Recipe Remix Privacy Policy

1. Overview

Recipe Remix ("we", "us", "our") is committed to protecting your privacy and handling your data in a transparent way. This policy explains what information we collect, how we use it, the legal bases for processing, and the choices you have regarding your data.

Our service uses artificial intelligence (AI) technologies to enhance your experience, including content moderation, recipe recommendations, and search functionality. This policy describes how these technologies process your data.

2. Information We Collect

2.1 Account Information

• Name, email address, username, and profile photo.
• Country, language preferences, and data residency region selection.
• Authentication identifiers managed through AWS Cognito.
• Consent records including version accepted and timestamp.

2.2 Profile Information

• Bio and display name (subject to automated content moderation).
• User type (regular user, chef, business, researcher).
• Optional business information: address, business hours, promotional messages.

2.3 Content You Create

• Recipes, including ingredients, instructions, and images.
• Comments, ratings, and community interactions.
• Translations you contribute or request.

2.4 Usage and Search Data

• App interactions, feature usage patterns, and navigation paths.
• Search queries: We analyse the intent and structure of your searches to improve results, but we do not store the raw text of your search queries.
• Search feedback and relevance signals (e.g., which results you interact with, and hashed query signatures).
• Device information, IP address, and diagnostic logs.

2.5 Technical Data

• Device identifiers, operating system version, and app version.
• Crash reports and performance metrics.

3. How We Use Information

3.1 Core Service Delivery

• Provide recipe discovery, search, and personalised recommendations.
• Enable community features: following, messaging, and recipe sharing.
• Process translations and maintain your content across languages.

3.2 AI-Powered Features

We use artificial intelligence to enhance our service in the following ways:

• Content Moderation: Profile text and community contributions are automatically reviewed using AI to detect inappropriate content, spam, or policy violations. Content that requires human review is queued for our moderation team.
• Semantic Search: We convert recipes into mathematical representations (embeddings) to enable meaning-based search that understands your intent beyond exact keyword matches.
• Halal Compliance Analysis: AI assists in identifying ingredients that may require attention for halal dietary requirements.
• Recipe and Image Generation: When you use AI-assisted recipe creation features, your inputs are processed by AI models to generate suggestions.

3.3 Safety and Security

• Detect and prevent fraud, abuse, and policy violations.
• Maintain platform integrity and protect our community.
• Comply with legal obligations and respond to lawful requests.

3.4 Analytics and Improvement

• Analyse usage patterns to improve features and user experience.
• Generate aggregated statistics protected by differential privacy techniques.
• Conduct research to enhance recipe recommendations and search quality.

4. AI and Automated Decision-Making

We use AI systems provided by Amazon Web Services (AWS Bedrock), OpenAI, and other providers to power various features. These systems process data as follows:

• Moderation Decisions: AI scores content on relevance, quality, safety, and accuracy. Content scoring below our thresholds is automatically rejected; borderline content receives human review.
• Search Ranking: AI models rank search results by relevance to your query. You can always browse categories manually if you prefer.
• Halal Status Determination: AI provides preliminary assessments based on ingredient analysis. These are informational and should be verified with authoritative sources for dietary decisions.

You have the right to request human review of significant automated decisions that affect you. Contact us at privacy@reciperemix.ai to exercise this right.

5. Legal Bases for Processing

Depending on your jurisdiction, we rely on one or more of the following legal bases:

• Contract Performance: Processing necessary to provide core product features you have requested.
• Legitimate Interests: Maintaining platform safety, preventing abuse, improving services, and conducting analytics (balanced against your privacy rights).
• Consent: Optional features such as marketing communications or third-party data sharing.
• Legal Obligations: Compliance with applicable laws and regulations.

6. Data Sharing and Third Parties

6.1 Service Providers

We share data with trusted providers who help us operate our service:

• Amazon Web Services (AWS): Cloud hosting, AI services (Bedrock), authentication (Cognito), storage (S3), and content delivery.
• OpenAI: AI model APIs used to power features such as translation, content moderation, and search quality improvements. When you use these features, relevant text or images you submit may be processed by OpenAI to generate outputs for the Service.
• Sponsored Content (Optional): If enabled in your region, we may display sponsor-provided messages, logos, or surveys. We do not share your personal profile information with sponsors; any reporting is aggregated and privacy-protected.
• Analytics Providers: To understand usage patterns (using aggregated or anonymised data).
• Payment Processors: PCI DSS compliant providers for any payment transactions.

6.2 Affiliate Partners

When you click on product links within recipes, we may share limited information with affiliate partners (such as Amazon) to track referrals. This includes a tracking identifier and product information, but not your personal profile data.

6.3 Health App Integration (Optional)

If you opt in to nutrition data sharing, we may share meal and nutrition information with partner health applications. This requires your explicit consent and can be disabled at any time in settings.

6.4 Legal Requirements

We may disclose data when required by law, legal process, or to protect the rights, property, or safety of Recipe Remix, our users, or the public.

6.5 Business Insights (Aggregated Only)

We may share aggregated, privacy-protected statistics (for example, recipe popularity by country) with business partners to understand supply gaps and improve halal food access. Individual-level responses and identifiable user profiles are never shared or sold. Where available, you can opt out via Settings → Privacy.

We do not sell your personal information.

7. International Transfers and Data Residency

Recipe Remix operates globally using infrastructure in the United States, European Union, and other regions. Where available, you may select your preferred data residency region in your account settings, and we will store your primary data in that region where technically feasible. Otherwise, we select a residency region based on your country and operational constraints.

When we transfer personal data across borders, we ensure appropriate safeguards such as Standard Contractual Clauses, adequacy decisions, or other lawful mechanisms required by applicable law.

8. Data Retention

• Account Data: Retained while your account is active and for 60 days after deletion request.
• Content: Recipes and contributions may be retained in anonymised form for community benefit.
• Search Feedback: Automatically deleted after our configured retention period (typically 90 days).
• Analytics Data: Aggregated statistics are retained indefinitely; individual-level data is deleted or anonymised within 12 months.
• Legal Holds: Data may be retained longer if required for legal proceedings or regulatory compliance.

9. Privacy Protection Measures

We implement technical measures to protect your privacy:

• Differential Privacy: Statistical analyses are protected using mathematical techniques that prevent identification of individuals in aggregate data.
• K-Anonymity: We suppress data points that could identify small groups of users.
• Data Minimization: We collect only what is necessary and avoid storing sensitive data like raw search queries.
• Encryption: Data is encrypted in transit (TLS) and at rest.
• Access Controls: Employee access to personal data is limited and logged.

10. Your Rights

Depending on your location, you may have the right to:

• Access: Request a copy of personal data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your data (subject to legal retention requirements).
• Restriction: Request we limit how we use your data.
• Objection: Object to processing based on legitimate interests.
• Portability: Receive your data in a machine-readable format.
• Withdraw Consent: Withdraw consent for optional processing at any time.
• Complain: Lodge a complaint with your data protection authority.

Exercise these rights via in-app settings or by contacting privacy@reciperemix.ai. We will respond within the timeframe required by applicable law (typically 30 days).

11. Children's Privacy

Our services are not directed to children under 16 (or the minimum age in your jurisdiction). We do not knowingly collect personal data from children. If we learn that we have collected personal data from a child without appropriate parental consent, we will delete it promptly.

12. Acceptable Use

To protect our community and infrastructure, you must not, without our prior written consent:

• Access, scrape, crawl, or harvest data using automated means (bots, spiders, scripts).
• Attempt to bypass rate limits or security measures.
• Use the service in ways that interfere with normal operation or other users' experience.
• Submit content that violates our community guidelines or applicable law.

Violations may result in content removal, account suspension, or legal action.

13. Updates to this Policy

We may update this policy to reflect changes in our practices or legal requirements. For material changes, we will notify you via in-app notice or email before the changes take effect. The "Effective Date" at the top indicates when this version became active.

Continued use of Recipe Remix after updates constitutes acceptance of the revised policy. If you disagree with changes, you may delete your account.

14. Contact Us

For privacy inquiries or to exercise your rights:

For general support, use the in-app feedback feature or visit our help center.