Privacy Policy
Last updated: February 25, 2026
CookChook ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit cookchook.com and use our services. Please read this policy carefully. If you disagree with its terms, please stop using our site.
1. Information We Collect
Information You Provide
- Account information: When you create an account via Clerk, we collect your email address, name, and any profile information you provide.
- Meal plans and food data: Meals, recipes, and nutritional goals you save in the app.
- Payment information: If you subscribe to CookChook Pro, payment is processed by Stripe. We do not store your card details — Stripe handles all payment data under their own privacy policy.
- Feedback and communications: Messages or feedback you submit through our feedback tool.
Information Collected Automatically
- Usage data: Pages visited, features used, time spent on pages, click patterns.
- Device and browser data: IP address, browser type and version, operating system, referring URLs.
- Cookies and similar technologies: We use cookies for analytics, authentication session management, and preferences. See our Cookie Policy for full details.
- Analytics data: We use Google Analytics to understand how visitors use our site. This collects anonymised aggregate data.
Information from Third Parties
- Clerk (authentication): When you sign in with Google, Apple, or email, Clerk provides us with basic profile information.
- USDA FoodData Central: We query public nutritional databases on your behalf when you search for food items. No personal data is sent to USDA.
- Spoonacular API: Recipe data retrieved from Spoonacular is processed server-side; your personal information is not shared.
2. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain our services
- Create and manage your account
- Save and sync your meal plans, goals, and pantry data
- Process payments and manage your subscription
- Send transactional emails (account confirmations, password resets)
- Analyse usage patterns to improve our features
- Detect and prevent fraudulent or abusive activity
- Comply with legal obligations
We do not sell your personal information to third parties.
3. Sharing Your Information
We may share your information with:
- Clerk: For authentication and session management.
- Stripe: For payment processing. Stripe's privacy policy applies to payment data.
- Vercel: Our hosting provider. Vercel may collect server logs including IP addresses.
- Supabase: Our database provider, used to store your meal plans, goals, and pantry data.
- Google Analytics: Anonymised usage statistics. You can opt out via Google's opt-out tools.
- Legal authorities: If required by law, court order, or to protect the rights and safety of CookChook, our users, or the public.
4. Data Retention
We retain your personal data for as long as your account is active or as needed to provide services. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required by law to retain it longer (e.g., billing records for tax purposes, which may be kept for up to 7 years).
5. Your Rights
Depending on your location, you may have the following rights:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your personal data ("right to be forgotten").
- Portability: Request your data in a machine-readable format.
- Objection / Restriction: Object to or request restriction of certain processing.
- Withdraw consent: Where processing is based on consent, you can withdraw it at any time.
To exercise any of these rights, contact us at privacy@cookchook.com. We will respond within 30 days.
6. Cookies
We use cookies and similar tracking technologies to operate our site and analyse usage. For full details on what cookies we use and how to manage them, please see our Cookie Policy.
7. Children's Privacy
Our services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately and we will delete it.
8. Security
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These include encrypted data transmission (HTTPS), secure database access controls, and regular security reviews. However, no internet transmission is 100% secure, and we cannot guarantee absolute security.
9. International Data Transfers
CookChook is operated from Australia. If you access our services from outside Australia, your data may be transferred to and processed in countries with different data protection laws (including the United States, where our infrastructure providers operate). By using our services, you consent to these transfers.
10. Third-Party Links
Our site may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date. Continued use of our services after changes constitutes acceptance of the revised policy.
12. Contact Us
If you have questions or concerns about this Privacy Policy, please contact us: