This policy describes what Gusteaux collects so the kitchen can work, and what you can delete. We do not sell your data. We do not use it for ads.
What we collect
- Account. Email, password (stored by our auth provider, not in a form we can read), username, optional bio and profile photo, whether your kitchen is private.
- Kitchen activity. Dish photos and captions, recipes, food reviews, comments, follows, ratings, likes, saves, mentions, and fridge items you add.
- Device. A push token if you allow kitchen alerts, and crash reports (stack traces, device type, and a kitchen id — not your email) sent to Sentry so we can fix bugs.
- On this device. Fridge spoil reminders can be scheduled locally. Some preferences stay in on-device storage.
How we use it
We use this information to run accounts, show feeds, send alerts you asked for, moderate abuse, fix crashes, and improve the product. We do not sell it or share it with advertisers.
Who can see it
Public kitchens are visible to other cooks in the app. Private kitchens are visible to people you accept. Photos are stored in private cloud storage; the app loads them for people who are allowed to see that kitchen. Shared web links do not show your photos.
Hosts (admins) can review reports you file, including a snapshot of reported material, so they can hide or remove it.
Who processes it
We use Supabase to store data and handle login, Vercel to host this website, and Sentry for crash reports. Optional public recipe lookups may use TheMealDB. Those companies process data on our instructions to provide their services.
How long we keep it
We keep account and kitchen data until you delete your account, except short-lived backups and records we must keep for security, abuse, or the law. Crash reports are kept in Sentry according to that product’s retention.
Your choices
- Keep your kitchen private.
- Block cooks you do not want in your kitchen.
- Turn off alerts in iOS Settings, or do not tap Allow kitchen alerts.
- Delete your account in Settings. That removes your profile, dishes, photos, and login.
If you are in a place with extra privacy rights (including some U.S. states and the EEA/UK), you can ask to access or delete personal data through account deletion or by writing to the contact we publish on the Terms page.
Children
Gusteaux is not directed at children under 16. We do not knowingly collect personal information from them. If we learn we have, we will delete that account.
Changes
We will update the date at the top when this policy changes and post it at this URL.