Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly

Account Information. When you create an account, we collect:

• Email address
• Display name (optional)
• Profile photo (optional)

Recipe Content. When you use Spoon, we store:

• Recipes you save (including parsed content from URLs and TikTok)
• Meal plans you create
• Grocery lists you generate
• Photos you upload for recipes

1.2 Automatically Collected Information

Device and Usage Information. We automatically collect certain information through Firebase Analytics and Firebase Crashlytics, including:

• Device model and manufacturer
• Operating system version (iOS version)
• App version
• Unique anonymous device identifiers
• App usage patterns and feature interactions
• Session duration and frequency
• Error logs and crash reports

Subscription Information. Through RevenueCat, we collect:

• Subscription status (active, expired, canceled)
• Subscription tier selected
• Purchase and renewal dates
• Trial usage information

1.3 Information We Do NOT Collect

No Payment Information. We do not collect:

• Payment card details (handled entirely by Apple)
• Bank account information
• Financial data of any kind

2. How We Use Your Information

We use the collected information for the following purposes:

2.1 Service Delivery and Improvement

• To provide and maintain the App's core functionality
• To sync your recipes and meal plans across devices
• To identify and fix bugs, crashes, and technical issues
• To improve user experience and develop new features

2.2 Analytics and Research

• To analyze usage patterns and trends in aggregate
• To measure feature adoption and engagement
• To inform product development decisions

2.3 Subscription Management

• To manage subscription status and entitlements
• To process subscription renewals and changes
• To verify subscription validity

2.4 Communications

• To send important service announcements or updates
• To respond to support requests

3. How We Share Your Information

3.1 Third-Party Service Providers

We share information with the following service providers who assist in operating the App:

Firebase (Google LLC)

• Purpose: Authentication, database, analytics, and crash reporting
• Data Shared: User account data, recipe content, app usage patterns, crash logs
• Privacy Policy: https://firebase.google.com/support/privacy

RevenueCat, Inc.

• Purpose: Subscription management and analytics
• Data Shared: Subscription status, anonymous user identifiers
• Privacy Policy: https://www.revenuecat.com/privacy

Apple Inc.

• Purpose: App distribution and payment processing
• Data Shared: Purchase information (handled directly by Apple, not by us)
• Privacy Policy: https://www.apple.com/legal/privacy/

3.2 Legal Requirements

We may disclose information if required to do so by law or in response to valid requests by public authorities, including to:

• Comply with legal obligations
• Protect and defend our rights or property
• Prevent or investigate possible wrongdoing
• Protect the personal safety of users or the public

3.3 Business Transfers

If ThreeSix Labs, Inc. is involved in a merger, acquisition, asset sale, or bankruptcy, your information may be transferred as part of that transaction. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

3.4 What We DO NOT Share

• We do not sell your information to third parties
• We do not share information for advertising purposes
• We do not provide information to data brokers

4. Data Retention

4.1 Account Data

Your account data (recipes, meal plans, grocery lists) is retained as long as your account is active. You may delete your account and all associated data at any time through the app settings.

4.2 Analytics Data

Anonymous analytics data is retained in aggregate form for operational purposes. Individual crash logs are retained for up to 90 days.

4.3 Subscription Data

RevenueCat retains subscription information in accordance with their data retention policies for billing and subscription management purposes.

5. Data Security

5.1 Security Measures

We implement appropriate technical and organizational security measures to protect information against unauthorized access, alteration, disclosure, or destruction, including:

• Encryption of data in transit using SSL/TLS
• Firebase security rules to protect user data
• Use of secure third-party service providers with strong security practices
• Regular security assessments and updates

5.2 No Guarantee

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Your Choices and Rights

6.1 Account Data

• You can access and update your profile information within the app
• You can delete individual recipes, meal plans, and grocery lists at any time
• You can delete your account and all associated data through app settings

6.2 Opt-Out Options

Stop Data Collection: You can stop all data collection by:

• Deleting your account through the app
• Uninstalling the App from your device
• Canceling your subscription through Apple App Store settings

7. Children's Privacy

7.1 Age Requirement

Spoon is intended for users aged 4 and older. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will take appropriate action.

8. California Privacy Rights (CCPA)

California residents have certain rights regarding their personal information. We do not sell personal information. If you are a California resident with questions about our privacy practices, you may contact us at spoon@threesixlabs.org.

9. European Privacy Rights (GDPR)

9.1 Legal Basis for Processing

For users in the European Economic Area (EEA), our legal basis for processing personal data is:

• Contract performance (providing the App services you subscribed to)
• Legitimate interests in operating and improving the App
• Consent (where applicable)

9.2 Data Controller

ThreeSix Labs, Inc. is the data controller for information collected through the App.

9.3 European Residents

If you are located in the EEA, you may:

• Request access to, correction of, or deletion of your personal data
• Contact us at spoon@threesixlabs.org
• Lodge a complaint with your local data protection authority

10. International Data Transfers

Information collected through Spoon may be transferred to, stored, and processed in:

• United States (where ThreeSix Labs, Inc. is located)
• Locations where our service providers (Firebase, RevenueCat) maintain servers

We ensure all third-party service providers implement appropriate safeguards for international data transfers.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date and notify you through the App. Your continued use of Spoon after any changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

ThreeSix Labs, Inc.
Email: spoon@threesixlabs.org

13. Acknowledgment

BY USING SPOON, YOU ACKNOWLEDGE THAT YOU HAVE READ THIS PRIVACY POLICY, UNDERSTAND IT, AND AGREE TO ITS TERMS. IF YOU DO NOT AGREE WITH THIS PRIVACY POLICY, YOU MUST NOT USE THE APP.