Privacy Policy · Recipulse

01What we collect

Account details: your email address and, if you sign in with Apple or Google, the name and email address they share with us. If you choose Apple’s “Hide My Email”, we only receive a relay address. Email/password accounts store a hashed password, never the password itself.
Things you create in the app: the requests and ingredient lists you enter, recipes you generate or save, favorites, meal plans and the preferences you set for them (for example dietary choices or ingredients you avoid).
Subscription status: whether you have an active subscription, the plan and its renewal dates. Payments are processed by Apple; we never see your card details.
Device and usage data: app version, device model, OS version, language, approximate country, which screens are used, and crash reports. This is used to keep the app working and to understand which parts are useful.
Notification token: if you allow push notifications, a token that lets us send them to your device.
Website waitlist: if you join the Android waitlist, your email address, the site language you used, the sign-up time and a one-way hash of your IP address (used only to stop abuse).

We don’t ask for your location, contacts, photos or health records, and the app does not use your camera or microphone without you choosing a feature that needs it.

02How we use it

To provide the service: create your account, generate and store recipes and meal plans, and sync them across sessions.
To handle subscriptions and unlock the features you pay for.
To fix bugs, prevent abuse and keep the service secure.
To understand, in aggregate, how the app is used so we can improve it.
To send notifications you turned on, and to answer you when you contact us.
To send a single email when Recipulse is available on Google Play, if you joined the waitlist.

We rely on the following legal bases: performing our contract with you (running the app and your subscription), our legitimate interests (security, analytics, improving the product) and your consent (push notifications, the Android waitlist). You can withdraw consent at any time.

03AI-generated content

When you ask Recipulse to create a recipe, meal plan or image, the text of your request and the relevant preferences are sent to Google’s Gemini API to produce the result. We don’t send your name or email address with these requests. Please don’t include personal information in what you type.

05International transfers

Some of the providers above store or process data outside your country, including in the European Union and the United States. Where required, we rely on appropriate safeguards such as standard contractual clauses, and, for users in Türkiye, on the transfer mechanisms set out in the Personal Data Protection Law No. 6698 (KVKK).

06How long we keep it

Account data and the content you create: for as long as your account exists. When you delete your account, your recipes, favorites and meal plans are permanently deleted from our active systems; copies in backups are overwritten in the normal backup cycle.
Crash reports and analytics: kept for the default retention periods of our providers, then deleted or aggregated.
Android waitlist: until we send the launch email, after which the list is deleted. You can ask to be removed earlier.
Support emails: as long as needed to resolve your request, and then for a reasonable period in case you follow up.

07Your rights

Depending on where you live (including under the GDPR and KVKK), you can ask us to:

tell you whether we process your data and give you a copy of it;
correct inaccurate data;
delete your data — you can also do this yourself under Profile → Delete Account;
restrict or object to certain processing, including analytics;
give you your data in a portable format;
withdraw any consent you gave.

Email [email protected] from the address linked to your account. We’ll answer within 30 days. You also have the right to complain to your local data protection authority — in Türkiye, the Personal Data Protection Authority (KVKK).

08Security

Data is encrypted in transit, passwords are stored as salted hashes and access to production systems is limited. No system is perfectly secure, but we work to protect your data and will notify you and the relevant authorities of a breach where the law requires it.

09Children

Recipulse is not directed at children under 13, and we don’t knowingly collect their data. If you believe a child has created an account, contact us and we’ll delete it.

10This website

recipulse.com doesn’t use advertising or tracking cookies. It may set a small cookie that remembers your language. Our host, Railway, processes standard request data (such as IP address and browser type) to deliver the site and protect it from attacks.

11Changes to this policy

If we make meaningful changes, we’ll update the date at the top of this page and, where appropriate, tell you in the app before they take effect.