LEGAL

Privacy Policy

Last updated: May 16, 2026

Cooked ("the App", "we", "us") is built and operated by an individual developer. This policy explains what data the App collects, why, and how it is handled. Plain words, no dark patterns.

1. Who runs Cooked

Cooked is an iOS application maintained by an individual developer acting as data controller. For any privacy question, request, or complaint: cookedredflag@outlook.com.

2. What we collect

The App collects the following categories of data:

• Self-reported profile — your first name, age, and gender, entered during onboarding. Used to personalize the tone and wording of the AI reading.
• Photos you upload — optional. When you attach a photo to a read, it is sent to our backend and the AI provider, used only to infer pronouns and styling cues for that single read, then deleted immediately after the read is generated.
• Reading inputs — the nickname you give the subject, the relationship context (crush / dating / situationship / partner / ex), and your yes/no swipes on the behavior cards.
• Device identifier — a random anonymous UUID generated on your device and stored in the iOS Keychain. It is not your Apple ID, not your IDFA, and is not linked to any third-party advertising identifier.
• Subscription state — whether you have an active subscription, the plan type, and the start/end dates. Apple processes the payment; we never see card numbers or bank details.

The App does not collect: precise or coarse location, contacts, browsing or search history, health or fitness data, IDFA, contact information beyond what you type in, or analytics on what you tap inside the App.

3. Why we use it

• App functionality — authenticating you, generating the reading, gating premium features, restoring purchases.
• Personalization — calibrating the AI's vocabulary and tone to your age, name, and gender, and biasing card selection from photo signals.

We do not use your data for advertising, do not sell it, and do not share it with data brokers.

4. Service providers

The App relies on the following third-party processors:

• Google Firebase (Authentication, Firestore, Storage, Cloud Functions) — hosts the backend and stores your profile and subscription state.
• OpenAI — generates the AI reading. Receives the photo (when attached), nickname, relationship type, swipe answers, and your self-reported profile. OpenAI does not use this data to train its models for API customers.
• RevenueCat — manages subscription state in cooperation with Apple's StoreKit.
• Apple App Store — processes all payments; we never see your payment information.

5. Data retention

• Uploaded photos: deleted within seconds of the reading being generated.
• Profile fields and subscription state: kept while your account exists.
• Swipe inputs and AI outputs: not stored on our servers after the reading is returned to your device. Past readings live only on your phone.

6. Your rights

Under applicable laws (including GDPR and CCPA where they apply), you can request access to, correction of, or deletion of your data. To exercise any of these rights, email cookedredflag@outlook.com from the device or with enough information to identify your account. Deleting the App from your device will not automatically delete the backend record — send the email to have it removed.

7. Children

Cooked is not directed to children under 13 and we do not knowingly collect data from them. If you believe a child has used the App, contact us and we will remove the data.

8. Security

Data in transit is protected by TLS. Backend access is restricted via Firebase security rules so each user can only read their own document. No system is perfectly secure, and we don't promise otherwise — but we keep what's collected to a minimum precisely to reduce the risk.

9. International transfers

Our service providers (Firebase, OpenAI, RevenueCat) process data in the United States and other regions. By using the App you understand that your data may be processed outside your home country.

10. Changes to this policy

If material changes are made, the "Last updated" date above will change and, where required, you will be notified in-app. Continued use of the App after a change means you accept the updated policy.

11. Contact

Questions, deletion requests, or anything else: cookedredflag@outlook.com.