Stockpot Privacy Policy
Stockpot helps you find recipes you can cook with what you already have. This policy explains what information the app handles, why, and what happens to it. You can cook as a guest. Where the account feature is available, creating an account is optional.
What the app collects
- Optional accounts. If you create an account, Google Firebase Authentication manages your email address, password credentials and verification status. Stockpot forwards your password securely to Firebase for sign-in, recovery or deletion and does not save the password itself. Our server keeps your email address and Firebase session credentials encrypted, associated with an account identifier. Browser sign-in uses a protected cookie; iPhone sign-in uses secure device storage. After email verification, your kitchen, favorites, saved guides, viewing and cooking history, display name, language, appearance, allergy and dietary choices, and recipe preferences are stored with that account so they can synchronize across your devices. Guest data remains separate.
- Where you heard about Stockpot, if you choose to answer. The welcome screen offers an optional list of sources, such as the App Store, a social platform or a friend. Your answer, or the fact that you skipped it, is saved with the app's random device identifier. We compare it with searches and guide use to understand which sources bring people who use the app. We do not infer an answer, ask for an account, or use an external analytics kit for this question.
- Device and account identifiers. Stockpot stores a random identifier on your device or browser to manage guest searches, requests, history and community features. When you sign in, requests also identify your account, and eligible search balances, referrals and membership use that account. RevenueCat may associate purchase identifiers when you sign in or restore a purchase. These identifiers are not your Apple ID or payment card number. Removing the app or clearing browser data does not delete an account or the records held on our server.
- Your kitchen. The ingredients and cookware you select, your time and meal choices, and any words you type into the search are sent to our server to find recipes. Your kitchen list is stored on your device and, if you use a verified account, with your account for synchronization. The server keeps recipes it has verified, grouped by the combination of ingredients and time they were found for, so the next person with a similar kitchen gets a faster answer; those groupings are not tied to your device or account.
- Words you type into the ingredient picker. New words are recorded (with a count of how many different devices typed them) and reviewed about once a day so useful ones can be added to everyone's picker. Words that are not food, or not fit to show, are dropped.
- Photos, if you use the camera feature. A photo you take or choose is sent to our server, which sends it to Anthropic's Claude API to identify the food in it. Photos are processed to produce the list of items and are not stored by Stockpot after the scan. What we keep is the list of items the scanner suggested and which ones you kept, removed or typed in, for up to 45 days, to make the scanner more accurate over time.
- Comments, ratings and your display name. Comments and the display name you choose are public to other users of the app. Ratings are stored with your device identifier and shown to others only as part of an average. You can delete your own comments at any time, clear your display name to appear as Anonymous, and turn comments off.
- Reports and blocks. If you report a comment, we record which comment, your device identifier and the reason you gave. If you block a commenter, the server keeps a list for your device so their comments stay hidden from you.
- Bug reports. If you send one, we receive the words you wrote plus the platform, operating system version, app version and the screen you were on. Nothing else is attached.
- Purchases and billing. Apple processes in-app purchases. Where web checkout is available, RevenueCat manages the subscription and Stripe processes payment. We use the plan, purchase and renewal dates, payment status and device or account identifier to provide access and support. Web checkout also collects a billing email and payment and billing-address information. RevenueCat and Stripe process this information for payments, receipts, tax, fraud prevention and billing support. We can access billing records through their dashboards, but Stockpot does not receive or store your full card number or security code on its own server.
- Ads. The free tier may offer a short rewarded video ad in exchange for an extra search. Ads are served by Google AdMob. We request non-personalized ads only and the app does not ask to track you across other apps and websites. To serve and measure an ad, Google receives technical information such as your IP address, device type and operating system version, and, when an ad is watched to the end, tells our server so the search can be granted. See Google's advertising privacy information.
What the app does not collect
Stockpot does not request your contacts or precise device location. An email address is needed for an account, web billing or email support. Payment providers may request billing details. The app does not read your photo library beyond the photos you pick for a scan.
Who else processes data
- Anthropic (Claude API): receives searches (ingredients, cookware, time, meal and flavor choices, typed keywords) and, for the camera feature, photos, to produce results. See anthropic.com/privacy.
- Apple: in-app purchases and subscriptions.
- Google Firebase Authentication: manages optional accounts and sends verification and password recovery emails, under Google's privacy policy.
- Hosting and storage providers for our server and database (Railway and Upstash), which hold the data described above on our behalf.
- Google AdMob: serves the rewarded ads in the free tier, as described above, under Google's privacy policy.
- RevenueCat: keeps the subscription record for your device or verified account and tells our server when it changes, under RevenueCat's privacy policy.
- Stripe: processes browser subscription payments and billing details under Stripe's privacy policy. Stockpot does not store full payment card numbers.
We do not sell your personal information. We disclose information to the providers described above to operate Stockpot, and may disclose it when required by law or necessary to protect users, investigate fraud or enforce these terms.
How long we keep it
An optional account and its synchronized data remain until you delete the account. Stockpot sign-in sessions last up to 30 days and are removed when you sign out or delete the account. Short-lived hashed request counters help prevent abuse: email counters expire within one hour and network counters within one minute. A non-identifying deletion marker lasts up to ten minutes to prevent an interrupted sign-in from recreating a deleted session.
Data tied to your device identifier (allowance, seen recipes, ratings, comments, settings, blocks) stays until you delete it in the app or ask us to remove it. Scan feedback is kept for up to 45 days. Bug reports and comment reports are kept until reviewed and for a limited time after. Recipes and guides the server has verified are kept indefinitely; they are about recipes, not about you.
Deleting a Stockpot account does not automatically erase purchase, invoice, refund or tax records held by Apple, RevenueCat or Stripe. Billing records may be retained for accounting, legal obligations, fraud prevention and disputes. Contact us with a billing-data request; each provider's privacy policy also explains its retention and request procedures.
Your choices
- Where accounts are available, open Profile, Your account, Delete account to permanently delete your sign-in account, its synchronized data and its sessions on every device. You must confirm your password. Separate guest data, legacy guest comments and device records remain and can be removed using the choices below. Account deletion does not cancel a subscription; cancel it through the store where you subscribed.
- Delete your own comments and clear your display name in the app at any time.
- Turn comments off in Profile.
- Block any commenter from their comment, and clear blocks in Profile.
- Deleting the app removes your kitchen and saved recipes from the phone and disconnects the device identifier from anything on the server. To have server-side data for your device removed, email contact@theneeb.com from the app's Report a Bug screen or directly, quoting the first eight characters of your device identifier shown in Profile.
- Manage Apple subscriptions in your Apple account settings. Manage web subscriptions through Manage Subscription or the customer portal linked in your billing emails. Cancel before deleting your Stockpot account; deleting the account or app does not cancel billing.
Children
Stockpot is not directed to children under 13, and we do not knowingly collect information from them.
Changes
If this policy changes, the date at the top changes with it and the new version is shown here.
Contact
Questions, requests and reports: contact@theneeb.com.