Privacy policy
Last updated [DATE]
Stockpot (“we”, “us”) is a recipe, meal-planning, shopping-list and pantry app run by [BUSINESS NAME], [ADDRESS]. This policy explains what we collect, why, who helps us run the service, and the choices you have. Questions: [CONTACT EMAIL].
The short version
- We collect what you put into Stockpot (recipes, plans, your pantry and lists, photos you add) so the app can work.
- We never sell your data, and we don't show ads.
- Some features send content to companies that do work for us: an AI service reads recipes and receipts, a payment processor handles payments, and so on. They're listed below.
- You can download your data or delete your account at any time in Settings.
What we collect
Your account. Your name or display name, your @handle, and your email address if you sign up with one. Stockpot groups people into a “kitchen” (household); we store who belongs to which kitchen and their role.
What you put in the app.
- Recipes you save, and the links you share into Stockpot (Instagram, TikTok, YouTube, websites).
- Photos you add: cookbook pages, receipts, and recipe photos.
- Your meal plan, shopping list, pantry, barcode scans, ratings, notes, “made it” history and timer notes.
- Meal timelines, and cooking-pace measurements from Cook mode (how long your steps take).
- Friends and the recipes you send them. Tips you post, with the audience you chose (friends or everyone).
- Feedback you send us.
When you import a recipe from a public post or web page, we fetch that public content: the caption, the video's audio (turned into text on our own servers), video frames and the page text. We use it to write the recipe.
Technical information. A sign-in cookie that keeps you signed in. If you turn on timer alerts, a notification address from your browser. Our servers keep ordinary logs, which include IP addresses and the pages requested; we use them to keep the service running and to stop abuse.
Payments. If you subscribe, our payment processor (Stripe) collects your card or wallet details. We never see or store your card number. We keep the plan you're on, the subscription's status and dates, and Stripe's reference numbers for your account.
Usage records. For each AI-powered action (an import, a polished cook plan, a receipt read) we record which kitchen used it, and when, so monthly allowances work and we can keep the service affordable.
On your device
The app keeps some things in your browser: your settings, running timers, scans waiting to be sent, and saved copies of recipes and lists so they work offline. Signing out clears the saved copies.
What's shared, and with whom
Within your kitchen. Everyone in your kitchen shares its recipes, plan, pantry and shopping list.
With other Stockpot users.
- Your profile: your display name and @handle can be seen by people who look you up to add you as a friend.
- Recipes and tips: recipes you send and tips you post are seen by the people you chose. Your private nicknames for friends stay private.
- The shared recipe library: when you import a recipe from a public post or page, we keep a processed copy, so the next person who imports the same link gets it instantly. That copy contains only the public recipe, never your edits, notes, ratings or photos.
- Shared lookup data: barcodes and receipt lines that kitchens confirm (for example, “this barcode is salsa” or “MB SALSA MED at Market Basket is salsa”) are pooled so everyone's scans and receipts work better. Pooled entries don't say who confirmed them.
With companies that run parts of the service for us (“processors”). They may use the data only to provide their service to us:
| Who | What for | What they receive |
|---|---|---|
| Anthropic (Claude) | Reading recipes, receipts and cookbook photos; writing polished cook plans | The text, transcripts and images needed for that task |
| Apify | Fetching public Instagram posts you share into Stockpot | The post's link |
| Stripe | Payments, subscriptions and receipts | Your payment details and email (entered on Stripe's page), your plan |
| [EMAIL PROVIDER] | Sending sign-in links and account emails | Your email address and the message |
| Browser push services (Apple, Google, Mozilla) | Delivering timer and reminder alerts you turned on | The alert text |
| Open Food Facts, UPCitemdb | Looking up products by barcode | The barcode number only |
| [HOSTING PROVIDER] | Running our servers and storing backups | Everything stored in the service |
| Cloudflare Turnstile | Telling people from bots at sign-up | Browser signals during sign-up |
We may also share information when the law requires it, to protect someone's safety, or as part of selling or merging the business (and the new owner would be bound by this policy).
How long we keep it
We keep your data while your account is open. When you delete your account, we delete your kitchen's data, or just your part of it if others are still in the kitchen, from our live systems right away, and from our backups within [7] days as they roll over. We keep payment and tax records as long as the law requires. Public recipes in the shared library, and pooled barcode and receipt-line data, aren't personal and may stay.
Your choices and rights
- Download your data: Settings → Download my data.
- Delete your account: Settings → Delete my account. This also cancels any subscription.
- Correct things: edit your name, @handle, recipes and pantry in the app.
- Alerts: turn off timer alerts in Settings or in your phone's settings.
- Depending on where you live, you may have more rights, such as knowing what we hold or objecting to some uses. Email [CONTACT EMAIL] and we'll answer within [30] days.
Children
Stockpot isn't for children under 13, and we don't knowingly collect their information. If you think a child has signed up, contact us and we'll delete the account.
Security
Connections are encrypted (HTTPS), sign-in links can be used only once, and card details stay with Stripe. Each kitchen's data is kept separate from every other kitchen's. No system is perfectly secure; if a breach affects your information, we'll tell you as the law requires.
Where your data is
Our servers are in [the United States]. Some processors above may handle data in other countries, under their own safeguards.
Changes
If we change this policy in a way that matters, we'll say so in the app before the change takes effect.