Privacy policy

1. Data Controller

For purposes of applicable data protection laws, the data controller is:

Cooks Intent Inc.
Panama

Email: admin@cooksintent.com

2. Information We Collect

We collect several categories of information to provide and improve the Platform.

2.1 Personal Identification Data

Information you provide when creating an account may include:

• Full name
• Email address
• Phone number
• Billing address

Users registering for the Free Plan are not required to provide payment or billing information.

2.2 Account and Profile Data

To provide personalized cooking and meal planning features we may collect:

• Dietary preferences and allergy settings
• Saved recipes and recipe history
• Pantry inventory data
• Grocery lists
• Meal plans
• User-submitted recipes, photos, comments, and reviews
• Community interaction activity
• Imported or uploaded recipes (including images, text, and extracted data)

2.3 Technical and Device Data

When you access the Platform we may automatically collect:

• IP address
• Browser type
• Device type
• Operating system
• Session logs
• Usage patterns and interaction data

2.4 Location Data

Location data may be used to determine regional settings such as:

• Metric vs imperial measurement units
• Ingredient measurement formatting

Location data is used only for functional configuration of the Platform.

We do not use location data to track user movement or deliver location-based advertising.

Where technically feasible we store regional settings rather than precise geographic coordinates.

2.5 Payment and Transaction Data

Subscription payments are processed by Paddle, which acts as the Merchant of Record for transactions made through the Platform.

Paddle may process payment information including:

• Payment card details
• Billing information
• Payment verification data
• Transaction records

Cooks Intent does not store full payment card details.

We may retain limited transaction information including:

• Subscription status
• Transaction identifiers
• Billing country
• Payment confirmation records

These records are retained for accounting, fraud prevention, and legal compliance.

Paddle may act as an independent data controller for payment-related information in accordance with its own privacy policies.

3. How We Collect Data

We collect personal data through:

• Account registration and subscription purchases
• Use of Platform features such as meal planning, pantry tracking, and AI tools
• User-generated content submissions
• Customer support communications
• Automated technologies such as cookies and analytics tools

4. Data Minimization and No Sale of Personal Data

Cooks Intent follows a data minimization principle, meaning we collect only the personal information reasonably necessary to operate the Platform and provide requested services.

We do not sell, rent, or trade personal data to third parties.

Personal information is used only for purposes such as:

• Operating the Platform
• Providing subscription services
• Improving functionality
• Measuring marketing performance
• Maintaining security and fraud prevention.

Where information is shared with service providers, those providers may only process data to perform services on our behalf.

5. How We Use Your Information

We use personal data to:

• Provide and operate the Platform
• Provide access to both Free Plan and paid subscription features
• Deliver personalized recipe recommendations
• Manage subscriptions and payments
• Send administrative communications such as renewal reminders and service notices
• Enable community features
• Improve platform performance and usability
• Detect fraud or misuse
• Comply with legal obligations
• Process and store imported or uploaded recipes for personal use within the Platform
• Process user-submitted and imported content using automated systems, including AI tools, to extract, structure, and enhance recipe data

6. Legal Bases for Processing

Where required under applicable data protection laws we rely on the following legal bases:

Contractual Necessity — To provide subscription services and core platform functionality.

Consent — For optional features, cookies, and marketing communications.

Legitimate Interests — For analytics, product improvement, fraud prevention, and platform security.

This may include improving product features, analyzing usage trends, preventing fraud, and maintaining platform security, provided such interests are not overridden by user rights.

Legal Obligations — Where processing is required by law.

Consent is used as the legal basis for:

• Sending marketing communications
• Use of non-essential cookies and tracking technologies
• Advertising and audience measurement tools (including Meta Pixel and similar technologies)

Where required by law, users will be asked to provide consent before such technologies are activated.

Users may withdraw consent at any time through cookie settings or account preferences.

7. Automated Processing and Personalization

We use automated systems to personalize user experiences including:

• Recipe recommendations
• Meal planning suggestions
• Dietary filtering
• Pantry insights

These systems analyze user preferences and activity patterns but do not produce legal or similarly significant decisions.

Users may adjust personalization settings within their account.

8. Sharing and Disclosure of Information

We do not sell personal data.

We may share information with trusted service providers that assist in operating the Platform.

8.1 Service Providers

We may share information with service providers including:

• Supabase — database hosting and authentication
• Paddle — payment processing and tax compliance
• OpenAI — AI-generated content services
• Spoonacular — recipe data services
• Cloudflare — infrastructure and security protection
• Meta Platforms — advertising analytics tools
• Google — analytics and search performance monitoring

These providers process personal data only under contractual obligations and in accordance with applicable data protection laws.

8.2 Security and Bot Protection

The Platform uses security technologies such as Cloudflare to protect against automated abuse, fraud, and malicious activity.

These services may process technical information such as:

• IP address
• Device characteristics
• Browser information
• Network traffic patterns.

This data is used solely for security and fraud prevention.

8.3 Legal Requirements

We may disclose personal information where required to:

• Comply with applicable laws
• Respond to lawful requests from government authorities
• Enforce our Terms & Conditions
• Investigate fraud or security incidents
• Protect the safety of users or the public.

8.4 Business Transfers

If Cooks Intent Inc. undergoes a merger, acquisition, corporate restructuring, financing, or sale of assets, personal data may be transferred as part of that transaction.

Any acquiring organization will be required to honor the commitments described in this Privacy Policy.

9. Data Processing Agreements

Where third-party providers process personal data on our behalf they act as data processors.

Cooks Intent requires processors to handle personal data:

• According to our instructions
• For the purposes of delivering services to the Platform
• In compliance with applicable privacy and data protection laws.

Safeguards may include:

• Data Processing Agreements (DPAs)
• Standard Contractual Clauses (SCCs)
• Confidentiality and security obligations.

10. Marketing Communications

We may send users marketing communications including newsletters, product updates, promotional offers, and feature announcements.

Where required by law, such communications are sent only with user consent.

Users may opt out of marketing communications at any time by:

• Clicking the unsubscribe link in emails
• Updating their account preferences
• Contacting admin@cooksintent.com

Opting out of marketing communications does not affect essential service communications such as billing, account, or security notices.

Service-related communications (including billing, account status, and security notices) are considered essential and cannot be opted out of while maintaining an active account.

11. Advertising and Marketing Analytics

We use advertising technologies to measure marketing performance, manage advertising audiences, and improve ad targeting, suppression, and campaign effectiveness.

These tools also help ensure existing subscribers are not shown redundant advertisements.

11.1 Advertising Audience Management

We may use advertising technologies to create suppression audiences so existing subscribers are not shown advertisements for services they already use.

11.2 Meta Pixel and Conversions API

The Platform uses the Meta Pixel and Conversions API provided by Meta Platforms.

These technologies allow us to:

• Measure advertising performance
• Understand how users interact with our website
• Improve marketing campaigns
• Avoid showing advertisements to existing subscribers.

11.3 Advanced Matching and Hashed Data

We may use Automatic Advanced Matching.

When users provide information such as email address or phone number, this information may be securely hashed before being transmitted to Meta.

Hashing converts information into a coded representation that cannot be reversed into the original value.

Users may control advertising preferences through their Facebook or Instagram account settings.

12. Google Analytics

The Platform uses Google Analytics to understand how visitors interact with our services.

Google Analytics may collect:

• IP address (which may be anonymized)
• Browser type
• Device information
• Pages visited
• Time spent on pages
• Referring websites or search queries.

This information is used in aggregated form to improve platform functionality. It does not directly identify individual users.

13. Google Search Console

We use Google Search Console to monitor how the Platform appears in search results.

This tool provides aggregated information such as:

• Search queries leading to our website
• Page indexing status
• Website performance metrics.

This information does not directly identify individual users.

14. International Data Transfers

Because Cooks Intent operates globally, personal data may be processed in jurisdictions outside your country.

Where required we implement safeguards including:

• Standard Contractual Clauses
• Data Processing Agreements
• Technical and organizational security measures.

15. Data Retention

We retain personal data only as long as necessary.

Active Accounts: Data retained while the account remains active.

For Free Plan users, certain data (including uploaded recipes or stored content) may be subject to storage limits, usage caps, or deletion in accordance with Free Plan restrictions.

Deleted Accounts: Profile data, pantry data, and preferences are deleted or anonymized within a commercially reasonable timeframe.

Limited billing records may be retained where required by law.

User-submitted and imported recipe content is retained while the account remains active, unless deleted by the user or removed in accordance with Platform limits or Terms & Conditions.

Upon account deletion, such content will be deleted or anonymized within a commercially reasonable timeframe, unless retention is required for legal or compliance purposes.

16. Account Deletion

Users may request account deletion by contacting: admin@cooksintent.com

After verified:

• personal data will be deleted or anonymized
• requests are typically processed within 30 days.

Deletion is permanent and cannot be reversed.

17. Data Security

We implement security measures including:

• Encrypted connections (TLS)
• Secure cloud infrastructure
• Access control systems
• API security monitoring
• Monitoring and threat detection systems.

However, no internet-based service can guarantee absolute security.

18. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Maintain session functionality
• Improve platform performance
• Analyze traffic and usage patterns
• Measure marketing campaign effectiveness
• Personalize content and advertising
• Detect fraud and protect platform security.

Users may manage cookies through browser settings.

Where required by applicable law, a cookie consent mechanism will be presented to users on first visit, allowing them to accept, reject, or manage non-essential cookies.

Users may update their cookie preferences at any time through the Platform.

19. Your Privacy Rights

Depending on your jurisdiction, users may have the right to:

• Access personal data
• Correct inaccurate information
• Request deletion
• Restrict processing
• Object to processing
• Withdraw consent
• Request data portability
• File a complaint with a regulatory authority.

We may require verification of identity before processing certain requests to protect user data and prevent unauthorized access.

Requests may be submitted to: admin@cooksintent.com

20. Do Not Track

The Platform currently does not respond to browser “Do Not Track” signals.

21. Children’s Privacy

The Platform is not intended for individuals under 18.

We do not knowingly collect personal data from children.

If personal data from minors is discovered it will be deleted promptly.

22. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our services, legal requirements, or data processing practices.

The Effective Date will be updated when revisions are made.

Where required by law, users may be notified of significant changes through email notifications or notices on the Platform.

Continued use of the Platform after updates become effective constitutes acceptance of the revised Privacy Policy.

23. Relationship to Terms & Conditions

Use of the Platform is also governed by our Terms & Conditions.

Those terms include provisions relating to:

• Acceptable use of the Platform
• Subscription services and billing
• AI-generated content
• User submissions
• Limitation of liability.

24. Contact

For privacy-related questions or requests:

Cooks Intent Inc.
Panama

Email: admin@cooksintent.com