Privacy Policy

Privacy Policy


Last Updated: 2025 09 24

Effective Date: 2025 09 24


This Privacy Policy explains how Kitchen Plat (“Kitchen Plate,” “we,” “us,” “our”) collects, uses, discloses, and protects personal information when you use our websites, apps, and related services (the “Service”).


By using the Service, you agree to this Policy. If you do not agree, please do not use the Service.


1) Who we are & how the Service works


Kitchen Plate provides:


  • User Library (private): your personal, non‑public space to save links/recipes/files, generate grocery lists, and get AI‑assisted meal plans.
  • Discover (publisher content): a curated feed showing titles, authors, thumbnails, short excerpts/snippets, structured recipe data (where available), and links to third‑party publisher sites. Full content remains on the publisher’s site.

    • Unless you choose to share, your User Library is private to you.


    This Policy is designed to comply with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) for private‑sector organizations.


    2) Contact us


  • Privacy inquiries / requests: legal@kitchenplate.io]
  • Support: support@kitchenplate.io

    • You may also file a complaint with the Office of the Privacy Commissioner of Canada (OPC).


    3) What we collect


    3.1 You provide to us


  • Account & profile: name, email, password (hashed), preferences (diet, allergens), optional avatar.
  • User Library Content: links/URLs, saved recipe pages, files/notes you add, ratings, tags, shopping lists.
  • Transactions: if you purchase a subscription, we receive payment confirmations from our processor (we don’t store full card numbers).

    • 3.2 Collected automatically


  • Device & app data: IP address, device/OS/app version, language, time zone, crash logs.
  • Usage events: pages/screens viewed, clicks, features used, referrers.
  • Cookies & similar tech: to sign you in, remember settings, measure usage, and improve features

    • 3.3 From third parties (if you connect them)


  • Single‑sign‑on or social auth identifiers.
  • Feeds & publishers: publicly available metadata (titles, images, schema/recipe data) for Discover.
  • Marketing/analytics partners: aggregated campaign and attribution data.

    • We don’t seek to collect sensitive medical information. If you voluntarily enter allergens or goals, we use them only to personalize meal planning.


    4) How we use information


    We use personal information to:


  • Provide and secure the Service (authenticate, operate core features, detect/prevent abuse).
  • Personalize meal plans, recipe suggestions, and grocery lists.
  • Compute metadata (e.g., tags, nutrition estimates) from your User Library to power features.
  • Communicate with you (service notices, security alerts, and—if you consent—marketing emails.
  • Measure & improve (analytics, quality assurance, troubleshooting).
  • Comply with law (security, record‑keeping, legal requests).

    • For most processing, we rely on your knowledge and consent consistent with PIPEDA; we may also use information as permitted without consent (e.g., fraud prevention or legal claims).


    5) User Library vs. Discover content


    5.1 User Library (private)


    You retain all rights in your User Library Content.


    We process it only to operate, secure, troubleshoot, and improve the Service (including creating derived metadata like tags/nutrition and embeddings that help search/recommend).


    We do not publicly display your private User Library Content without your explicit action to share.


    5.2 Discover (third‑party content)


    We don’t claim ownership of publisher content. We show limited previews and link out to the source.


    We respect paywalls/ads on publisher sites and don’t strip monetization when you click through.


    5.3 Publisher opt‑out


    Rights‑holders may request changes/removal from Discover by emailing legal@kitchenplate.io with links and proof of rights. We’ll act promptly and block re‑appearance.


    6) AI features


    Some features use machine learning/generative AI (e.g., meal plans, substitutions, structured recipe extraction). Outputs can be imperfect—please review before relying.

    Your private User Library Content is not used to train third‑party foundation models unless we ask and you opt in. We may use aggregated or de‑identified data to improve our algorithms and product.


    7) When we share information


    We share personal information only as needed to run the Service:


  • Service providers (processors): hosting, analytics, crash reporting, search, email delivery, payments—under contract and confidentiality.
  • Compliance & safety: to comply with law, enforce terms, or protect rights, security, and safety.
  • Business transfers: if we undergo a merger, financing, or sale of assets (we’ll continue protecting your data and notify you of material changes).

    • We do not sell personal information.


    8) International transfers


    We and our service providers may process information outside Canada (e.g., the United States). We use contractual and organizational safeguards to require comparable protection and remain responsible for your personal information.


    9) Your choices & rights (Canada)


    Under PIPEDA, you can:


  • Access your personal information we hold and get information about how it’s used/disclosed.
  • Correct inaccurate or incomplete information.
  • Withdraw consent (we’ll explain any service limitations).
  • Delete your account (we’ll delete active‑system data and then remove from backups per retention).
  • Complain to the OPC if you believe your privacy rights have been violated.

    • How: Email support@kitchenplate.io. We’ll respond within 30 days (extensions allowed in limited cases with notice).


    10) Cookies & tracking


    We use:


  • Essential cookies (sign‑in, security, preferences).
  • Analytics/performance (to understand usage and improve).
  • Communication (to remember your marketing preferences).

    • You can control cookies via your browser settings. Blocking some cookies may limit functionality.


    11) Email & text marketing (CASL)


    We send:


  • Service/transactional messages (e.g., security alerts, receipts) without marketing consent.
  • Marketing messages (email/SMS) only with consent (express or permitted implied), always identifying our business and including an unsubscribe or STOP option.

    • You can withdraw marketing consent anytime using unsubscribe links or by contacting support.


    12) Data retention


    We keep personal information only as long as needed for the purposes in this Policy (e.g., while you have an account), to meet legal/accounting requirements, or to resolve disputes. Then we delete or de‑identify it in line with our retention schedule and industry guidance.


    13) Security


    We use administrative, technical, and physical safeguards (encryption in transit, least‑privilege access, logging, monitoring). No method is 100% secure; we can’t guarantee absolute security.


    14) Children’s privacy


    The Service is not directed to children under 13, and we don’t knowingly collect personal information from them. If you believe a child under 13 provided personal information, contact us and we’ll delete it.


    15) Your privacy when you visit third‑party sites


    When you click to publisher sites from Discover, those sites’ own privacy policies apply. We don’t control third‑party practices.


    16) Changes to this Policy


    We may update this Policy. For material changes, we’ll give at least 30 days’ notice by email or in‑app before they take effect. If you don’t agree, you may discontinue use before the effective date.


    17) Jurisdiction


    This Policy is governed by the laws of the Province of Nova Scotia and the federal laws of Canada applicable therein. Any disputes will be handled as described in our Terms of Service.


    18) How to exercise your rights or complain


    Email legal@kitchenplate.io with “Privacy Request” in the subject line.


    Include enough detail to help us verify your identity and locate your records.


    We respond within 30 days (with allowed extensions if necessary). If you’re unsatisfied, you may contact the OPC for assistance.