Privacy Policy

1. Information We Collect

Kitch collects information you provide directly to us when you create an account, use our app, or communicate with us:

• Account Information: Name, email address, profile photo
• Content: Recipes, photos, ingredients, shopping lists, pantry items
• Usage Data: How you interact with the app, search queries, preferences
• Device Information: Device type, operating system, unique identifiers
• Sign in with Apple or Google: If you choose to sign in with Apple or Google, we receive your name (Apple shares it only the first time you connect Kitch), your email address (with Apple, this can be a private relay address that forwards to you) and an account ID from that provider. We never receive your Apple or Google password.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Personalize your experience with recipe recommendations
• Enable social features like sharing and following
• Send you technical notices and support messages
• Detect, prevent, and address technical issues and fraud

3. Data Storage and Security

Your data is stored securely using AWS services with industry-standard encryption. We use AWS Cognito for authentication and AWS RDS for data storage. We implement appropriate security measures to protect your personal information.

If you use Sign in with Apple, we keep the refresh token Apple issues to Kitch, so that we can revoke Kitch's access with Apple when you disconnect Apple or delete your account. We keep a log of sign-in attempts — when, which method and whether it worked, with your IP address and email address stored only as keyed hashes (plus the email's domain, such as gmail.com) — for 90 days, to keep accounts secure and to fix sign-in problems. We don't use it to work out where you are.

4. Sharing Your Information

We do not sell your personal information. We may share information:

• With other users: When you choose to share recipes or post content publicly
• With service providers: AWS and other services that help us operate the app
• For legal purposes: When required by law or to protect our rights
• With Apple and Google: If you sign in with Apple or Google, they know you use Kitch. When you disconnect Apple or delete your account, we ask Apple to revoke Kitch's access.

Kitch's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use the basic profile information Google shares (your name, email address and Google account ID) only to sign you in and run your Kitch account. We don't use it for advertising, we don't sell it, and people at Kitch don't read it except to keep the service secure, to comply with the law, or when you ask us to help with your account.

5. Third-Party Tracking and Advertising

Kitch uses a limited set of third-party services to measure how our marketing and product features perform. We do not sell your data to data brokers, and we do not share personal identifiers with third parties for advertising purposes.

Specifically:

• Facebook Aggregated Event Measurement (AEM): We use Meta's privacy-preserving AEM framework to measure ad performance and attribute installs without relying on personal identifiers.
• App Tracking Transparency (ATT): On iOS, the system ATT permission prompt appears shortly after first launch. If you choose "Ask App Not to Track," we do not use the device IDFA for tracking; AEM continues to operate in its privacy-preserving aggregated mode.
• Changing your choice: You can update your tracking preference at any time in iOS Settings → Privacy & Security → Tracking → Kitch.

6. Content Moderation

Kitch moderates user-generated content (posts, comments, profile bios) to keep the community safe:

• Automated screening: Posts and comments are run through an automated content classification system at the time of submission. High-severity content (such as graphic violence, sexual content involving minors, or self-harm content) is rejected before it is ever stored.
• User reports: Users can report any post, comment, or user from the (•••) menu in the app. We review reports and respond within 24 hours by removing offending content and, where warranted, suspending the user's account.
• Blocking: Users can block any other user from their profile. Blocked users' content is removed from your feed instantly and they cannot see your content.

See our Terms of Service for the full Objectionable Content Policy.

7. Your Rights and Choices

You have the right to:

• Access, update, or delete your personal information
• Opt out of promotional communications
• Request a copy of your data
• Delete your account at any time

Deleting your account permanently removes your profile, posts, comments, photos and the recipes you created, and signs you out everywhere. Recipes you imported from other websites stay in Kitch without your name. We keep anonymous cooking preferences that are not linked to you or your account, to improve recommendations.

You can connect or disconnect Apple and Google at any time in Settings → Sign-in methods; disconnecting Apple also revokes Kitch's access with Apple. Deleting your account revokes it too. You can also stop using Sign in with Apple for Kitch from your Apple Account settings, and remove Kitch's access from your Google Account's third-party connections.

8. Children's Privacy

Kitch is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

10. Contact Us

If you have questions about this Privacy Policy, please contact us through the Support page.