Privacy Policy

Your Data Lives on Your Device

Honest Recipes is a local-first app. All your recipe data — recipes, collections, settings — is stored on your device in your browser's IndexedDB. We don't have access to it, and we can't see it.

If you clear your browser data, your recipes go with it (unless you use sync — see below).

Information We Collect

If You Use Sync (Optional)

Cross-device sync is entirely optional and requires signing in. If you enable sync, we store:

• Account info: Email address and authentication details (managed by Supabase)
• Your recipes: A copy of your recipe data for syncing between devices

If you don't enable sync, we don't have any of your recipe data. Period.

If You Use Pro Features

Payments are processed by Stripe. We store your Stripe customer ID and plan status to manage your subscription. We never see or store your payment card details.

AI Photo Import

When you use the photo import feature, your photo is sent to our server for AI parsing. We extract the recipe data and return it to your device. The photo is not stored on our servers.

URL Import

When you import a recipe by URL, our server fetches the page to extract recipe data. We don't log or store the URLs you import.

Analytics & Error Tracking

• PostHog: Anonymized usage analytics to understand how the app is used. No personal data, no tracking across sites.
• Sentry: Error tracking so we can fix bugs. May include device and browser info when an error occurs.

What We Don't Do

Let's be clear:

• We don't show ads
• We don't sell your data
• We don't use third-party trackers
• We don't build advertising profiles
• We don't share your data with data brokers
• We don't monetize your content in any way

Third-Party Services

We use a small number of services to run the app:

• Supabase: Authentication and sync database (only if you opt in)
• Stripe: Payment processing for Pro plan
• Vercel: Hosting
• PostHog: Anonymized analytics
• Sentry: Error tracking

Data Security

For data that does touch our servers (sync, payments):

• All connections use HTTPS/TLS encryption
• Database access uses row-level security
• Authentication is handled by Supabase's secure infrastructure

No system is 100% secure, but we keep our attack surface small by storing as little as possible.

Your Rights

You can:

• Export your data: Use the export feature in Settings at any time
• Delete your data: Clear local data from Settings, or delete your sync account
• Use without an account: The app works fully offline with no sign-up

Children's Privacy

Honest Recipes is not directed at children under 13. We don't knowingly collect information from children. If you believe a child has provided us with personal information, please contact us.

California Privacy Rights (CCPA)

California residents have additional rights under the CCPA, including the right to know what data we collect, request deletion, and opt out of data sales. We don't sell personal information — never have, never will.

Changes to This Policy

If we change this policy, we'll update the date at the top and post the new version here. For major changes, we'll notify you in the app.

Contact Us

Questions about your privacy? Reach out:

Email: support@honest.recipes