Privacy Policy

1. Introduction

Marrow ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered recipe extraction service ("the Service"), available via web, iOS, and Android.

2. Information We Collect

We may collect the following types of information:

• Account Information: Email address, phone number, and authentication data when you create an account (via email, phone, or Google Sign-In)
• Usage Data: URLs you submit for recipe extraction, saved recipes, cooking session history, and interaction patterns
• Device Information: Browser type, device type, operating system, and IP address
• Analytics Data: How you interact with the Service, including page views, feature usage, and performance metrics

3. Third-Party Services

We use the following third-party services to operate and improve the Service:

• Google Firebase: Authentication, database (Firestore), cloud storage, hosting, and analytics. Data is stored on Google Cloud servers in the United States.
• Google Gemini AI:Recipe content is processed by Google's Gemini API to extract structured recipe data from web pages and videos. Submitted URLs and their content are sent to Google for AI processing.
• YouTube Data API: When you extract recipes from YouTube videos, we access video metadata and transcripts via the YouTube Data API. By using this feature, you are also bound by YouTube's Terms of Service and Google's Privacy Policy.
• Google Analytics: We use Google Analytics (via Firebase) to understand usage patterns and improve the Service.

4. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve the Service
• Process recipe extraction requests using AI
• Save and sync your recipe library across devices
• Personalize your experience and provide recipe recommendations
• Communicate with you about updates and support
• Detect and prevent fraud, abuse, or security incidents
• Comply with legal obligations

5. Data Storage and Retention

Your data is stored on Google Cloud servers in the United States using Firebase services. We implement industry-standard security measures including encryption in transit (TLS) and at rest.

Data retention periods:

• Account data: Retained until you delete your account
• Recipes: Retained until you delete them or delete your account
• Extraction jobs: Automatically deleted after 7 days
• Notifications: Automatically deleted after 7 days
• Analytics data:Retained per Google's standard retention policies

6. Data Sharing

We do not sell your personal information. We may share data with:

• The third-party service providers listed in Section 3, as necessary to operate the Service
• Law enforcement when required by law or valid legal process
• Third parties in connection with a merger, acquisition, or sale of assets

When you set a recipe's visibility to "public," its title, description, ingredients, steps, and cover image become visible to all users of the Service.

7. Cookies and Tracking

We use the following types of cookies and similar technologies:

• Essential cookies: Required for authentication, session management, and security (e.g., Firebase Auth tokens)
• Analytics cookies: Google Analytics cookies to understand usage patterns and improve the Service
• Preference cookies: To remember your settings, such as locale and notification preferences

You can manage cookie preferences through our cookie consent banner or your browser settings. Disabling essential cookies may prevent you from using the Service.

8. Your Rights

Depending on your location, you may have the following rights:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (available in Settings > Delete Account, or by contacting us)
• Object to or restrict processing of your data
• Request data portability (export your recipes and profile)
• Withdraw consent at any time

California Residents (CCPA): You have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at the address below.

EU/EEA Residents (GDPR):Your data is transferred to and processed in the United States. We rely on Google's data processing agreements and standard contractual clauses for lawful international data transfers.

9. Children's Privacy

The Service is not intended for children under 13 years of age (or 16 in the EU/EEA). We do not knowingly collect personal information from children. If you believe we have collected such information, please contact us immediately and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we may also send a notification through the Service.

11. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a privacy concern, please contact us at support@marrowrecipe.com.