Privacy Policy

1. Introduction

Welcome to CraveCraft. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website or use our mobile application and tell you about your privacy rights and how the law protects you.

2. Data We Collect

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

• Identity Data includes first name, last name, username, and user IDs generated by our authentication provider.
• Contact Data includes email address.
• Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, device model, operating system, and crash reports (via Crashlytics).
• Transaction Data includes details about payments and subscriptions managed via RevenueCat (we do not store your actual credit card details).
• Advertising Data includes device advertising identifiers (such as IDFA or AAID) used to serve personalized ads.
• User Content includes the photos you upload, audio recordings, and the text prompts you enter for AI analysis.

3. Camera and Photo Usage

CraveCraft uses your device camera and photos to let you take or select images of your meals for analysis. Photos are uploaded to Google Cloud Storage and processed by the Google Gemini API to identify ingredients and generate recipes. We do not sell your personal photos. You can revoke camera and photo permissions at any time in your device settings.

4. Audio and Voice Usage

CraveCraft requests access to your device's microphone to allow you to record voice descriptions of your meals or dietary preferences. These audio recordings are sent to the Google Gemini API to transcribe your speech and generate recipes based on your description. We do not use your voice recordings for any other purpose. You can revoke microphone permissions at any time in your device settings.

5. Artificial Intelligence (AI) Processing

We use Google's Gemini API (via Google AI Studio) to provide recipe generation and meal analysis features. When you use these features:

• Data Shared: Your text prompts, image inputs, and audio recordings are sent to Google for processing.
• Data Protection: As a paid tier user of the API, your inputs are processed to provide the service and are subject to Google's Cloud Data Processing Addendum.
• Advisory: You should avoid entering sensitive personal, medical, or financial information into the AI chat or prompt fields.

6. Advertising and Monetization

Google AdMob We use Google AdMob to display advertisements in our app. AdMob may use your device's advertising identifier and other usage data to show ads that are relevant to you. You can opt-out of personalized advertising in your device settings (e.g., "Limit Ad Tracking" on iOS or "Opt out of Ads Personalization" on Android).

RevenueCat We use RevenueCat to manage app subscriptions and purchase credits. While RevenueCat processes purchase validation, they do not access your full payment method details (which are handled by the App Store or Google Play Store). We share an anonymous App User ID with RevenueCat to link your subscription status to your account.

7. Third-Party Services

We share data with specific third-party providers to operate our service. Each has its own privacy policy:

• Google Cloud (Firebase/Firestore/Functions/Storage): For backend infrastructure, authentication, and database hosting.
• Google Analytics & Crashlytics: For analyzing app usage and debugging stability issues.
• Google Gemini API: For AI generation, audio transcription, and image analysis.
• RevenueCat: For subscription billing and receipt validation.
• Resend: For sending transactional emails (such as welcome emails).
• Google AdMob: For serving in-app advertisements.

8. How We Use Your Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• To register you as a new customer and manage your subscription.
• To process your photos, audio, and inputs to generate recipes and nutritional insights.
• To deliver relevant website/app content and advertisements to you.
• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
• Where we need to comply with a legal or regulatory obligation.

9. Data Deletion and Your Rights

You have the right to request the deletion of your account and associated data. You can perform this action by contacting us. Upon deletion request:

• Your authentication record and personal data in Firestore will be deleted.
• Your photos and audio files in Storage will be removed.
• Your subscription data in RevenueCat will be anonymized.

10. Contact Us

If you have any questions about this privacy policy or our privacy practices, please contact us via our Contact Page.