Privacy Policy

This Privacy Policy explains how Supper LLC(“Supper,” “we,” “us,” or “our”) collects, uses, shares, and protects personal information when you use the Supper mobile application (the “App”) and our website at cooksupper.co (together, the “Service”). Supper is a meal-planning service that helps you discover recipes, plan your week, build grocery lists, and cook with confidence.

By using the Service, you agree to the collection and use of information in accordance with this Policy. If you do not agree, please do not use the Service.

Information you provide

• Account information. You can sign in with Apple, with Google, or with a one-time code we email to you. When you sign in with Apple or Google, we receive a unique account identifier and, depending on your settings with that provider, your email address and display name; we never receive or store your password for those accounts. When you sign in with an email code, we collect the email address you provide. You may also add a display name and profile photo.
• Preferences. Dietary preferences and restrictions, and the cuisines or ingredients you like or want to avoid.
• Recipe and cooking activity. Recipes you favorite, skip, or add to your weekly plan; recipe customizations you request (for example, an ingredient substitution or a dietary adaptation); and details about your cooking sessions, such as when you start and finish a recipe, how long it took, and any rating, note, or photo you choose to add afterward.
• Grocery and pantry data. Your grocery lists, the ingredients you mark as on hand, and your pantry staples.
• Connected grocery accounts. If you connect a grocery or checkout service (such as Kroger) to send your list to a cart, we store the access credentials that service issues us so we can act on your behalf. You can disconnect at any time.
• Imported recipes. When you import or share a recipe from a website or a social post, we fetch that page or post and extract the recipe details to save them to your account.
• Waitlist email. If you join our waitlist on the website, the email address you submit.
• Communications. Information you provide when you contact us for support.

Information collected automatically

When you use the Service, we and our service providers automatically collect limited technical information, such as device type, operating system and app version, IP address, and diagnostic and crash data used to operate, secure, and improve the Service. We do not use third-party advertising trackers, and we do not track you across other companies’ apps or websites.

We use personal information to:

• Provide, maintain, personalize, and improve the Service;
• Generate recipe summaries and the customizations you request, such as ingredient substitutions and dietary adaptations;
• Build and maintain your meal plan and grocery lists;
• Communicate with you, including waitlist, support, and service-related messages;
• Maintain the security, integrity, and reliability of the Service and prevent fraud and abuse; and
• Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We disclose information only to service providers who process it on our behalf under contract, and only as needed to operate the Service:

• Supabase — our hosting, database, and authentication provider, which stores your account, preferences, recipes, plan, and grocery data.
• OpenAI— when you request a recipe summary or customization, the relevant recipe text is sent to OpenAI’s API to generate the result. We do not send your name or email for these requests, and our agreement does not permit this content to be used to train their models.
• Apple and Google — to authenticate you when you sign in.
• Grocery and checkout services — if you choose to send your grocery list to a store, we share the relevant item names (and, for connected accounts, your authorization) with that provider, such as Kroger or Amazon, to build your cart. These providers receive data only for the feature you use and only when you use it.
• Recipe import providers — when you import a recipe from a social post or video, we may send that post or video link to a third-party extraction service to retrieve its caption or transcript so we can parse the recipe.
• Unsplash— to show reference photos for ingredients, we send the ingredient name to Unsplash’s image search.
• Vercel and Cloudflare — to host and deliver our website.

Information visible to other users. Some features are social. Your display name and profile photo can be shown to other users (for example, in follow lists or shared sessions), and if you use a collaborative feature such as Swipe Together, the recipes you contribute and your votes are visible to the other people in that session. Your email, preferences, and other account data are never shown to other users.

We may also disclose information (i) to comply with applicable law, legal process, or a lawful government request; (ii) to enforce our agreements or protect the rights, safety, and security of Supper, our users, or the public; or (iii) in connection with a merger, acquisition, financing, or sale of assets, in which case we will require the recipient to honor this Policy or notify you of any material change.

If you are in the European Economic Area or the United Kingdom, we process your personal information on the following legal bases: to perform our contract with you (providing the Service); our legitimate interests in securing, maintaining, and improving the Service; your consent where required (which you may withdraw at any time); and to comply with legal obligations.

We retain your personal information for as long as your account is active or as needed to provide the Service. When you delete your account, we delete or de-identify your personal information within 30 days, except for information we are required to retain to comply with legal obligations, resolve disputes, or enforce our agreements. Residual copies may persist in encrypted backups for a limited period before they are overwritten. Waitlist emails are retained until you unsubscribe or until we close the waitlist.

You can review and update your preferences, favorites, plan, and grocery data directly in the App, and you can delete your account at any time from the App’s settings. You may unsubscribe from waitlist emails using the link in any such email.

Depending on where you live, you may have the right to access, correct, delete, or receive a portable copy of your personal information, to opt out of certain processing, and to be free from discrimination for exercising these rights. To make a request, email us at privacy@cooksupper.co. We will verify your request and respond within the time required by applicable law. You may authorize an agent to act on your behalf.

California residents. Under the California Consumer Privacy Act (as amended), you have the rights described above with respect to the categories of personal information listed in Section 2. We have not sold or shared personal information, and we do not knowingly do so. You will not be discriminated against for exercising your rights.

We use reasonable technical and organizational measures designed to protect your information, including encryption in transit (HTTPS), encryption at rest with our database provider, and row-level access controls that restrict each user’s data to that user. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

We operate in the United States, and your information may be processed in the United States or other countries where we or our service providers operate. These countries may have data-protection laws that differ from those in your country. Where required, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, for international transfers.

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you are in the EEA or UK, the minimum age is 16. If you believe a child has provided us with personal information, please contact us at privacy@cooksupper.co and we will delete it.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, provide additional notice through the Service or by email where appropriate. Your continued use of the Service after an update takes effect means you accept the revised Policy.

If you have questions about this Privacy Policy or how we handle your information, contact Supper LLC at privacy@cooksupper.co. This Policy is governed by the laws of the State of California, United States, without regard to its conflict-of-laws rules.