This Privacy Policy explains how Cookiva collects, uses and shares information when you use the Cookiva app, website and related services. Cookiva is designed to work anonymously at first, with optional Google sign-in when you want to save and sync your Cookiva across devices.
1. Information we collect
Account and identity information
You can begin using Cookiva without creating a named account. If you choose Continue with Google, we may receive information Google makes available for sign-in, such as your name, email address and a stable account identifier. Cookiva uses Supabase for authentication and account data.
Website waitlist
If you join the Cookiva public-release list on cookiva.app, we collect the email address you submit together with basic signup metadata such as the signup time and source. The waitlist is stored in Cloudflare D1 and is used to send the release notice and closely related Cookiva availability updates you requested. We do not sell waitlist email addresses.
Account deletion requests
If you request deletion through cookiva.app/delete-account, we collect the Google account email address you submit together with request metadata such as the request time and processing status. This information is stored in Cloudflare D1 and is used only to verify, process and document the account-deletion request.
Preferences and Cookiva activity
To personalise recommendations, Cookiva may store information you provide or generate through use of the app, including country or region, household size, dietary or protein preferences, cuisine preferences, time or budget preferences, daily mood choices, saved recipes, Cooked It actions, Not Today actions, recommendation history and similar product interactions.
Ingredient scans
When you use ingredient scanning, the image you choose or capture is sent through Cookiva's backend for ingredient analysis. Scan images and related request data may be processed by infrastructure and AI service providers solely to provide the scanning feature. Cookiva does not intentionally retain scan photos in its own database after the scan is processed. Cookiva may store scan-related metadata, detected ingredients, matching results and monthly scan usage needed to operate the feature and enforce plan limits.
Subscription information
If you use Cookiva Pro, Google Play handles the payment transaction. Cookiva does not receive your full payment-card details. We use RevenueCat to help determine subscription status, purchase entitlements and restoration. We may receive product, purchase, entitlement, renewal, cancellation and similar subscription metadata.
Technical information
Our infrastructure may receive standard technical information such as IP address, device or app version, request timing, diagnostics and security logs. If you use Cookiva's Suggest my country feature, Cookiva uses your connection to suggest an approximate country or region. Cookiva does not request precise GPS location for this feature. This information is used to operate, secure and troubleshoot Cookiva and, when requested, to provide the country suggestion.
2. How we use information
We use information to:
- provide daily recipe recommendations and ingredient-scan results;
- personalise Cookiva using your current choices and, where applicable, longer-term patterns;
- save recipes, history and preferences and sync them across devices when you sign in;
- manage Free and Pro feature limits and subscription entitlements;
- improve reliability, prevent abuse, investigate errors and secure the service;
- send public-release or closely related Cookiva availability updates when you join the website waitlist;
- verify and process account-deletion requests;
- communicate important service or policy changes where appropriate.
Cookiva does not sell your personal information and does not use your private Cookiva activity to build third-party advertising profiles.
3. Service providers
Cookiva relies on carefully selected service providers to operate the product. Depending on the feature you use, these may include:
- Supabase for authentication, account data and cloud persistence;
- Google for Google Sign-In and Google Play billing;
- RevenueCat for subscription and entitlement infrastructure;
- Cloudflare for website and backend infrastructure, including D1 storage for the website waitlist and account-deletion requests;
- OpenAI for AI-assisted ingredient image analysis.
These providers process information under their own applicable terms and privacy commitments. We share only the information reasonably required to provide the relevant service.
4. Nutrition information
Cookiva may display approximate calories and, for eligible plans, protein, carbohydrates and fat per serving. These values are derived from recipe ingredients and nutrition reference data. Nutrition information is part of the recipe experience and is not used to make medical diagnoses or health decisions about you.
5. Retention
We retain account and Cookiva profile information for as long as reasonably necessary to provide your account, sync your data, maintain subscription records, meet legal obligations, prevent abuse and resolve disputes. Anonymous/local information may remain on your device until the app data is cleared or the app is removed. Account-deletion request records may be retained for a limited period where reasonably necessary to verify and document completion of the request, prevent abuse, or meet legal or regulatory obligations. Retention periods for data processed by service providers may also be governed by their applicable policies.
6. Your choices and rights
You can use core Cookiva features without initially creating a named account. You can choose whether to connect Google, change preferences in the app, stop using ingredient scanning, or cancel a Cookiva Pro subscription through Google Play. If you joined the website waitlist, you can ask us to remove your email from that list. Depending on applicable law, you may also have rights to access, correct or delete personal information.
You can request deletion of your Cookiva account and associated Cookiva data at cookiva.app/delete-account. If your version of Cookiva includes an in-app account-deletion control, you can also use that control. Account deletion does not automatically cancel an active Google Play subscription; subscriptions can be managed or cancelled separately through Google Play.
7. Security
We use reasonable technical and organisational safeguards designed to protect Cookiva data. No internet service or storage system can be guaranteed to be completely secure.
8. Children
Cookiva is not directed to children under 13, or a higher minimum age where local law requires one. We do not knowingly seek to collect personal information from children below the applicable minimum age.
9. International processing
Cookiva and its service providers may process information in countries other than the country where you live. Where required, applicable legal safeguards govern those transfers.
10. Changes to this policy
We may update this Privacy Policy as Cookiva evolves. When changes are material, we will update the effective date and provide additional notice where required.
11. Contact
Cookiva is operated by Become Labs. For privacy questions or data requests, use the support contact provided in the Cookiva app, on cookiva.app, or in the Cookiva Google Play listing. Account-deletion requests can be submitted at cookiva.app/delete-account.