Última actualización: 2026-10-25

Política de privacidad

Versión 2 · vigente desde 2026-10-25

Traducción en borrador: un hablante nativo aún debe revisarla.

Las traducciones pueden diferir un poco. El texto de referencia es el inglés.

Este documento está en inglés.

Who we are

Cookmee is a free cooking app with a community of home cooks. It is offered in the United States. This policy explains what information the app and our website use, where it goes, how long we keep it and what choices you have. Cookmee is run by Hussain Syed, as an individual ("we", "us"). For privacy questions and data requests, email privacy@cookmee.com. For anything else, email support@cookmee.com.

This policy is part of how we run the app. The Terms of Use and the Community rules are the agreement you accept. By using the app or the website, with or without an account, you acknowledge this policy. If you do not accept how we handle information, please do not use the app.

In short

You can cook, plan, spin and read without an account. Nothing about you leaves your phone for that, apart from the checks at start and the choices you turn on.
Your allergies, diet, dislikes, goals, notes, cooking history, points, plans and photos stay on your phone. We cannot see them.
If you sign in with Google, we receive your name, email address and a Google account ID. Your profile name and what you share become visible to others.
Usage stats and crash reports are off until you turn them on.
We do not sell your information, we do not show ads, and we do not track you across other companies' apps or websites.
You can delete your account in the app, and the feedback you sent from this phone.

What stays on your phone

These stay on your phone, and in your phone's own backup if you use one (for example iCloud or Google backup, under Apple's or Google's terms):

Your allergies, diet and dislikes
Your goals, notes and remembered preferences
Your cooking history, points and personal badges
Your plans, shopping lists, saved lists you keep without an account, recent searches and photos
Drafts of recipes you have not shared yet

We cannot see them, and they are never sent to us, even when you sign in. The app uses them only on your phone, for example to hide dishes or to label recipes. A recipe you share carries the recipe's own allergen labels, never your allergies or diet. If you delete the app, this information is deleted from your phone and we cannot bring it back.

Your account

You need an account only to share recipes, follow cooks, send compliments, mark "made it", join groups, and save or receive recipes across the community. Accounts are for people aged 13 and over.

Sign-in: you sign in with Google. Google sends us your name, your email address and an account ID, and may send a link to your Google profile picture. Our sign-in provider, Supabase, keeps these to run your sign-in. We never show your email address or the picture to other people.
Your profile: a display name (taken from Google at first, and you can change it), an avatar colour, and anything you choose to add, such as a place, a quote, a favourite cuisine, the year you started cooking a dish and a signature recipe. Your profile is public to everyone who uses the app or opens a page for a recipe you shared. Do not put your home address or contact details in it.
Age band: when you sign in, the app asks your phone's system (Apple's age range feature or Google Play's age signals) whether you are an adult or a teen. We keep only the answer: adult, teen or unknown. We never ask for or keep your birth date. If the answer says you are under 13, no account is made.
Agreement record: the version of the Terms you agreed to and when, and the version of the sharing promises you ticked and when.

Google user data

Cookmee uses Google sign-in only to create and run your account. Here is exactly what that means:

What we receive: your name, your email address, your Google account ID and, if Google sends it, a link to your profile picture. We ask Google only for this basic profile. We get no access to your contacts, Gmail, Drive, calendar or anything else in your Google account.
How we use it: to sign you in, keep your account working and start your profile with your name, which you can change. Your email address and picture are never shown to other people.
Who sees it: our sign-in and database provider, Supabase, keeps it to run your sign-in. We do not sell it, we do not use it for ads, and we do not share it with anyone else, unless the law requires it.
Google's rules: Cookmee's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy (developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.
Deleting it: open Settings, then Privacy and account, then Delete account, or email privacy@cookmee.com. Your sign-in details are deleted with the account.
Removing access: you can disconnect Cookmee at any time in your Google Account, under Security, then Your connections to third-party apps and services.

What leaves your phone

Only the items below leave your phone.

Things you share or do in the community, if you have an account: the recipes you share and their title, kind, cuisine, time, level, spice, servings, story, steps, tip, credit, categories, tags and ingredient lines (including words you typed and the allergens you declared for them); who can see each recipe; saves, follows, blocks, compliments and "made it" marks; notes you add when you send a recipe to someone; groups you make, join, ask to join or leave, and what you post or showcase there, including group names, descriptions, rules and pinned notes; and your own word-to-ingredient matches, which only you can see. We also work out allergen and diet labels for shared recipes on our servers from our ingredient data.
Your alerts: the bell shows things like compliments, saves, new followers, recipes sent to you and group news. We store these alerts on our servers so they can reach you.
Reports: the reason you pick and what you are reporting (a recipe, a profile, a group or a post). A report has no free text. We store it with your account if you are signed in, or with the scrambled phone code below if you are not. We never show the reporter to the person reported.
Search: the words you type in search are sent to get results. We do not save them with your account. Recent searches stay on your phone.
Feedback you send: the type you choose (idea, problem or dislike), the options you tick, the message if you write one (up to 2,000 characters), a screenshot if you add one, the screen you were on, the app version and build, whether your phone is an iPhone or Android, the system version, the app language, the recipe content version, a random ID for the report, the time we receive it and a deletion code (we keep only a scrambled form of the code). Feedback is not linked to your account. A screenshot can show anything that was on your screen, and a message can contain anything you type. Please do not include health details, names or other personal information.
Dish ratings sent by older versions of the app: the recipe, your rating and tags, the number of servings, the app language, the recipe content version, a random rating ID with a number that grows if you change the rating, the time we receive it and the deletion code in scrambled form. A rating has no text. This version of the app no longer sends ratings.
Spam protection: a one-way scrambled code made from a random number the app creates on your phone and a secret value inside the app, and a scrambled form of your account ID when you share. We use them only to count how many things one phone sends, or one account shares, per day. We do not store the phone code with your feedback, ratings or account.
Crash reports, only if you turn them on: technical details of the error, the app version, the phone type, the system version and what the app was doing when it failed. We set the tool not to collect screenshots, screen layouts or personal details, and we remove text that could be personal before it is sent.
Usage stats, only if you turn them on: which parts of the app you use, such as recipes opened, dishes suggested, cooking started and finished, timers, plans, shopping lists, sharing, shared recipe pages, groups viewed, joined, left and posted to (only the kind of group, never which one), links opened, legal documents you open, photos added (only that you added one, never the photo), points and badges earned, notification questions answered, nutrition shown or hidden, feedback sent (only its type, never what it says), your rating (only in older versions) and settings changed. Each event can carry details such as the recipe, cuisine, number of servings, the cooking time you picked, the goals you chose, and the number of allergies, diets and dislikes you set (a count, never which ones). We also send the app version, phone type, system version, language, how you first found the app (for example a share link) and a random ID created when you turn stats on and deleted when you turn them off. This ID is not your account ID. We set the tool not to build person profiles, record your screen or keep your internet address.
Checks at start, which happen before you make any choice: the app asks Cloudflare for new recipes and legal documents and asks Expo for app updates. These services see your internet address, the app version and basic phone details when your phone asks.
Email you send us: your email address and whatever you write.

Timers, cooking alerts, reminders and Live Activities are created on your phone. This version of the app does not send push notifications from our servers. If we add them, we will ask your permission first and update this policy.

We do not collect your phone number, contacts, precise location, advertising ID or payment details. The app has no ads and no cross-app tracking tools. Photo upload is not available yet: photos you take stay on your phone.

What other people can see

Recipes you share with Everyone: anyone, in the app and on our website, after our first-post check where it applies. They can appear in Discover, search, your profile, groups and pages for shared recipes.
Recipes you share by link: anyone who has the link. A link can be passed on, so treat it as public. You can make a new link, which shuts the old one.
Just me recipes: only you, and the members of a group you showed it to.
Your profile, the counts on it (such as followers, recipes and compliments) and badges you earn.
What you post in a group: its members, and anyone if the group is public.

Others may copy or screenshot what they see, and we cannot take that back. Share only what you are happy to be public.

Health-related information

Allergies, diet and nutrition choices can say something about your health. In Cookmee they stay on your phone and are never sent to us, and usage stats only ever carry counts, never which allergy or diet you chose. The allergens on a shared recipe describe the recipe, not you. If you write health details in feedback, a recipe story or a profile, you are choosing to send or publish them. We use feedback only to answer you and to fix the app, and we delete it as set out below.

Why we use it, and the legal basis

To run the app and your account: sign-in, profiles, sharing, follows, groups, alerts and showing your recipes to the people you chose.
To keep the community working: the first-post check, daily sharing limits, reports, blocks, moderation and enforcing our Terms and Community rules.
To deliver new recipes and updates, and to keep legal documents current.
To read feedback, fix mistakes (reports about allergen information come first) and improve recipes.
If you allow them, to see what works (usage stats) and to fix crashes (crash reports).
To prevent spam, fraud and misuse, and to keep the service secure.
To follow the law, answer valid legal requests, keep records the law requires (for example about child safety or copyright), and protect people's safety and our rights.

We do not use your information for ads, we do not build profiles to sell, and we do not make automated decisions that have legal or similar effects on you. Our spam limits and first-post check are simple rules, and a person reviews reported content. We offer the app in the United States only, so we do not list legal bases for the European Union or the United Kingdom.

Who handles data for us

Supabase: our database, sign-in and file storage (accounts, community content, alerts, reports, feedback and ratings).
Google: Google sign-in, and the Google Play store and Android backups.
Apple: the App Store, Apple's age range feature and iCloud backups.
Cloudflare: delivers recipes, legal documents and the pages for shared recipes.
Expo: delivers app updates.
Sentry: crash reports, only if you turn them on.
PostHog: usage stats, only if you turn them on.

They handle data to provide their service to us, under their contracts with us. Our database and sign-in run in the United States (Supabase, US East).

We may also share information if the law requires it, to report apparent child sexual abuse material to the National Center for Missing and Exploited Children, to protect people's safety or our rights, or as part of a sale, merger or reorganisation of the company (the new owner would have to keep this policy's promises). We do not sell it and we do not share it for advertising.

How long we keep it

Your account and what you share: while your account exists, until you delete it or delete the item.
Alerts in the bell: 90 days.
Asks to join a group: they expire after 30 days.
Feedback: 18 months
Screenshots: 90 days
Records used to limit spam: 2 days
Dish ratings: until you ask us to delete them
Usage stats and crash reports: 90 days
Moderation and safety records: up to 2 years, or longer if the law requires it or a case is still open.
Emails you send us: up to 2 years
Backups of our database: up to 7 days, then they are overwritten

Things on your phone stay until you delete them or delete the app. Backups kept by Apple or Google follow their rules.

Your choices

You can turn usage stats and crash reports on or off at any time in the app's Privacy settings. Turning them off stops them straight away. Nothing is tracked before you choose. You can use the app without an account. You can edit your profile, change who sees a recipe, delete a recipe, leave a group, unfollow and block people at any time. You can switch off notifications, camera and photo access in your phone's settings, and you can choose not to send feedback.

Deleting your account

In the app, open Settings, then Privacy and account, then Delete account. If you are offline, the app deletes the account when you are back online. You can also ask on our website or by email, as the "Delete your account" page explains. When you delete your account:

Your sign-in, profile, recipes (all of them, of every kind), ingredient lines, word matches, saves, follows, blocks, compliments and "made it" marks you gave, recipes you sent, alerts and group memberships are deleted.
A group you run passes to its longest-standing member.
Counts that others see are updated within minutes.
We keep a record that an account was deleted (a random ID and the time only), the sharing promises you ticked under that random ID (as evidence if a copyright or takedown dispute comes up), reports you made without your name, activity records without your ID, and moderation records.
We may keep information we must keep by law, or for an open legal claim, a copyright dispute or a child-safety report, for as long as that requires.
Copies in our database backups are deleted when those backups expire.

Things on your phone stay on your phone. Delete the app to remove them.

Deleting your feedback

In the app's Privacy settings you can ask us to delete the feedback and ratings you sent from this phone. The deletion code on your phone proves they are yours. We delete them from our database straight away, and screenshots are removed soon after. If you reinstalled the app, email us at privacy@cookmee.com and tell us roughly when and what you sent. Without the deletion code we may not be able to find or confirm your items.

Pages for shared recipes count visits without cookies, without storing anything on your device and without keeping your internet address.

Security

We use reasonable safeguards: connections are encrypted, our database can be reached only through limited functions, links to shared recipes are kept only in scrambled form, screenshots are kept in private storage, and we collect as little as we can. No system is completely secure, so we cannot promise that your information will never be accessed without permission. Keep your Google account secure. If a breach affects you, we will tell you as the law requires.

Children and teens

Cookmee is for people aged 13 and over. It is not directed to children under 13, and we do not knowingly collect information from them. If your phone tells us you are under 13, we do not make an account. If we learn that an account belongs to a child under 13, we delete it. If you think a child under 13 has sent us information, email us and we will delete it.

If you are 13 to 17, ask a parent or guardian before you make an account. Teens can share recipes by link but cannot share with Everyone or take part in public groups. We do not sell or share teens' information and we show no ads.

Moving data between countries

The app is offered in the United States. Our providers store data in the United States. If you use the app from another country, your information is handled in the United States or in those regions.

United States

We do not sell your personal information and we do not share it for cross-context behavioural advertising. We do not knowingly sell or share the information of anyone under 16. In the last 12 months we may have collected these kinds of personal information, only as described above, from you, your phone and Google sign-in:

Identifiers: name, email address, account ID, random IDs and an internet address seen by our providers.
Content you send or share: recipes, profile text, notes, group posts, reports, feedback and screenshots.
Internet and app activity: community actions such as saves and follows, and usage stats if you turn them on.
Device details and crash data: phone type, system and app version, language, and crash reports if you turn them on.
Age band: adult, teen or unknown.

We use them for the purposes above, keep them for the periods above, and share them only with the providers above. We do not collect sensitive personal information as defined by California law, other than what you choose to write yourself.

California

If California law applies to us, you can ask to know what we hold about you, to get a copy, to have it corrected or deleted, to opt out of sale or sharing (we do neither) and to limit use of sensitive information (we do not use it beyond what is needed to run the app). We will not treat you worse for asking. Use Delete account and your profile settings the Privacy settings for feedback, or email us at privacy@cookmee.com. We may ask for details to confirm it is you, such as the email address of your account. We reply within 45 days, and may extend that once by 45 days if we tell you why. An authorised agent may ask for you with your written permission. If we say no, you can ask us to look again. Because we do not sell or share information, a Global Privacy Control signal changes nothing. California's "Shine the Light" law does not apply because we do not share information for others' direct marketing.

Other states

Residents of some other states have similar rights to access, correct, delete, get a copy and opt out, and to appeal if we say no. Use the same ways to reach us. To appeal, reply to our answer with the word "Appeal" and we will answer within the time your state's law sets.

Washington, Nevada and Connecticut health data laws

Laws in these states protect consumer health data. We do not intend to collect it: allergy, diet and nutrition choices never leave your phone. If you write health details in feedback, we use them only to respond and to fix the app. We do not sell or share consumer health data. You can ask us to delete it at any time.

Do Not Track

The app does not track you across other companies' apps or websites, so it does not change what it does when a Do Not Track signal is present.

European Union and United Kingdom

The app is not offered in the European Union or the United Kingdom. Please do not use it there.

India

The app is not offered in India. Please do not use it there.

Mexico

The app is not offered in Mexico. Please do not use it there.

Changes to this policy

We may change this policy at any time, for example when the app changes or the law does. The version number and date at the top show the latest version. If a change is material, we tell you in the app before it takes effect, and where needed we ask for your choice again. We may also post it on our website. If you keep using the app after the change takes effect, the new version applies to you. If you do not agree with it, stop using the app, and you may delete your account. We will not use information we already hold in a materially different way without your consent where the law requires it.

Contact

Cookmee is run by Hussain Syed. Privacy questions and data requests: privacy@cookmee.com. Everything else: support@cookmee.com. Please reach us by email.