Privacy Policy

Privacy Policy


Last Updated: August 17, 2026

Effective Date: August 17, 2026


This Privacy Policy explains how Kitchen Plate (“Kitchen Plate,” “we,” “us,” “our”) collects, uses, discloses, and protects personal information when you use our websites, apps, and related services (the “Service”).


This Policy applies to every user who can access the Service, including our website, iOS app, and Android app, regardless of country or how you signed in.


Kitchen Plate operates from Canada. Depending on where you live, additional privacy rights and requirements may apply.


1) Who we are & how the Service works


Kitchen Plate provides:


  • User Library (private): your personal, non‑public space to save links/recipes/files, generate grocery lists, and get AI‑assisted meal plans.
  • Discover (publisher content): a curated feed showing titles, authors, thumbnails, short excerpts/snippets, structured recipe data (where available), and links to third‑party publisher sites. Full content remains on the publisher’s site.

    • Unless you choose to share, your User Library is private to you.


    This Policy is designed to comply with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and other privacy laws that apply to the Service.


    2) Contact us


  • Privacy inquiries / requests: legal@kitchenplate.io
  • Support: support@kitchenplate.io

    • You may also file a complaint with the Office of the Privacy Commissioner of Canada (OPC).


    3) What we collect


    3.1 You provide to us


  • Account & profile: name, email address, authentication information managed through our identity provider, dietary preferences, allergens, other preferences, and an optional avatar. We do not store plaintext passwords.
  • User Library Content: recipe links and pages, files, images, notes, ratings, tags, shopping lists, meal plans, chat messages, feedback, and survey responses.
  • Voice and audio: audio you choose to provide when using voice or transcription features.
  • Transactions: subscription status, purchase identifiers, payment confirmations, and limited transaction details. Payment processors and app stores handle full payment-card details; we do not store full card numbers.

    • 3.2 Collected automatically


  • Device & app data: IP address, browser and device type, operating system and app version, language, time zone, device or installation identifiers, and push-notification tokens.
  • Usage & diagnostics: pages or screens viewed, clicks, features used, request metadata, client and server logs, crash reports, and performance information.
  • Referral & attribution data: referring pages, campaign parameters, and advertising identifiers where available.
  • Cookies & similar technologies: cookies, local storage, software development kits (SDKs), and similar tools used to sign you in, remember settings, measure usage, attribute campaigns, and improve the Service.

    • 3.3 From third parties (if you connect them)


  • Single‑sign‑on identifiers if you sign in with a third‑party account, which may include your name, email address, and a unique account identifier.
  • Payment processors and app stores: subscription status, purchase identifiers, and transaction confirmations.
  • Feeds, publishers, and social sources: publicly available titles, images, structured recipe data, and other content associated with links you submit or content shown in Discover.
  • Marketing and analytics partners: campaign, referral, attribution, and event information. This information may relate to an individual browser, device, or account and is not always aggregated.

    • We don’t seek to collect sensitive medical information. If you voluntarily enter allergens or goals, we use them only to personalize meal planning.


    4) How we use information


    We use personal information to:


  • Provide and secure the Service (authenticate, operate core features, detect/prevent abuse).
  • Import and save recipes, operate chat and voice features, and provide customer support.
  • Personalize meal plans, recipe suggestions, and grocery lists.
  • Compute metadata (e.g., tags, nutrition estimates) from your User Library to power features.
  • Process subscriptions and maintain purchase entitlements.
  • Send service notices, security alerts, reminders, and optional marketing communications.
  • Measure & improve (analytics, quality assurance, troubleshooting).
  • Measure campaign performance and understand how users find and use the Service.
  • Comply with law (security, record‑keeping, legal requests).

    • We process information in accordance with applicable law, including with consent where required, to provide features you request, to operate and secure the Service, and to meet legal obligations.


    5) User Library vs. Discover content


    5.1 User Library (private)


    You retain all rights in your User Library Content.


    We process it only to operate, secure, troubleshoot, and improve the Service (including creating derived metadata like tags/nutrition and embeddings that help search/recommend).


    We do not publicly display your private User Library Content without your explicit action to share.


    5.2 Discover (third‑party content)


    We don’t claim ownership of publisher content. We show limited previews and link out to the source.


    We respect paywalls/ads on publisher sites and don’t strip monetization when you click through.


    5.3 Publisher opt‑out


    Rights‑holders may request changes/removal from Discover by emailing legal@kitchenplate.io with links and proof of rights. We’ll act promptly and block re‑appearance.


    6) AI features


    Some features use machine learning or generative AI for meal plans, substitutions, recipe extraction, search, chat, transcription, and voice interactions. To provide these features, relevant content may be sent to AI service providers, including OpenAI. Depending on the feature, this may include recipe text and images, chat messages, instructions, and audio you submit.


    AI providers process this information to return the result you requested and may retain it for limited periods for security, abuse prevention, or service operation under their applicable terms, settings, and our agreements with them. We do not intentionally opt your private User Library Content into training third‑party general-purpose models without first disclosing that use and obtaining consent.


    AI-generated outputs can be incomplete or inaccurate. Please review them before relying on them, especially for allergens, nutrition, or health-related decisions. We may use aggregated or de‑identified information to improve Kitchen Plate.


    7) When we share information


    We disclose personal information only as needed for the purposes described in this Policy:


  • Cloud hosting and operations: providers such as Amazon Web Services host accounts, databases, files, logs, email delivery, and other infrastructure.
  • Authentication: our identity provider and any third-party sign-in provider you choose process information needed to authenticate you.
  • AI and search: providers such as OpenAI and search or content-processing services receive the content needed to perform a feature you request.
  • Payments: Stripe, RevenueCat, Apple, and Google may process subscription, purchase, and entitlement information, depending on where you subscribed.
  • Analytics and advertising: Google Analytics/Firebase, PostHog, Meta, and similar providers may receive usage events, pseudonymous identifiers, device/browser information, IP address, referral and campaign data, and limited subscription or purchase events. Where used, contact identifiers may be transformed, such as by hashing, before transmission.
  • Communications: email and push-notification providers process contact details, device tokens, and message-delivery information.
  • Compliance & safety: to comply with law, enforce terms, or protect rights, security, and safety.
  • Business transfers: if we undergo a merger, financing, or sale of assets (we’ll continue protecting your data and notify you of material changes).

    • We do not sell personal information for money. Some privacy laws may define certain advertising-related disclosures as “sharing” or “selling” even when no money is exchanged. You may contact us to exercise any applicable rights concerning those disclosures.


    8) International transfers


    We and our service providers may process information outside Canada (e.g., the United States). We use contractual and organizational safeguards to require comparable protection and remain responsible for your personal information.


    9) Your choices & rights


    9.1 How to request deletion of your data


    Any user of Kitchen Plate may request that we delete their personal information. This applies to our website, iOS app, and Android app, and regardless of how you created or signed in to your account.


    You can request deletion in either of the following ways:


    1. In the Service: open **Settings** (on mobile, first tap your profile avatar), select **Security**, then select **Delete account**. This initiates deletion of your Kitchen Plate account and personal information as described below.

    2. By email (available even if you cannot sign in): email support@kitchenplate.io or legal@kitchenplate.io with the subject **“Delete my data”** or **“Privacy Request”**. Include the email address associated with your account, or enough information for us to identify you. We will verify your identity and process the request.


    After a verified request, we remove access to your account and begin deleting or de‑identifying personal information in active systems. Core account records and saved content are removed promptly. Some information may remain for a limited period in backups, security and fraud-prevention records, transaction records, analytics records, or logs, or where retention is required to comply with law, resolve disputes, or enforce agreements. Backup copies are not used for ordinary business purposes and are removed through their normal expiration cycle. Aggregated or de‑identified information that cannot reasonably be associated with you may be retained.


    Deleting your Kitchen Plate account does not automatically cancel a subscription billed through the Apple App Store or Google Play. You must manage or cancel those subscriptions through the applicable store.


    9.2 Other privacy rights


    Depending on where you live, you may have rights to:


  • Access your personal information and learn how it is used or disclosed.
  • Correct inaccurate or incomplete information.
  • Request deletion or a portable copy of your information.
  • Withdraw consent or object to certain processing, subject to legal limitations.
  • Complain to a privacy regulator.

    • The deletion right and instructions in section 9.1 are available to every Kitchen Plate user, whether or not local law independently requires deletion. Canadian users may also complain to the Office of the Privacy Commissioner of Canada (OPC).


    10) Cookies & tracking


    Our website and apps use cookies, local storage, SDKs, and similar technologies for:


  • Essential functions: sign-in, security, session management, and preferences.
  • Analytics and performance: understanding usage, diagnosing problems, and improving features.
  • Advertising and attribution: understanding how users find the Service, measuring campaigns, and associating activity with advertising or referral sources.
  • Communications: remembering communication preferences and supporting message delivery.

    • You can control cookies and local storage through your browser and can use operating-system privacy controls for mobile advertising identifiers and tracking permissions. Blocking some technologies may limit functionality. You may also contact us about opt-out rights available in your jurisdiction.


    11) Email communications


    We send:


  • Service and transactional messages, such as security alerts, verification messages, receipts, and important account notices.
  • Product updates, recommendations, or marketing emails where you have consented or where applicable law otherwise permits them.

    • You can withdraw marketing consent at any time using an unsubscribe link, changing available notification preferences, or contacting support. Unsubscribing from marketing does not stop essential service or transactional messages.


    12) Data retention


    We retain personal information only as long as reasonably needed for the purposes described in this Policy. Retention depends on the type of information, whether your account remains active, operational and security needs, applicable limitation periods, and legal, tax, accounting, fraud-prevention, and dispute-resolution requirements.


    When information is no longer needed, we delete or de‑identify it. Some information may remain for a limited period in backups or logs until those copies expire through normal system cycles. Third-party providers may retain information according to their own retention requirements and our agreements with them.


    13) Security


    We use administrative, technical, and physical safeguards (encryption in transit, least‑privilege access, logging, monitoring). No method is 100% secure; we can’t guarantee absolute security.


    14) Children’s privacy


    The Service is not directed to children under 13, and we don’t knowingly collect personal information from them. If you believe a child under 13 provided personal information, contact us and we’ll delete it.


    15) Your privacy when you visit third‑party sites


    When you click to publisher sites from Discover, those sites’ own privacy policies apply. We don’t control third‑party practices.


    16) Changes to this Policy


    We may update this Policy as the Service or legal requirements change. We will post the revised Policy with a new effective date and provide additional notice by email or in the Service when required by law or when a change materially affects how we handle personal information.


    17) Jurisdiction


    This Policy is governed by the laws of the Province of Nova Scotia and the federal laws of Canada applicable therein. Any disputes will be handled as described in our Terms of Service.


    18) How to exercise your rights or complain


    To request deletion of your data, follow the steps in section 9.1. Those steps are available to every user who can access the Service.


    For other privacy requests (access, correction, questions, or complaints), email legal@kitchenplate.io with “Privacy Request” in the subject line.


    Include enough detail to help us verify your identity and locate your records.


    We respond within the period required by applicable law. For requests governed by PIPEDA, we generally respond within 30 days, subject to permitted extensions. If you are unsatisfied, you may contact the OPC or another privacy regulator applicable to you.