DRAFT FOR LAWYER REVIEW BEFORE LAUNCH
Privacy notice
Last updated 12 October 2026.
Operator and contact
AKA Foods Co., USA operates cookthis.app. Send privacy requests to [email protected]. Draft for lawyer review before launch.
What we keep
We store account and household details, recipes, provenance, corrections, meals, shopping snapshots, cooking plans, task progress, push subscriptions, creator claims and minimal billing and affiliate records. A grocer handles checkout; we do not store card numbers or scrape grocer orders. Affiliate reports may supply order references and commission totals.
Processing
Supabase provides authentication and Postgres. Hetzner hosts the web and worker services. MiMo processes recipe evidence, optional audio and voice questions; Deepgram may handle failed audio transcription. When direct YouTube access fails, the configured Supadata service receives the public video link to retrieve captions or transcribe audio. Resend handles service email. Stripe handles billing and tax. Cloudflare provides network protection and optional aggregate Web Analytics, and R2 stores permitted images when configured. Grocery providers receive the list only when you request a handoff.
Media and retention
Source media is temporary and deleted at job end. Public extraction results are cached for 30 days. Anonymous shopping contents expire after seven days; opaque attribution references may remain for affiliate reconciliation. Household records remain until deletion. Operational backups may retain deleted records until their documented backup retention expires and are not used for normal serving. On restoration, deletion requests must be reapplied.
Cookies and analytics
Cookthis uses essential sign-in cookies and local browser storage for drafts and the loaded cooking plan. It does not include advertising pixels or behavioral tracking scripts. Optional Cloudflare Web Analytics provides aggregate traffic measurements. We do not display a cookie consent banner for this configuration; local requirements and any future tracking changes need legal review.
Your choices
Use Account to export data, delete a household, and manage reminder email preferences when available. Turn push notifications off in your browser. Voice is optional. Contact support for access, correction, deletion or privacy questions. Household and creator data are private unless you deliberately publish a creator recipe or share a link.
Security and transfers
Data may be processed outside your country. We restrict access, use TLS and avoid logging credentials and source media. No system is guaranteed secure. Provider agreements, international transfer mechanisms and statutory retention requirements need review before launch.