Privacy Policy

GeniusCook (the “Service”) is operated by GeniusCook Malta, located in Malta. You can reach us at our contact form. For privacy-specific requests, please contact Inna.fridrikova@gmail.com.

We collect the following categories of information:

• Account data: email address, authentication user ID, and any profile information you choose to add.
• Recipe and kitchen data: ingredients you enter into Pantry-to-Plate, generated recipes, pantry and shopping-list entries, meal-plan entries, and dietary preferences.
• Hero Book content: photos, videos, notes, and other captures you upload while cooking. You remain the owner of your content.
• Payment data: Stripe processes your payment details on our behalf. We do not store full card numbers; we keep a record of the transaction, plan, and customer ID provided by Stripe.
• Usage and technical data: device/browser type, IP address, feature usage, error logs, and essential cookies needed to keep you signed in and process payments.
• Communications: messages, support requests, or feedback you send us.

We use your data to:

• Provide, maintain, and improve the Service (recipes, meal plans, cook mode, etc.).
• Generate AI-powered Pantry-to-Plate recipes and hero imagery.
• Process memberships, credit packs, and other payments through Stripe.
• Sync your Hero Book captures, saved recipes, and settings across devices.
• Respond to support requests and send service-related notices.
• Understand how the Service is used so we can fix issues and prioritise features.

We process personal data on the basis of performing our contract with you (providing the Service), complying with legal obligations, and pursuing our legitimate interests in operating and improving the Service. Where required by law, we will ask for your consent before processing.

We do not sell personal data. We share data only with service providers that help us run the Service:

• Lovable Cloud / Supabase — backend database, authentication, file storage, and real-time sync.
• Stripe — payment processing, billing, and customer portal.
• Lovable AI Gateway — generating recipes and hero images from your inputs.
• YouTube (Google) — embedded audio player when you choose to play the curated playlist.

These providers process data only on our behalf and under appropriate contractual safeguards. We may also disclose data if required by law or to protect our rights or users.

We use only essential cookies and similar technologies needed for authentication, payments, and core app functionality. We do not use non-essential tracking or advertising cookies. You can control cookies through your browser settings, but disabling essential cookies may prevent parts of the Service from working.

We keep your personal data for as long as your account is active or as needed to provide the Service. If you request deletion, we will remove or anonymise your data within 30 days, except where we need to retain it for legal, security, accounting, or fraud-prevention purposes. Backups may contain residual copies for a limited period.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your account and associated data.
• Restrict or object to certain processing.
• Receive a copy of your data in a portable format.
• Withdraw consent where processing is based on consent.

To exercise these rights, contact Inna.fridrikova@gmail.com. We will respond within the time required by applicable law.

We use industry-standard safeguards, including encryption in transit (HTTPS/TLS), access controls, and regular backups. However, no online service can guarantee absolute security. Please keep your account credentials safe and let us know immediately of any unauthorised use.

Your data may be processed in countries other than your own, including by our cloud and payment providers. Where data is transferred outside the European Economic Area, we rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms.

The Service is not directed at children under 13, and we do not knowingly collect personal data from children under 13. If you believe we have collected data from a child under 13, please contact us and we will delete it.

We may update this Privacy Policy from time to time. We will post the revised version on this page with a new “Last updated” date. Continued use of the Service after changes means you accept the revised policy.

Questions or requests about this Privacy Policy? Contact us at: Inna.fridrikova@gmail.com

GeniusCook Malta, c/o GeniusCook App