Privacy Policy

1. Introduction

RecipeBud (“we”, “our”, or “us”) operates the RecipeBud mobile application (the “App”). This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use the App, and describes your rights regarding that information.

By creating an account or using the App, you agree to this Privacy Policy. If you do not agree, please do not use the App.

2. Who We Are

RecipeBud is an independent application for creating, organizing, and sharing recipes. For privacy inquiries, you can contact us at:

• Email: contact@elveontech.com
• Website: elveontech.com

3. Information We Collect

3.1 Information You Provide Directly

3.2 Information Collected Automatically

3.3 Information Generated by Your Use of the App

4. Device Permissions We Request

The App requests the following device permissions. You are always prompted before a permission is granted, and you can revoke permissions at any time through your device settings.

Denying a permission will disable the relevant feature but will not prevent you from using the rest of the App.

5. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Provide, operate, and maintain the App's features
• Enable social features (following, liking, bookmarking)
• Process and fulfill in-app purchases and subscriptions via RevenueCat
• Send password reset emails when you request them
• Generate a default avatar image using the DiceBear service (based on your username) if you have not set a profile picture
• Improve app performance through local caching
• Operate AI-assisted recipe import and creation features (via OpenAI, processed server-side)
• Perform image-to-text (OCR) conversion for recipe imports (via Google Cloud Vision, processed server-side)
• Enable video-based recipe imports (via YouTube Data API, processed server-side)

We do not use your data for advertising, behavioural profiling, or sell your data to third parties.

6. Third-Party Services

To provide the App's functionality, we share certain data with the following trusted third parties. Each operates under its own privacy policy.

Server-side processing note: OpenAI, Google Cloud Vision, and YouTube API calls are made from our secure server-side Edge Functions. Your raw data is never sent directly from your device to these services.

7. Data Storage and Security

• Your account data, recipes, media, social graph, and engagement data are stored on Supabase servers hosted in the European Union (or the region configured for our Supabase project).
• Your authentication session is stored locally on your device using expo-secure-store, which uses the platform's secure keychain/keystore.
• Your preferences and profile cache are stored locally in AsyncStorage on your device.
• Uploaded images and videos are stored in Supabase Storage. Temporary video import files are automatically deleted after processing.
• We use Row-Level Security (RLS) policies on our database to ensure users can only access data they are authorised to view.
• We take reasonable technical and organisational measures to protect your personal data. However, no method of transmission over the internet or electronic storage is 100% secure.

8. Data Retention

• Your account data is retained for as long as your account is active.
• If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal obligations.
• Locally cached data is cleared from your device when you log out.

9. Public Content

Recipes you mark as public are visible to other users and may be indexed or displayed within the App. Your username, profile picture, bio, follower count, following count, and public recipes are visible to other users of the App.

10. Children's Privacy

The App is not directed at children under the age of 13 (or under 16 where applicable under local law, such as in the EU under GDPR). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access – Request a copy of the personal data we hold about you.
• Rectification – Request correction of inaccurate or incomplete data.
• Erasure – Request deletion of your personal data ("right to be forgotten").
• Portability – Request your data in a structured, machine-readable format.
• Restriction – Request that we restrict processing of your data in certain circumstances.
• Objection – Object to processing of your data for certain purposes.
• Withdraw consent – Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at: contact@elveontech.com

12. Legal Basis for Processing (EU/EEA Users)

We process your personal data on the following legal bases:

13. International Data Transfers

Your data may be processed in countries outside your country of residence, including countries that may not have the same data protection laws. When we transfer data internationally, we ensure appropriate safeguards are in place (such as Supabase's Standard Contractual Clauses).

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the “Last updated” date at the top of this page. For material changes, we may also provide an in-app notification. Your continued use of the App after changes take effect constitutes your acceptance of the updated policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: