Privacy Policy

Stitched Strategy LLC ("Company," "we," "us," or "our") operates the Cookie mobile application (the "App"). This Privacy Policy explains what information we collect, how we use it, how we share it, and the choices available to you.

1. Information We Collect

1.1 Audio and Voice Transcriptions

When you use voice commands, audio is processed through Apple's speech recognition services and returned to the App as text. We do not store raw voice audio on our own servers. Voice transcriptions are processed in-app and, for Premium AI features, relevant text may be sent to Google services as described in Section 3.

1.2 Usage Data and Diagnostics

We use Firebase Analytics and Firebase Crashlytics to collect usage and diagnostics data such as feature interactions, session events, crash signals, and performance metrics. For users without an account, this data is associated with device and app identifiers. For users with an account, analytics and crash reports are linked to your Firebase user ID.

1.3 Account Information (Optional)

If you create an account, we collect:

• Email address: Used for passwordless sign-in via magic link
• Authentication credentials/tokens: Managed by Firebase Authentication to keep you signed in
• User ID: Assigned by Firebase to associate your app data with your account

Before you create an account, the App automatically assigns an anonymous Firebase session identifier to your device. This identifier is used only to associate your local data with app sessions and is replaced with your account-linked user ID when you sign in.

Account creation is optional. You can use core app functionality without creating an account.

1.4 User Content

If you import recipe URLs, the App processes recipe-related content such as titles, ingredients, instructions, and images. For users without an account, this data is stored locally on the device. For users with an account, recipe data is synced to Firebase Firestore for backup and multi-device access.

Photos you take in the App are stored locally on your device unless and until cloud sync for those photos is explicitly offered and enabled.

1.5 Device and App Data

We use standard iOS APIs and local storage for app preferences, cached files, and operational metadata (such as file timestamps used for cache management).

1.6 Feedback Submissions

If you submit in-app feedback, we collect your feedback text along with technical context: device model, iOS version, app version and build number, premium subscription status, and approximate recipe count. You may optionally provide your email address to receive a reply. This data is stored in Firebase Firestore and is accessible only to the Company.

2. How We Use Information

We use information to:

• Provide and maintain app functionality, including voice control and recipe management
• Authenticate users and manage account access
• Sync and back up account-linked recipe data across devices
• Measure reliability and improve product features
• Provide Premium features, including AI-assisted experiences and cloud text-to-speech
• Detect, investigate, and address security or technical issues

3. Third-Party Services and Processing

3.1 Apple Speech Recognition

Voice input uses Apple's speech recognition framework and related Apple processing infrastructure. Apple may process audio according to Apple's terms and privacy disclosures.

3.2 Firebase Authentication (Google)

We use Firebase Authentication for sign-in and session management. For account users, email and authentication metadata are processed by Google. Privacy information: https://policies.google.com/privacy.

3.3 Firebase Firestore (Google Cloud)

For account users, recipe and account-linked app data are stored in Firebase Firestore. Data may be processed in the United States and other jurisdictions where Google or its subprocessors operate.

3.4 Firebase Analytics (Google)

We use Firebase Analytics for product usage and performance insights. Privacy information: https://policies.google.com/privacy.

3.5 Third-Party Recipe Websites

When you import a recipe URL, the App requests content from the source website. Your use of those websites is subject to their own terms and privacy policies.

3.6 Google Gemini API

Google's Gemini API is used in two ways: (1) as a fallback when on-device recipe extraction fails — in this case, recipe page text may be sent to Gemini for any user, including those without a Premium subscription; and (2) for Premium AI features, where recipe content and your questions are sent to Gemini to generate cooking guidance, scaling calculations, and similar responses. Raw voice audio is not sent to Gemini by us.

3.7 Google Cloud Text-to-Speech (Premium)

For Premium spoken responses, output text is sent to Google Cloud Text-to-Speech to generate audio. Free-tier voice responses may use on-device Apple text-to-speech.

3.8 Brevo (Email Marketing)

If you opt in to marketing communications during sign-up, your email address is shared with Brevo (formerly Sendinblue) solely to send you product updates and announcements. Your email is only shared with Brevo if you explicitly opt in; we do not share any email addresses with Brevo otherwise. You can unsubscribe at any time via any marketing email or by contacting us. Privacy information: https://www.brevo.com/legal/privacypolicy/.

3.9 Google Custom Search

When you search for recipes within the App, your search query is sent to Google's Custom Search API to retrieve results. Privacy information: https://policies.google.com/privacy.

4. Data Storage and Retention

4.1 Local Storage

Recipe data, preferences, and caches are stored on your device. Voice audio is processed for recognition and is not stored by us as raw recordings on our servers.

4.2 Cloud Storage (Account Users)

If you create an account, account-linked data is stored in Firebase services. We retain this data while your account remains active and as needed for legitimate business and legal purposes.

4.3 Account and Data Deletion

You can request deletion from Settings > Privacy > Delete Account & Data (if available in your build) or by contacting us. We begin deletion promptly, and complete deletion within a commercially reasonable period, subject to technical constraints, legal obligations, and limited backup retention cycles.

4.4 Analytics Retention

Analytics retention is managed within Firebase configuration and Google platform controls.

5. How We Share Information

We do not sell personal information for money. We may share information:

• With service providers: Including Google and Apple services described in Section 3
• For legal reasons: To comply with law, legal process, or enforceable governmental requests
• For safety and rights protection: To protect users, the public, and our rights or property
• Business transfers: In connection with a merger, acquisition, financing, or asset sale (subject to applicable confidentiality and notice requirements)

6. International Data Transfers

Your information may be processed in the United States and other countries where our service providers operate. Data protection laws may differ by jurisdiction.

7. Your Rights and Choices

Depending on where you live, you may have rights to access, correct, delete, or request a portable copy of your personal information, and to object to or restrict certain processing.

• Access and correction: You can review and update certain data in the App
• Data portability: To request a copy of your account data, contact us at chef@cookievoicerecipes.com
• Deletion: Use in-app deletion tools or contact us to request deletion
• Marketing opt-out: You can unsubscribe from marketing emails at any time via any marketing email or by contacting us
• Local data control: Removing the App deletes local app data from the device (subject to OS behavior and backups)
• Analytics controls: You may have in-app and/or device-level controls; device controls may not fully disable all analytics collection used for core diagnostics
• Premium AI features: If you cancel Premium, future use of those Premium AI features is disabled

To exercise privacy rights, contact us at chef@cookievoicerecipes.com. We may need to verify your request before processing it.

8. U.S. State Privacy Notice

If you are a resident of certain U.S. states (such as California, Colorado, Connecticut, Utah, or Virginia), you may have additional rights under applicable law, including rights to know, access, delete, and correct personal information, and to appeal certain privacy decisions where required.

We do not sell personal information for monetary consideration and do not knowingly share personal information for cross-context behavioral advertising.

9. EEA/UK Privacy Notice

If you are in the EEA or UK, our legal bases may include performance of a contract, legitimate interests, consent, and compliance with legal obligations, depending on the processing activity.

You may also have the right to lodge a complaint with your local data protection authority.

10. Children's Privacy

The App is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.

11. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. No security method is guaranteed to be completely secure.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date. If required by law, we will provide additional notice of material changes.

13. Contact Information

For questions or privacy requests, contact:

Stitched Strategy LLC
Email: chef@cookievoicerecipes.com