Privacy Policy

Pawacook is a cooking assistant. This policy explains what we store, why we store it, who else processes it, how long we keep it, and how to have it deleted.

What we store and why

• Account details. When you continue with Google we receive your Google account identifier, email address, name and profile picture. When you sign in with an email link we receive only the email address you enter. We store these to create your account, recognise you when you sign in again, and keep your cooking data attached to one account. If you use both methods with the same verified email address, they sign in to the same account.
• Sign-in records. A record of each signed-in session and each pending sign-in link, stored only in a form that cannot be used to sign in, and deleted when it expires or you sign out.
• Your household cooking profile. The cooking preferences, cookware and pantry ingredients you save, including the optional amounts and the date each pantry item was added. We store these so recipe requests do not require you to retype them.
• Your conversations and recipes. The meal requests you write, the messages and images you send, and the recipes the assistant creates. We store these so a recipe stays available on a later day and its conversation can be reopened.
• Error logs. Technical records of failed operations, without the text of your requests.

Data sent to an AI model provider

To generate and update recipes we send your household cooking profile, your meal request, the current recipe, the conversation, and any images you attach to an AI model provider. We use OpenRouter as the routing service and a Google Gemini model to produce the recipe. This transfer is necessary for the product to work. We do not send your email address, name or Google identifier to the model provider.

Sign-in emails

When you ask for a sign-in link we send your email address and the message to Resend, the service that delivers our email. Resend processes it only to deliver that message.

Payments

Subscriptions are paid through Stripe, which collects and stores your card details. Pawacook never sees or stores your card number. We keep only the Stripe customer and subscription identifiers and whether your subscription is active, so we know whether to give you access.

How long we keep it

Account data, profile data, conversations and recipes are kept while your account exists. Sign-in links expire after 15 minutes and sessions after 30 days without use. Error logs are kept for 30 days. When you request deletion we delete your account and all associated data within 30 days.

Requesting deletion

Email [email protected] from the address on your account and ask for deletion. You can also ask for a copy of your data or for a correction.

Your choices

You can edit or delete any preference, cookware item, pantry ingredient or recipe at any time from inside the app. Deleting a recipe also deletes its conversation. Signing out ends access to your account data on that device.

Cookies

We set one cookie holding your session so you stay signed in. While you continue with Google we also set two short-lived cookies that protect the sign-in from forgery; they are removed when you return. None of these are used for advertising or tracking across other sites.

Contact

Questions about this policy go to [email protected].