← Back to CookCam AI

Privacy Policy

How CookCam AI collects, uses, and protects your information

1. Who We Are

ABM Studios LLC ("ABM," "we," "our," "us") operates the CookCam AI mobile application and related websites, communications, and services (collectively, the "Services"). We are registered in the United States at 30 North Gould Street, Sheridan, WY 82801.

2. Scope

This policy describes how we collect, use, disclose, and safeguard information about individuals who:

• download, install, or use the CookCam AI app;
• visit our websites or contact our support team;
• participate in the CookCam AI Creator program.

3. Information We Collect

Category	Examples	Source	Purpose	Retention
Account Data	name, email, internal user ID, password hash	you	create and secure your account	until account deletion + 30 days backup window
Profile Data	dietary preferences, cooking skill level	you	personalize recipes	editable by you; deleted with account
Image Data	photos you take of ingredients; AI-generated ingredient labels	you; automated processing	ingredient recognition	images deleted < 24 h; labels stored while account active
Usage Data	buttons tapped, screens visited, search and scan history, saved/favorited recipes	automated logging	improve and personalize the app	3 years, then aggregated
Subscription Data	plan tier, renewal date, Apple / Google transaction IDs	app stores	provide paid features, billing support	while subscription active + 7 years (tax)
Technical Data	device model, OS, app version, IP, device identifiers, crash logs	automated logging	security, diagnostics	2 years, then aggregated
Creator Revenue Data (Creator tier only)	affiliate link clicks, payouts, tax forms	you; analytics	pay commissions and meet tax obligations	7 years (legal)

4. Legal Bases for Processing (GDPR/UK GDPR)

Purpose	Legal Basis
Provide core app functions	Art. 6 (1)(b) contract performance
Personalize content	Art. 6 (1)(a) consent (set in app settings)
Improve and secure services	Art. 6 (1)(f) legitimate interest
Send marketing communications	Art. 6 (1)(a) consent
Comply with law, respond to legal requests, keep tax records	Art. 6 (1)(c) legal obligation

You may withdraw consent at any time in Settings or by emailing privacy@cookcam.ai.

5. How We Use Information

• Run, maintain, and improve ingredient recognition, recipe generation, and all other app features.
• Personalize recipe recommendations, tips, and in-app content.
• Monitor performance, detect fraud, and fix bugs.
• Send transactional messages (account, subscription, security).
• Send optional product updates, promotions, or newsletters if you opt in.
• For Creator tier: calculate commissions, display analytics, and remit payouts.

6. Disclosure of Information

Recipient	Reason	Safeguard
Supabase	secure cloud database, authentication	encrypted at rest and in transit
OpenAI, Anthropic, or equivalent LLM provider	transform ingredient lists into recipes; only pseudonymised ingredient data sent	no personal identifiers sent
Analytics & Crash Reporting (e.g., PostHog, Sentry)	performance metrics, crash logs	IP truncated; no image data
Apple App Store / Google Play	billing and subscription management	governed by their privacy terms
Tax & payment processors (Creator tier)	payouts, 1099/1042-S	data shared only as required by law
Authorities or buyers	legal compliance, merger/acquisition	bound by this policy or equivalent safeguards

We do not sell or share personal information for cross-context behavioural advertising. California residents can exercise "Do Not Sell or Share" rights via in-app controls.

7. International Transfers

We store data in the United States. If you are outside the US, data may be transferred to US servers. We rely on Standard Contractual Clauses and equivalent safeguards for EEA/UK/Swiss transfers. A copy of these clauses is available on request.

8. Security Measures

• TLS 1.2+ for all data in transit.
• AES-256 encryption at rest.
• Role-based access; least-privilege principle.
• Annual penetration tests; quarterly access reviews.
• 24-hour image auto-deletion job.
• Incident response plan that meets GDPR/CPRA breach-notice timelines.

9. Your Rights

Jurisdiction	Rights
All users	access, correction, deletion, withdrawal of consent, restriction of processing
EEA/UK/Switzerland	data portability, objection, lodge complaint with supervisory authority
California	know, delete, correct, opt-out of sale/share, limit use of sensitive data, non-discrimination
Virginia, Colorado, Connecticut, Utah	similar rights as above, exercised via in-app Privacy Center

Submit requests in-app under Settings → Privacy Center or email privacy@cookcam.ai. We verify identity via signed-in session or two-factor email check and respond within 30 days (45 days in CA).

10. Retention Schedule

• Active account: keep data only as needed for stated purposes.
• Deleted account: erase personal data within 30 days except records we must keep for legal or security reasons (max 7 years).
• Anonymised, aggregated analytics kept indefinitely.

11. Children

The Services are not directed to children under 13. We do not knowingly collect information from anyone under 13. Parents who believe their child has provided personal data may contact us for immediate erasure.

12. Automated Decision-Making & Profiling

We use automated algorithms to suggest recipes and personalise content. These decisions produce no legal or similarly significant effects. You may request human review by contacting support.

13. Changes to This Policy

We post any material changes in-app and update the "Last Updated" date. Continuing to use the Services after the effective date means you accept the revised policy.

14. Contact