information for longer periods if necessary for legal compliance, dispute resolution, or enforcement of our agreements.

7. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

7.1 Access and Portability

• Right to access: Request a copy of the personal information we hold about you
• Right to data portability: Receive your data in a structured, machine-readable format and transfer it to another service (GDPR)

7.2 Correction and Deletion

• Right to rectification: Request correction of inaccurate or incomplete personal data
• Right to erasure ("right to be forgotten"): Request deletion of your personal data (subject to legal obligations)

7.3 Restriction and Objection

• Right to restriction: Request that we limit the processing of your personal data in certain circumstances
• Right to object: Object to processing based on legitimate interests or for direct marketing purposes

7.4 Consent Withdrawal

• Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time

7.5 Automated Decision-Making

• Right to human review: Request human review of decisions made solely by automated processing (GDPR)

7.6 How to Exercise Your Rights

To exercise any of these rights:

• Access your account settings to update or delete information
• Email us at privacy@cookordelete.com with your request
• Use the data export feature in your account settings (when available)

We will respond to your request within 30 days (or as required by applicable law). We may need to verify your identity before processing your request.

7.7 Right to Complain

If you are in the European Union and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection authority.

8. Data Security

We take the security of your personal information seriously and implement appropriate technical and organizational measures to protect it:

8.1 Technical Safeguards

• Encryption: Data in transit is protected using TLS/SSL encryption. Sensitive data at rest is encrypted using industry-standard encryption algorithms
• Access controls: Strict access controls limit who can access your data internally
• Authentication: Secure password hashing and optional two-factor authentication for account access
• Infrastructure security: Regular security audits, vulnerability scanning, and penetration testing
• Monitoring: Continuous monitoring for suspicious activity and security threats

8.2 Organizational Safeguards

• Employee training on data protection and security best practices
• Confidentiality agreements with employees and contractors
• Incident response procedures for data breaches
• Regular review and update of security policies

8.3 Your Responsibility

You are responsible for:

• Maintaining the confidentiality of your account credentials
• Using a strong, unique password
• Notifying us immediately of any unauthorized access
• Keeping your contact information up to date

8.4 Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you and relevant authorities as required by applicable law, typically within 72 hours of becoming aware of the breach.

8.5 Limitations

While we strive to protect your information, no security system is impenetrable. We cannot guarantee the absolute security of your data. You use the Service at your own risk.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and store information about your use of the Service.

9.1 What Are Cookies?

Cookies are small text files stored on your device that help us remember your preferences and understand how you use the Service.

9.2 Types of Cookies We Use

• Essential cookies: Required for the Service to function (e.g., session management, authentication)
• Functional cookies: Remember your preferences and settings
• Analytics cookies: Help us understand usage patterns and improve the Service
• Marketing cookies: Used to deliver relevant advertisements (with your consent)

9.3 Third-Party Cookies

We may allow third-party services to set cookies for:

• Google Analytics for usage analysis
• Payment processors for transaction processing
• Social media platforms for sharing features
• Advertising networks for targeted ads (if applicable)

9.4 Managing Cookies

You can control cookies through:

• Your browser settings (most browsers allow you to refuse or delete cookies)
• Our cookie consent banner (where required)
• Privacy settings in your account

Note that disabling certain cookies may affect the functionality of the Service.

9.5 Do Not Track

Some browsers include a "Do Not Track" feature. Currently, there is no industry standard for how to respond to these signals, so we do not currently respond to Do Not Track browser signals.

10. International Data Transfers

Cook or Delete is based in Germany. Your information may be transferred to, stored, and processed in countries other than your own, including countries that may have different data protection laws.

10.1 EU Users

For users in the European Economic Area (EEA), we ensure that international transfers comply with GDPR requirements:

• Transfers to countries with adequacy decisions from the European Commission
• Use of Standard Contractual Clauses (SCCs) approved by the European Commission
• Other appropriate safeguards as required by applicable law

10.2 Data Processing Locations

Your data may be processed in:

• European Union (primary data storage)
• United States (cloud infrastructure, third-party services)
• Other locations where our service providers operate

By using the Service, you consent to the transfer of your information to these locations.

11. Children's Privacy

The Service is not intended for children under the age of 16 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@cookordelete.com. We will take steps to delete such information from our systems.

If we become aware that we have collected personal information from a child without parental consent, we will take immediate steps to delete that information.

12. Third-Party Services and Links

The Service may contain links to third-party websites, applications, or services that are not operated by us:

12.1 Social Media Platforms

When you use our recipe extraction feature with links from TikTok, Instagram, or YouTube, you interact with those platforms' services. We are not responsible for their privacy practices. Please review their respective privacy policies:

• TikTok Privacy Policy
• Instagram Privacy Policy
• YouTube Privacy Policy

12.2 Payment Processors

Payment information is collected and processed directly by third-party payment processors (such as Stripe). We do not store full credit card numbers on our servers.

12.3 Other Third-Party Links

We are not responsible for the privacy practices of third-party websites or services. We encourage you to read their privacy policies before providing any personal information.

13. Marketing Communications

We may send you marketing communications about our Service, new features, promotions, and related content.

13.1 Your Choices

You can opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Adjusting your communication preferences in your account settings
• Contacting us at privacy@cookordelete.com

13.2 Transactional Communications

Even if you opt out of marketing communications, we may still send you transactional or Service-related messages (e.g., account notifications, password resets, payment receipts) that are necessary for the operation of your account.

13.3 Push Notifications

If you use our mobile applications, you can control push notifications through your device settings or app preferences.

14. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

14.1 Right to Know

You have the right to request information about:

• Categories of personal information we collect
• Categories of sources from which we collect personal information
• Business or commercial purposes for collecting personal information
• Categories of third parties with whom we share personal information
• Specific pieces of personal information we have collected about you

14.2 Right to Delete

You have the right to request deletion of your personal information, subject to certain exceptions.

14.3 Right to Opt-Out

We do not sell personal information as defined by the CCPA. If our practices change, we will update this policy and provide an opt-out mechanism.

14.4 Right to Non-Discrimination

We will not discriminate against you for exercising your CCPA rights.

14.5 Authorized Agent

You may designate an authorized agent to make requests on your behalf. We may require proof of authorization.

14.6 Shine the Light

California residents may request information about our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, contact us at privacy@cookordelete.com.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

15.1 Notification of Changes

When we make material changes to this Privacy Policy, we will:

• Update the "Last updated" date at the top of this policy
• Notify you via email (for registered users)
• Display a prominent notice on the Service
• Request your consent where required by law

15.2 Your Acceptance

Your continued use of the Service after changes to this Privacy Policy constitutes your acceptance of the updated policy. If you do not agree with the changes, please stop using the Service and contact us to delete your account.

15.3 Review Regularly

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

General Inquiries

Email: privacy@cookordelete.com
Website: Contact form at cookordelete.com

Data Protection Officer (for GDPR inquiries)

Email: dpo@cookordelete.com

Mailing Address

Cook or Delete
Privacy Department
Mainz, Rheinland-Pfalz
Germany

Response Time

We aim to respond to all privacy-related inquiries within 30 days (or as required by applicable law).

17. Additional Information for Specific Jurisdictions

17.1 European Union Users

Our Data Protection Officer can be contacted at dpo@cookordelete.com for questions about GDPR compliance.

You have the right to lodge a complaint with your local supervisory authority if you believe we have not complied with applicable data protection laws.

17.2 United Kingdom Users

We comply with the UK GDPR and Data Protection Act 2018. You have the same rights as EU users. The UK Information Commissioner's Office (ICO) is the supervisory authority.

17.3 Swiss Users

We comply with the Swiss Federal Act on Data Protection (FADP). You have similar rights to EU users. The Swiss Federal Data Protection and Information Commissioner (FDPIC) is the supervisory authority.

17.4 Brazil Users

We comply with the Lei Geral de Proteção de Dados (LGPD). You have rights to access, correction, deletion, portability, and other protections under Brazilian law.

17.5 Other Jurisdictions

We strive to comply with applicable data protection laws in all jurisdictions where we operate. If you have questions about your specific rights, please contact us.

18. Acknowledgment and Consent

BY USING THE SERVICE, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THIS PRIVACY POLICY AND AGREE TO THE COLLECTION, USE, AND DISCLOSURE OF YOUR INFORMATION AS DESCRIBED HEREIN.

Where required by law, we will obtain your explicit consent for specific processing activities, such as marketing communications or the use of sensitive personal information.