Privacy Policy

1. Who We Are

SmartRecipe is a mobile application developed and operated by CetiaApps ("we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the SmartRecipe mobile application available on Android.

If you have questions about this policy, please contact us at admin@cetiapp.co.uk.

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: Name, email address, and password when you create an account.
• Profile Preferences: Dietary restrictions, allergies, cuisine preferences, and cooking skill level.
• Pantry Data: Ingredients you manually enter or scan into your pantry inventory.
• User Content: Recipes you create, photos you upload, and reviews you post.
• Communications: Messages you send to our support team.

2.2 Information Collected Automatically

• Usage Data: Recipes viewed, searches performed, features used, and time spent in the app.
• Device Information: Device type, operating system version, unique device identifiers, and app version.
• Log Data: IP address, app crashes, performance data, and diagnostic information.
• Camera/Barcode Data: Only processed locally on your device for ingredient scanning; not transmitted to our servers.

2.3 Information from Third Parties

• Social Sign-In: If you sign in with Google, we receive your name and email address from that provider.
• Analytics Providers: Aggregated, anonymized usage statistics from Firebase Analytics.

3. How We Use Your Information

We use the information we collect to:

• Provide, personalize, and improve the SmartRecipe service
• Generate AI-powered recipe recommendations based on your preferences and pantry
• Create and maintain your account
• Process meal plans and generate shopping lists
• Send transactional notifications (e.g., meal plan reminders) — you can opt out at any time
• Diagnose technical problems and improve app performance
• Comply with legal obligations
• Prevent fraud and ensure security

We do not use your data for advertising targeting or sell it to any third party.

4. Data Sharing and Disclosure

We may share your information only in the following limited circumstances:

• Service Providers: We use trusted third-party vendors (e.g., AWS for hosting, Firebase for analytics) who are contractually obligated to protect your data and may only use it to provide services on our behalf.
• Legal Requirements: We may disclose your information if required by law, court order, or governmental authority.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred. We will notify you before your data is subject to a different privacy policy.
• With Your Consent: We may share your data with third parties when you explicitly consent to such sharing.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you services. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it by law (e.g., financial records for up to 7 years). Anonymized, aggregated data may be retained indefinitely for analytics purposes.

6. Data Security

We implement industry-standard security measures to protect your data, including:

• TLS/HTTPS encryption for all data in transit
• AES-256 encryption for sensitive data at rest
• Regular security audits and penetration testing
• Strict access controls — only authorized employees can access user data
• Multi-factor authentication for internal systems

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data ("right to be forgotten").
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to processing of your data for certain purposes.
• Opt-out of notifications: Disable push notifications at any time in your device settings or app preferences.

To exercise any of these rights, email us at admin@cetiapp.co.uk. We will respond within 30 days.

8. Children's Privacy

SmartRecipe is not directed to children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately at admin@cetiapp.co.uk and we will delete such information promptly.

9. Third-Party Services

SmartRecipe integrates with the following third-party services:

10. International Data Transfers

CetiaApps operates globally. Your data may be transferred to and processed in countries other than your own, including the United States. We ensure appropriate safeguards are in place for such transfers, including Standard Contractual Clauses approved by the European Commission where applicable.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by sending an in-app notification or email at least 14 days before the changes take effect. Your continued use of SmartRecipe after the effective date constitutes acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: