Privacy Policy

Savor is made by Exodus Technologies (“we”, “us”). This policy explains what information we collect when you use the Savor app, why we collect it, who we share it with, and the controls you have over it — including deleting all of it, any time.

• Account information— the email and password you sign up with, and the display name you choose. Your password is never visible to us; it's handled entirely by our authentication provider, Supabase, using industry-standard hashing.
• Recipe preferences — the occasion, cuisine, budget, ingredients on hand, dietary needs, and calorie target you select when generating a recipe, including anything you say out loud if you use voice input instead of tapping through — that recording is transcribed and then discarded, never stored.
• A fridge or pantry photo (Pro only, optional)— if you use the fridge-scan feature, the photo you take is analyzed to build your ingredient list and is never saved by us, on your device or in your account. See “Who we share it with” below for how Google's free tier handles that image on their end.
• Recipes you generate or save — stored in your account so your cookbook persists between sessions and devices.
• Usage data— how many recipes you've generated in the current month, and your plan (Free or Pro), used to enforce the free-tier limit and unlock Pro features.
• Payment data — if you upgrade to Pro, your payment is processed entirely by Apple (App Store) or Google (Google Play), through our subscription platform, RevenueCat. We never receive, see, or store your card number. RevenueCat shares your subscription status (active, expired, renewal date) with us so we can unlock Pro features on your account; it does not share your card details, and we cannot use it to charge you.
• Push notification token— a device identifier used only to deliver the notifications you've opted into, via Apple, Google, and Expo's standard push notification infrastructure.
• Device and diagnostic data — basic technical information (app version, operating system) automatically included with requests to our servers, used only for debugging and abuse prevention.

We do not collect your contacts, photos (beyond the one image you explicitly choose to save when sharing a recipe card), precise location, or browsing activity outside the app.

• To generate the recipe you asked for and save it to your cookbook.
• To identify ingredients from a fridge/pantry photo, if you use that Pro feature.
• To operate your account, including authentication and enforcing plan limits.
• To process Pro subscription payments and let you manage that subscription.
• To send the notifications you've explicitly opted into.
• To detect, prevent, and respond to fraud, abuse, or technical issues.
• To comply with legal obligations where applicable.

We do not use your data to train third-party AI models on our own initiative, and we do not sell your data to anyone, for any reason.

• Supabase — hosts our database and handles authentication. Supabase stores the account, recipe, and usage data described above on our behalf, under its own security and privacy commitments.
• Groq and Google Gemini — power recipe generation. When you generate a recipe, the preferences you selected (occasion, cuisine, ingredients, dietary needs) are sent to Groq to produce the recipe text, with Gemini used as a backup if Groq is unavailable. Your name, email, or account identity are never included in that request.
• Google Gemini (fridge-scan photos)— if you use the Pro fridge-scan feature, your photo is sent to Google Gemini to identify ingredients, and is not stored by us afterward. We use Gemini's free tier for this, and Google's own free-tier terms permit them to use inputs like this to improve their products — this is Google's policy for their free tier generally, not something specific to Savor. If you'd rather your photos not be used this way at all, don't use the fridge-scan feature — you can always add ingredients by tapping or voice instead.
• Apple and Google — process Pro subscription payments through the App Store and Google Play. They receive what they need to process the transaction (such as your email and card details) directly from you; we never handle your card details ourselves.
• RevenueCat — the subscription platform that connects your App Store/Google Play purchase to your Savor account, so we know your Pro status without ever seeing your payment details.
• Expo / Apple / Google — deliver push notifications to your device using the token described above.

These providers may process data outside your home country. Each maintains its own security practices; we only work with providers that give contractual commitments to protect your data appropriately.

We may also disclose information if required by law, or to protect the rights, safety, or property of Savor, our users, or the public.

If you use the “Share” feature, the recipe you choose to share (its content and your display name) becomes viewable by anyone you send the link to — this is intentional, so recipients don't need an account just to view a recipe you sent them. No other account data is included, and a shared recipe is never automatically added to the recipient's own cookbook.

• Edit your display name or reroll your avatar any time in Settings.
• Turn notifications on or off any time in Settings.
• Cancel a Pro subscription any time in Settings — you keep Pro access until the period you already paid for ends.
• Request a copy of your data — see our data request page.
• Delete your account any time, in-app, via Settings → Delete account. This permanently deletes your account, your cookbook, and cancels any active subscription, immediately. See our account deletion page for details.

Depending on where you live, you may have additional rights over your personal data — including the right to access, correct, or object to certain processing. Contact us using the details below and we will respond within a reasonable time, generally within 30 days.

We keep your data for as long as your account exists, so the app can function (your cookbook, your plan status, your preferences). Deleting your account deletes it immediately and permanently. We may retain limited transaction records where required by law (for example, financial records Apple or Google are independently obligated to retain), independent of your Savor account.

We use industry-standard safeguards to protect your data, including encryption in transit (HTTPS) for all communication with our servers, row-level access controls in our database so accounts can only ever read their own data, and encrypted on-device storage for your session credentials. No system is perfectly secure, but we work to keep your data protected and will notify you if we become aware of a breach affecting your information, as required by law.

Savor is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has provided us with personal information, contact us and we will delete it.

If we make a meaningful change to this policy, we'll update the date at the top of this page. If changes are significant, we'll also notify you in-app.

Questions about this policy or your data? Reach us at exodustechnologies23@gmail.com.