This Privacy Policy explains how WhatCanICook? ("we", "us") handles your information. It applies to WhatCanICook? on the web (whatcanicook-app.com), Android and iOS.
What we collect
- Account details — if you create an account: your email address and a securely hashed password, or your basic Google profile (name, email) if you use Google sign-in. You can use the app without an account.
- Cooking data — ingredients and quantities you enter, your preferences (cooking time, nutrition goal, cuisines, dietary needs), saved recipes, shopping list and pantry items. Without an account these stay on your device; with an account they are stored in our database so they follow you.
- Fridge photos — if you use Scan My Fridge, the photo is reduced in size on your device and sent for AI analysis to identify ingredient names. We do not store the photo.
- Purchase status — whether you have an active Premium plan, its type and expiry. We never receive or store your full card details.
- Technical data — basic logs and error reports needed to run and fix the service.
We do not use advertising trackers, and we do not sell your personal data.
How we use it
- To check your ingredients and generate recipe ideas and recipe images.
- To calculate nutrition estimates.
- To keep you signed in, save your recipes and shopping list, and send account emails (confirmation, password reset).
- To provide and verify Premium access.
Services we rely on
- Hosting, database, authentication and email — provided through Lovable Cloud and its infrastructure providers.
- AI processing — ingredient names, preferences and fridge photos are sent to AI models (via the Lovable AI Gateway, using providers such as Google and OpenAI) to check ingredients, generate recipes and images, and identify foods in photos. This content is not used by us to identify you.
- Nutrition data — ingredient names (never your identity) are looked up in the USDA FoodData Central database.
- Google sign-in — if you choose it, Google shares your basic profile with us under Google's privacy policy.
- Payments — on the web, payments are processed by Stripe. On Android, subscriptions and purchases are handled by Google Play Billing. On iOS, they are handled by Apple In-App Purchases (StoreKit). These providers process your payment details under their own privacy policies; we only receive your purchase status.
Retention and deletion
We keep your account data while your account exists. You can delete your account at any time from Profile → Delete account; this permanently erases your profile, preferences, saved recipes, shopping list, pantry and sign-in account. Payment providers may keep transaction records as required by law. Deleting your account does not cancel a store or Stripe subscription — cancel it in your Google Play, Apple or billing settings.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your data, or object to its use. Contact us and we'll help.
Children
WhatCanICook? is not intended for anyone under 16. You must be at least 16 years old to use the app or create an account, and we do not knowingly collect data from children under 16. If you believe a child has given us their data, contact us and we will delete it.
Security
Data is sent over encrypted connections and access to your records is restricted to your account.
Changes
We may update this policy; the date above shows the latest version.
Contact
Questions about privacy: support@whatcanicook-app.com
Postal address: Damaskino 85, Korinthos, 20132 Corinth, Greece