Privacy Policy

1. Information we handle

• Account and profile information: your email address, account identifier, username, display name, password authentication information, profile photo, biography, social links, profile visibility, and account preferences. Authentication is handled through Firebase Authentication.
• Content and activity: recipes, recipe photos, imported recipe text and source links, cookbooks, shared cookbook memberships and invitations, meal plans, grocery lists, kitchen inventory, store selections, product and price contributions, likes, comments, follows, blocks, and reports. Some information is saved on your device and some is stored with our cloud services, depending on the feature.
• Feature usage and access: trial dates, Chef access status, feature usage counters, and acceptance of our terms.
• Store searches: ZIP codes, place names, store names, and related search information you enter. Search services may use coordinates associated with a searched place to find stores. This does not require you to provide your device's precise GPS location.
• Photos and camera: images you choose or capture for recipe covers, profile photos, and recipe scanning. Recipe photo text recognition runs on your device. Recipe text and cover images you choose to save or share may then be stored with your recipe.
• Voice features: microphone audio and recognized speech are processed when you enable voice controls. Onastove prefers on-device recognition when available; online recognition may send audio to your device or browser's speech recognition provider. Onastove does not upload voice recordings to its own Firebase storage as part of this feature.
• Notifications: a device push token and notification-related information, including the content needed to deliver social activity notifications. Cooking timers and inventory reminders can also use local device notifications.
• Technical and advertising information: network requests expose information such as your IP address to the services receiving them. Hosting, cloud, and advertising providers may process device information, request logs, diagnostic information, identifiers, and interactions as described below.
• Support information: information you include when contacting us or reporting content or problems.

2. How we use information

We use information to create and authenticate accounts; save and sync supported app data; display profiles and recipes; support follows, comments, and shared cookbooks; import recipes; find stores and estimate ingredient costs; operate voice and notification features; manage trials and feature limits; deliver advertising in eligible versions of the app; respond to requests; moderate content; prevent misuse; and maintain and troubleshoot the service.

3. Sharing and service providers

Other users. Profile information and content you share can be visible to other users. Public profiles and recipes can appear in feeds and discovery. Private profile settings restrict visibility according to the app's access controls; shared cookbook members can access content shared with them. Comments and other interactions may be visible to their recipients or other people who can access the associated content. Avoid putting confidential information in content you share.

Infrastructure. We use Google Firebase for authentication, cloud databases, file storage, hosting, and backend functions. Expo and the platform notification services operated by Google or Apple help deliver push notifications. These providers process information needed to operate those services.

Store and recipe services. Grocery pricing and store searches may contact Kroger, OpenStreetMap-based services, Photon (Komoot), and Zippopotam.us. These services receive the search terms, location information associated with the search, or product requests needed to return results, along with network information such as your IP address. Opening or importing a recipe contacts its source website; web imports may use AllOrigins or corsproxy.io to retrieve a page. These proxy services receive the requested URL and can process the retrieved page. Do not import private links or links containing access credentials.

Device services. Voice recognition may use Google, Apple, or your browser's speech services when on-device recognition is unavailable. Their processing is governed by their own policies and your device settings.

Other disclosures. We may disclose information when required by law, to respond to valid legal requests, or when reasonably necessary to investigate abuse and protect users, the service, or others.

Provider information: Google Privacy Policy, Firebase privacy information, Expo Privacy Policy, and Apple Privacy Policy. External websites and services have their own privacy practices.

4. Advertising

Supported mobile versions of Onastove use Google AdMob to display ads to free-plan users. Active Chef access, including an active Chef trial, removes feed ad slots. The website and builds without the advertising SDK may display Onastove's own Chef promotions instead.

When the advertising SDK runs, Google may collect and share IP addresses, device and account identifiers (including advertising identifiers where available), ad and app interactions, and diagnostic information for advertising, analytics, and fraud prevention. An IP address may be used to estimate a general location. Ad personalization and identifier use depend on consent, platform settings, and applicable requirements.

The app requests consent through Google's consent tools where applicable before requesting ads. You can also manage advertising identifiers and tracking permissions in your device settings. Removing feed ads does not delete information previously processed by advertising providers.

See How Google uses information for advertising and Google Mobile Ads SDK data disclosures.

5. Retention and security

Account and cloud content are generally kept while your account exists or until you remove the associated content. Local preferences and cached information may remain on your device until cleared by the app, your browser, or your device settings. Technical logs and information held by service providers follow the applicable provider's retention practices.

Account deletion removes your account and associated data through the app's deletion process. Limited information may need to remain where necessary to meet legal obligations, address abuse, resolve disputes, or maintain security. Copies independently saved or shared by other people may remain outside our control. We do not promise a fixed deletion period for provider logs or backups.

We use authentication and access controls to help protect information. No method of transmission or storage is completely secure. Information may be processed outside your state or country by our service providers, where data protection laws may differ.

6. Your choices and account deletion

• Edit your profile, change profile visibility, and manage your content through the app.
• Manage camera, photo, microphone, speech recognition, tracking, and notification permissions through your device or browser settings. Disabling a permission may prevent the corresponding feature from working.
• To delete your account, open Settings → Account → Delete account in Onastove and follow the password-confirmation steps. The deletion process removes your sign-in account, profile, associated user records, authored recipes and feed posts, and related activity. Shared cookbooks you own are removed, and memberships in other shared cookbooks are removed. It also attempts to remove uploaded files. Verified community product records may remain in the shared catalog.
• If you cannot access the app, use the privacy contact below to request account deletion. Contact us from the email address associated with your account when possible. We may need to verify ownership before acting on a request.
• Uninstalling the app does not delete your cloud account.

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, object to or restrict certain processing, or withdraw consent. Contact us to make a request. You may also have the right to complain to your local data protection authority.

7. Children

Onastove is not intended for children under 13, or anyone below the minimum age required to use the service in their country. If you believe a child has provided personal information in violation of this policy, contact us so we can investigate and take appropriate action.

8. Changes to this policy

We may update this policy as Onastove changes. The date above identifies the latest revision. We will provide additional notice when required for material changes.

9. Contact Onastove

For privacy questions, requests about your information, or account deletion requests, email oneonastove@gmail.com.