Privacy Policy

1. What data we collect

Account data: name, email address and, if you sign in with Google, the basic information from your Google profile (name, email, photo).

Recipe content: the text, photos and audio recordings you upload to create or extract recipes, along with the recipes, meal plans and any other information you generate inside the application.

Billing data: handled directly by our payment providers (Paddle and Mercado Pago). Grace does not store full credit card numbers or bank details.

Technical data: IP address, browser type and the session cookies needed to keep you signed in to the application.

2. What we use your data for

• Providing and maintaining the Service, including authenticating your account
• Processing your recipes with artificial intelligence tools (text extraction, audio transcription) to turn them into usable recipes
• Processing subscription payments and managing your billing
• Sending you transactional emails (family invitations, account verification, password recovery)
• Improving and supporting the Service
• Measuring product usage with analytics: with cookies if you accept the notice and anonymously, without cookies, if you decline it

3. Who we share your data with

We do not sell your personal data. We share data only with providers that help us operate the Service (“subprocessors”), under confidentiality obligations:

• Paddle.com Market Limited and Mercado Pago — payment processing and billing
• Cloudflare, Inc. (R2) — storage of recipe photos and attachments
• Groq, Inc. — audio-to-text transcription
• OpenRouter (and the third-party AI models it routes to, such as Google Gemini) — extraction and structuring of recipes from your content
• Resend — sending transactional emails
• Google LLC — sign-in through Google OAuth, if you choose to use it
• PostHog, Inc. — product usage analytics (anonymous and cookie-free if you decline the cookie notice)

Some of these providers process data on servers located outside Argentina (for example, in the United States). By using the Service, you accept this international data transfer, which takes place under the protection mechanisms each provider offers.

4. Recipes you publish

Your recipes are private by default. An owner or administrator of your family can publish a specific recipe: this creates a page that anyone with the link can open and that search engines can index.

What is published: the title, the story, the photo, the ingredients, the steps, the times, the tags, the name and relationship of the person you attributed the recipe to, and your family’s name.

What is not published: the original audio or its transcript, the email or account identity of any member, and any other recipe, meal plan or family data.

You can stop sharing a recipe whenever you want from the recipe itself. The page becomes unavailable immediately and is removed from the sitemap, but we cannot delete copies that search engines or other services saved before that.

5. Help requests and support

When you write to us from the app to report a problem or ask for help, along with your message we receive technical data about your session and device: your account identifier, your email address, the active family and plan, the screen you wrote from, your language, your browser and the application version. If the request comes from an operation that failed, we also receive the details of that operation.

We use that data only to reproduce and solve your problem, and to reply to the email address on your account. The message arrives in our support inbox grace.cook.app@gmail.com and is not stored in the application.

6. Cookies

We use a strictly necessary session cookie to keep your sign-in active. We also use PostHog to measure product usage, without recording your session. If you accept the cookie notice, it uses local storage and cookies starting with “ph_”. If you decline, it only counts visits anonymously, without cookies or storage on your device, and we delete that data. We do not use advertising cookies.

7. Data retention and deletion

We keep your data while your account is active. If you ask us to delete your account by writing to grace.cook.app@gmail.com, we erase your personal information and content from our systems within a reasonable period, unless the law requires us to keep certain records (for example, billing data for tax purposes).

8. Your rights

Under Argentina’s Personal Data Protection Law 25.326, you have the right to access, rectify, update and request the deletion of your personal data. You can exercise these rights by writing to us at grace.cook.app@gmail.com. The Agency for Access to Public Information, as the Control Body of Law 25.326, has the authority to handle complaints and claims filed regarding non-compliance with personal data protection rules.

9. Minors

Grace is only for people aged 18 or over (or the age of majority in their jurisdiction) and is not directed at minors. We do not knowingly collect data from minors; if we find that an account was created by a minor, we will delete it.

10. Security

We take reasonable measures to protect your data, including encryption in transit (HTTPS) and access controls on our infrastructure. However, no system is completely secure, and we cannot guarantee the absolute security of your information.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of important changes by email or within the application.

12. Contact

For questions about this Privacy Policy or to exercise your rights over your personal data, write to us at grace.cook.app@gmail.com. See also our Terms of Service.