Privacy Policy

CookPalAI ("we", "our", or "us") is operated by Andrei's Miracle Software S.R.L., a company registered in Romania. This Privacy Policy explains how we collect, use, share, and protect your information when you use the CookPalAI mobile application and related services (collectively, the "Service").

Information We Collect

• Email address (for account creation and authentication)
• Authentication identifiers from Apple ID or Google sign-in
• Food allergies and intolerances
• Food likes and dislikes
• Height, weight, and personal health goals
• Chat messages you send to generate recipes and cooking guidance
• Recipes, meal plans, and shopping lists you create
• Subscription and billing status (via RevenueCat)
• Usage data and app performance data (via analytics and crash reporting tools)

We only access the information necessary to provide the Service. We do not access your contacts, posts, or social activity.

How We Use Your Data

We use your data on the following legal bases: performance of a contract (to deliver the Service), legitimate interests (to improve the Service and prevent fraud), and your consent (for optional features). Specifically, we use your data to:

• Generate personalised recipes and cooking guidance
• Adapt recommendations to your dietary goals and health profile
• Create and manage meal plans and shopping lists
• Process subscription payments and manage your account
• Maintain, improve, and secure the Service
• Provide customer support
• Comply with legal obligations

Data Sharing

We do not sell your personal data. We share your data only with the following categories of trusted third-party service providers, who are contractually bound to use it solely for the purposes described:

• AI backend providers — your chat messages and cooking inputs are transmitted to third-party AI providers to generate responses. These providers operate under strict data processing agreements and confidentiality obligations.
• Cloud infrastructure providers — to host and operate the Service.
• Subscription and billing processors — RevenueCat and the Apple App Store process your subscription and payment data.
• Analytics providers — to understand usage patterns and improve the Service.
• Crash reporting and performance monitoring tools — to identify and fix technical issues.

Data Retention & Deletion

We retain your data only as long as necessary to provide the Service or as required by applicable law. You may request deletion of your account and all associated data at any time by contacting: support@andreismiraclesoftware.org. We will process deletion requests within 7 days.

Your Rights (GDPR — EU/UK Users)

If you are located in the European Union or United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR):

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — request correction of inaccurate or incomplete data.
• Right to erasure — request deletion of your personal data ("right to be forgotten").
• Right to restriction — request that we limit how we process your data.
• Right to data portability — request your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interests.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting prior processing.
• Right to lodge a complaint — you have the right to lodge a complaint with your local supervisory authority (in Romania: ANSPDCP; in the UK: ICO).

To exercise any of these rights, contact us at support@andreismiraclesoftware.org with the subject line "Data Subject Request".

California Users — CCPA Rights

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You may request details about the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and any third parties we share it with.
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out: We do not sell your personal information to third parties. You do not need to opt out.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To exercise your CCPA rights, contact us at support@andreismiraclesoftware.org with the subject line "CCPA Request".

Brazilian Users — LGPD Rights

If you are located in Brazil, you have the following rights under the Lei Geral de Proteção de Dados (LGPD):

• Confirmation of the existence of processing of your personal data
• Access to your personal data
• Correction of incomplete, inaccurate, or outdated data
• Anonymisation, blocking, or deletion of unnecessary or excessive data
• Portability of your data to another service provider
• Deletion of personal data processed with your consent
• Information about third parties with whom your data is shared
• The right to withdraw consent at any time

To exercise your LGPD rights, contact us at support@andreismiraclesoftware.org with the subject line "LGPD Request".

Canadian Users — PIPEDA

If you are located in Canada, our collection, use, and disclosure of your personal information is governed by the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws. We collect only the personal information necessary to provide the Service, and only with your knowledge and consent. You have the right to access your personal information held by us and to challenge its accuracy. To exercise your rights or withdraw consent, contact us at support@andreismiraclesoftware.org with the subject line "PIPEDA Request".

Children's Privacy

CookPalAI is intended for users who are 16 years of age or older. We do not knowingly collect personal data from children under 16. If we become aware that a user under 16 has provided personal data without verifiable parental consent, we will delete that data promptly. If you believe a child under 16 has provided us with personal data, please contact us at support@andreismiraclesoftware.org.

Contact

If you have any questions about this Privacy Policy or wish to exercise your rights, contact us at:
Andrei's Miracle Software S.R.L.
support@andreismiraclesoftware.org