Privacy Policy

When you create an account and use Spoonjoy, we store:

• Account details: your email address and username. Passwords are stored only as a salted hash, never in plain text.
• Sign-in methods you choose to connect: passkeys (WebAuthn credentials) and OAuth provider account identifiers from Apple, GitHub, or Google. We request only your name and email from those providers and never receive your provider password.
• Your content: recipes, cookbooks, shopping lists, cook logs, notes, and any photos you upload.
• API tokens and connector authorizations you create for programmatic or AI-assistant access. Token secrets are stored hashed and shown only once.
• Optional push-notification subscriptions, if you enable notifications.
• Limited technical and product-usage data (for example, error reports and feature interactions) to keep the service reliable.

• To operate your kitchen: store and display your recipes, cookbooks, shopping lists, and cooks.
• To authenticate you and keep your account secure.
• To deliver notifications you have opted into.
• To diagnose errors and improve reliability and features.

Spoonjoy is a public cookbook. Every recipe you create, its covers and photos, your cookbooks, the cooks you log (with their notes and photos), your username, and your profile photo can be seen by anyone, signed in or not, and can show up in search. Other cooks can fork your recipes into their own kitchens and save them to their cookbooks.

Your email address, shopping list, sign-in methods, and API tokens are private to you.

We share data only with infrastructure providers that process it on our behalf to run Spoonjoy:

• Cloudflare: application hosting, database, and photo storage.
• PostHog: product analytics and error monitoring, with on-page text masked by default.
• OpenAI: the text of a recipe page you import, the ingredient lines it reads into amounts and units, and the recipe details or photo used to make a recipe cover.
• Google Gemini: the same ingredient lines and cover requests when OpenAI is unavailable, and the photos of your cooks that Spoonjoy restyles into recipe covers.
• Apple, GitHub, and Google: only if you choose to sign in with them.
• Apple, Google, Mozilla, and Microsoft push services: only if you turn on notifications, to deliver them to your browser or device.

OpenAI and Google receive only what a request needs, not your email address or password. We do not sell your personal information or share it for advertising.

You can connect Spoonjoy to AI assistants (for example, through the Model Context Protocol connector). Connectors act on your behalf using a scoped authorization you approve, and you can revoke that access at any time from your account settings. We never ask an assistant for your Spoonjoy password.

In account settings, choose Download my data to get one JSON file with your account details, your recipes with their steps and ingredients, your cookbooks, shopping list, and cooks, and links to your photos. The iPhone app offers the same download in its account screen.

You can delete your account yourself in account settings or in the iPhone app. We ask you to type your username and confirm it is you: with your password, or, if you have no password, by signing in again.

Deleting your account permanently removes:

• your account, email address, and profile photo;
• your recipes, cookbooks, shopping list, and the cooks you logged, with their photos;
• your passkeys, linked sign-in accounts, API tokens, and every app and assistant you connected;
• your notifications, and notifications to other cooks that mention you.

A recipe of yours that another cook has forked, saved to a cookbook, or cooked stays up so their kitchen keeps working, but it is credited to a “Deleted chef” placeholder instead of you. Their forks remain theirs. Photos are erased from storage after a short grace period once nothing uses them.

We keep your account and content for as long as your account is active. Deleting a recipe or shopping-list item removes it from your kitchen. Analytics and error data already sent to PostHog stay there until PostHog’s retention period ends.

• Update your profile and content at any time.
• Revoke API tokens and connector access from account settings.
• Turn notifications off at any time.
• Download your data or delete your account from account settings, or email us and we will help.

Spoonjoy is not directed to children under 13, and we do not knowingly collect personal information from them.

We may update this policy as Spoonjoy evolves. Material changes will be reflected in the “last updated” date above.

Questions or requests? Email ari@spoonjoy.app.