Privacy Policy
Last updated: October 23, 2026
1. Introduction
This Privacy Policy explains how Food Fit ("we", "us", or "our") collects, uses, shares, and protects information when you use our mobile application, web app, and website (together, the "Service"). By using Food Fit, you agree to the practices described here. If you do not agree, please do not use the Service.
2. Information We Collect
Information you provide
- Account information: your email address and password if you sign up with email, or the name and email address that Apple or Google share with us if you sign in with them. We never receive your Apple or Google password.
- Recipes and cookbooks: the recipes and cookbooks you create, import, or save, including titles, descriptions, ingredients, instructions, notes, timers, and photos.
- Meal plans and shopping lists: the meals you plan, their dates and servings, your shopping list items, and how you choose to group items by store aisle.
- Sharing: when you share a recipe or cookbook, the email addresses of the people you invite, the role you give each of them (viewer or editor), and your sharing settings, such as whether a share link is on and whether others may save a copy.
- Photos you scan: images of recipe cards, cookbook pages, handwritten notes, or dishes that you take or choose from your library in order to create a recipe.
- Website addresses: links you paste to import a recipe from a website.
- Voice: your voice, captured through the microphone, when you use hands-free cooking mode.
- Messages to us: anything you send when you contact support.
Information collected automatically
- Subscription status: whether you have an active Food Fit Pro subscription, whether it was purchased through Apple, Google, or our web checkout, and related purchase events. We do not receive your payment card details.
- Usage and diagnostics: our servers log your user ID, the feature or request used, its outcome, timing, and app version. We also keep counts of how much you use AI features, such as voice session length, so we can apply usage limits.
- Device information: device type, operating system, app version, and IP address.
- Product analytics: we use PostHog to understand how people use the app, such as which screens and features are used and how the app performs. See section 5.
- Crash and error reports: when the app crashes or hits an error, we collect a report with technical details, such as the error, the screen you were on, recent navigation, and your device and app version.
- Session recordings: for analytics, we may record sessions of how you use the app and web app, which can include what appears on your screen. Password fields are never recorded.
Device permissions
The app asks for access to your camera and photo library (to scan recipes), microphone (for hands-free voice), and notifications (for alerts such as timers). Each is optional and can be changed in your device settings; the related feature will not work without it.
3. How We Use Your Information
- To create and secure your account and sign you in.
- To store your recipes, cookbooks, meal plans, and shopping lists and sync them across your devices, the web app, and our servers.
- To turn photos and web pages into recipes, match ingredients to nutrition data to estimate nutrition, and power hands-free cooking with voice.
- To let you share recipes and cookbooks with other people, including sending invitation emails on your behalf.
- To provide and manage Food Fit Pro subscriptions and unlock paid features.
- To operate, maintain, secure, and improve the Service, including diagnosing errors and preventing abuse.
- To understand how the Service is used, using analytics, crash reports, and session recordings, so we can fix problems and improve the experience.
- To apply usage limits to AI features.
- To communicate with you about your account, support requests, or changes to the Service.
- To comply with legal obligations.
4. Data Sync and Storage
Food Fit stores your recipes, cookbooks, meal plans, and shopping lists on your device and syncs them to our backend so they are available on your other devices and in the web app, and are not lost if you replace your phone. The web app keeps a working copy in your browser's storage. Your data is stored with our hosting providers (see section 5) on servers located in the United States, and is protected in transit using encryption. Photos attached to your recipes and cookbooks are stored in our cloud file storage. Your content is private to your account unless you choose to share it, as described below.
Sharing recipes and cookbooks
You can share a recipe or cookbook by inviting people by email or by turning on a share link. Sharing a cookbook shares every recipe in it. When you share:
- People you share with can see the shared content, including its photos. Editors can also change it, and if you allow it, recipients can save their own independent copy, which stays theirs even if you later stop sharing or delete the original.
- Everyone with access sees your display name. Email addresses of the people with access are visible to the owner and to editors.
- Anyone who has a share link, signed in or not, can see a preview showing the item's name, its photo, and your first name, until you turn the link off.
- When you invite someone, we send them an email from Food Fit that includes your name and the name of the shared item. We use the address only to deliver and match the invitation. We never tell anyone whether an email address has a Food Fit account.
- You can remove someone's access or turn off a link at any time. Copies they have already saved are not affected.
If someone shares with you, the owner and their editors can see your display name and email address, and the content you add to a shared cookbook is visible to everyone who has access to it.
5. Service Providers and AI Processing
We do not sell your personal information, and we do not use your recipes, photos, or voice to show you third-party advertising. We share information only with the service providers that help us run the Service, and only as needed for them to do so:
- Clerk provides account sign-in and authentication, including email and password, Sign in with Apple, and Sign in with Google. Clerk receives your sign-in credentials and account details.
- Third-party AI providers power certain features. For hands-free voice, your device connects directly to an AI provider and your speech is sent to it to be understood and answered, along with a short snapshot of what you are cooking, such as the current recipe and step, so answers are relevant. Your audio does not pass through our servers, and we do not record or store it. For photo scanning, the image you scan is sent from our server to an AI provider to extract the recipe text, ingredients, and steps. When a website can't be read automatically, Food Fit Pro can send the page's text to an AI provider to extract the recipe. We may also send ingredient lines from your recipes to an AI provider to match them to nutrition data.
- RevenueCat manages Food Fit Pro subscriptions and entitlements. It receives your user ID, purchase and subscription details, and basic device information. Payments made in the app are processed by Apple or Google. Payments made through our web checkout are processed by RevenueCat's web billing service and its payment processor, which receive your payment details and billing email; we do not receive your full card number.
- Resend delivers the invitation emails sent when you share a recipe or cookbook. It receives the invitee's email address and the contents of the invitation.
- PostHog provides product analytics, crash reporting, and session recordings. It receives your user ID, device information, and information about how you use the app, including the session recordings described in section 2.
- Hosting and storage providers run our servers, database, and file storage, and therefore hold the data described in section 4.
Content you send to AI providers is used to produce your result and is handled under their terms and privacy policies. Please avoid saying or scanning anything you do not want processed by these providers, such as sensitive personal details.
We may also disclose information when required by law, to protect the rights, safety, or security of our users or the Service, or in connection with a merger, acquisition, or sale of assets, in which case we will tell you if your information becomes subject to a different privacy policy.
6. Data Retention
We keep your account information, recipes, and cookbooks for as long as your account is active. If you delete your account, we delete or anonymize your personal information and content within 30 days, except where we must keep certain records to comply with the law, resolve disputes, or prevent fraud. Backups may persist for a short additional period before they are overwritten. Server logs are kept for a limited time for security and diagnostics.
Analytics data, crash reports, and session recordings are kept for a limited time. When you delete your account, we also delete them.
Pending sharing invitations expire after 30 days. We permanently delete expired or revoked invitations, including the invitee's email address, 90 days after they expire or are revoked. When you delete your account, your shares are removed and the items you shared disappear for the people you shared them with, except for copies they saved. Recipes another person added to your cookbook remain theirs.
7. Your Choices and Rights
- Access and correction: you can view and edit your recipes, cookbooks, meal plans, and shopping lists in the app at any time.
- Sharing: you can see who has access to anything you share, remove anyone's access, turn off share links, and leave anything shared with you.
- Deletion: you can delete your account and all associated data from within the app, or ask us to do so by emailing us at the address below.
- Analytics and recordings: you can turn off the "Share usage & crash data" setting in your Profile at any time. This stops analytics, crash reports, and session recordings on that device.
- Permissions: you can turn off camera, microphone, photo, and notification access in your device settings.
- Subscriptions: you can cancel an in-app subscription through your Apple or Google account settings, and a web subscription through the manage subscription option in Food Fit. Deleting the app does not cancel a subscription.
Depending on where you live, including the European Economic Area, the United Kingdom, and California, you may also have the right to request a copy of your data, correct or delete it, object to or restrict certain processing, and withdraw consent. To exercise these rights, contact us. We will not discriminate against you for doing so. If you are in the EEA or UK, you may also complain to your local data protection authority.
8. Security
We use reasonable technical and organizational measures to protect your information, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
9. International Transfers
Our servers and many of our providers are located in the United States. If you use the Service from elsewhere, your information will be transferred to and processed in the United States, which may have different data protection laws than your country.
10. Children's Privacy
Food Fit is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the new policy on this page and update the "Last updated" date. If changes are significant, we will give additional notice, such as in the app or by email.
12. Contact Us
If you have questions about this Privacy Policy or want to exercise your rights, contact us at support@riotrocket.com.