How FlavourSync uses your information.

Aaron Scarff is responsible for deciding how personal information is used for FlavourSync.

Privacy enquiries can be sent through the contact page or by email to privacy@flavoursync.com.

• Account information: name, email address, profile image, email-verification status and account creation/update times.
• Sign-in and security information: protected versions of passwords, signed-in devices, email-confirmation and password-reset records, how you signed in, and details such as IP address, browser and device. We do not receive your Google password.
• Recipe and cooking information: recipes, source links, edits, collections, tags, notes, preferences and other information you choose to save.
• Sharing information: collaborator roles, invitation email addresses and responses, sharing-link settings, and a limited sharing history. For safety, the secret parts of invitation and sharing links are kept as one-way codes rather than readable links.
• Uploaded files: profile images and other images you deliberately upload.
• Support information: your email address, message, selected topic and any follow-up correspondence.
• Service and usage information: records of visits and actions, approximate network information, performance measurements, errors and combined usage figures.

• To create and secure your account, verify your email, recover access and support Google sign-in.
• To store, organise, display, export and delete the content in your personal recipe library.
• To deliver recipe invitations and enforce the viewer, editor, copying, expiry and revocation choices you make.
• To read a recipe from a web address when you ask us to import it.
• To answer support, privacy, security and copyright enquiries.
• To prevent abuse, investigate incidents, maintain reliability and improve accessibility and performance.
• To comply with applicable law and enforce our terms.

Depending on where you live, these activities rely on performing our agreement with you, our legitimate interests in operating a secure and useful service, consent where required, and compliance with legal obligations.

We share only the information needed for suppliers to provide their services. Our current service categories are:

• Vercel: runs the website, measures performance and usage, and stores uploaded files.
• MongoDB Atlas: stores account, recipe and other FlavourSync records.
• Resend: sends account emails, recipe invitations and contact messages.
• Upstash: helps limit repeated attempts and prevent abuse.
• Google: authentication when you choose “Continue with Google.” Google handles that sign-in under its own privacy terms.

These suppliers may process information in countries outside your own. Where required, the operator relies on appropriate contractual and legal transfer safeguards.

FlavourSync uses necessary cookies to keep you signed in and protect your account. The app may also use browser storage to remember preferences. When you choose Download, it keeps a minimal recipe and cooking-progress copy on that device. When you choose Save search data, it keeps searchable recipe text and a search index so later library searches start faster. Passwords and sign-in links are not included in either copy.

Vercel Analytics and Speed Insights run on ordinary pages to provide combined usage and performance measurements. They are not loaded on sharing, invitation or password-recovery pages. FlavourSync does not send recipe content, downloaded account data, passwords or sign-in links to analytics. Marketing consent in account settings controls product news and cooking-tip email, not necessary account or security processing.

Removing a download or saved search copy, signing out, deleting your account, or clearing browser data removes the relevant device data. Progress made without a connection is saved when you are back online. If the same recipe was used on another device, FlavourSync may ask which progress to keep.

• Account and recipe information is generally kept while your account is active and removed when account deletion completes, unless a legal obligation requires limited information to be retained.
• Signed-in device records, email-confirmation links, password-reset links and safeguards against repeated attempts expire automatically.
• Expired or revoked recipe invitation and share-link records are retained for up to 90 days for abuse prevention, support and security, then automatically removed.
• A limited sharing history can remain while the owning account is active so access changes can be reviewed. Account deletion removes that history and related collaboration records, unless limited retention is required by law or for an active security investigation.
• Support correspondence is retained for 365 days.
• The current free service does not promise a recoverable backup of account or recipe information. Keep a downloaded copy of anything you cannot afford to lose. Account deletion still removes active data through the normal deletion process.
• Security records may be retained longer where they are needed to investigate abuse, protect users or meet legal requirements.

Depending on your location, you may have rights to access, correct, export or erase personal information; restrict or object to some uses; withdraw consent; and complain to a data-protection authority.

Profile correction, downloading your data and account deletion are available in account settings. You can also use the contact page. We may need to verify your identity before completing a request.

We restrict access to stored information, encrypt connections, limit repeated attempts and check that each account can reach only the information it should. No online service can guarantee absolute security, so please use a unique password and report suspected account misuse promptly.

FlavourSync is not directed to children under 13, and it is not intended for anyone who cannot legally agree to the Terms in their country without parental permission. Contact us if you believe a child has provided information improperly.

We may update this notice when the product, suppliers or legal obligations change. Material changes will be highlighted in the service or communicated by an appropriate method. The date at the top shows the latest revision.