We use your information to run the product you ask for. We do not sell your personal information. Nutrition guidance and AI drafts remain under your review. Campaign links may contain short source, medium, campaign and creative codes. When you join early access, we retain these codes with your request to measure acquisition; we do not store the full referral URL. Optional website analytics require your permission. Use Privacy choices in the footer to withdraw or grant that permission.
Information you choose to provide
Depending on the features you use, this may include:
- Account details such as your email address, display name, login credentials, and session information.
- Profile and household details such as dietary preferences, allergies, age-related profile information, nutrition targets, height, weight, activity level, and goals.
- Meals, portions, recipes, pantry items, shopping lists, plans, saved items, notes, and edits.
- Photos, voice input, files, links, or barcode information you deliberately submit for capture, import, or analysis.
- Support messages, account export or deletion requests, and early-access email consent.
Information collected as the service operates
We may process device and app information needed for security, authentication, synchronization, crash diagnosis, rate limiting, and reliable delivery. When you accept the Privacy Policy and Terms of Use, we store the accepted document versions, server timestamp, account identifier, and acceptance source so we can maintain an audit record. Subscription records can include plan, entitlement, store product, and transaction-verification information; Apple or Google processes the payment itself.
After you accept this policy, the native apps collect limited product-usage analytics such as app areas and features used, action and result categories, input method, plan tier, app version, platform, timestamps, and pseudonymous identifiers. General product analytics do not include meal or recipe contents, prompts, photos, free-form text, profile names, or precise nutrition values. We use first-party analytics systems and may use Google Analytics for Firebase. Advertising and personalization signals are disabled.
On this website, optional Google Analytics starts only after you allow analytics. It measures interactions such as page sections viewed, navigation, and scroll depth. Advertising and personalization signals are disabled. Your early-access email, platform preference, US launch country, signup source, consent version, owner-review decision, enrollment status and unsubscribe status are stored separately from these website analytics. If you provide a test phone model or OS version, we keep it with your request to plan device coverage. Email delivery records help us avoid duplicate messages and honor your preferences. Signing up requests setup and access-status emails without a second email confirmation; it does not verify ownership of the email address or grant tester access.
How we use information
- Provide, synchronize, personalize, and secure your account and product experience.
- Calculate nutrition totals and progress, create meal and recipe drafts, and carry out actions you review and confirm.
- Verify subscriptions and enforce plan capabilities.
- Respond to support, export, deletion, safety, and abuse requests.
- Measure product usage, reliability, conversion, retention, and business performance using limited content-free analytics after you accept this policy.
- Send early-access or launch email only when you explicitly join that list; each message will provide an unsubscribe option.
AI, nutrition, and service providers
Features you invoke may, when applicable, send the minimum relevant prompt, text, image, or structured information to service providers that help operate The Herb Kitchen. These can include third-party AI providers for AI-assisted drafts, USDA FoodData Central for nutrition reference data, Open Food Facts for packaged-food reference data, Apple and Google for store subscriptions, Google Analytics for native-app product analytics and optional website analytics, Resend for early-access email when sending is enabled, and infrastructure providers for hosting, storage, email automation, and security.
By accepting this Privacy Policy, you consent to third-party AI processing when it is applicable to an AI feature or personalized recipe suggestion you use. Relevant information may include meal descriptions or photos, recipe text or links, conversation, pantry, meal history, dietary preferences, or nutrition goals. We may change the AI providers that process this information for the same disclosed purpose. If we materially change what information is shared or how it is used, we will update the disclosure and ask you to accept the updated policy before the change applies.
These providers process information under their own terms and our service arrangements. Do not submit information you do not want processed for the feature you selected. AI output can be incomplete or wrong; review it before saving or acting on it.
Optional Siri and Gemini access
If system assistant access is available for your platform, you can choose to connect Siri on Apple devices or Gemini on approved Android distributions. Google preview access is required for Gemini; support for Android AppFunctions alone does not grant access. Connecting is optional, requires separate consent and a selected eater, and can be limited to individual operations.
For an allowed request, the platform assistant and its provider (Apple for Siri or Google for Gemini) may receive your request and the result, including daily calories, protein, fiber and meal count, or a pantry count and up to ten item names. The platform provider handles information under its own privacy terms and settings. We do not send passwords, account tokens or internal account and eater identifiers in these results.
Meal and shopping requests prepare a private draft in The Herb Kitchen for your review; they do not save a meal or add a shopping item automatically. Opening Ask Herb only prepares an unsent prompt. Sending a prompt or requesting AI nutrition analysis inside the app is a separate action governed by the AI disclosure above. An explicit undo can reverse only the exact eligible action previously confirmed from a system assistant draft.
In Settings, turn off the platform switch to stop access while keeping preferences. Disconnect system assistant access revokes consent for Siri and Gemini and clears pending assistant drafts and handoffs, without deleting saved meals or pantry items. Disconnect does not delete information already received by Apple or Google; manage that information through their privacy controls. Requests require current online Premium authorization and device unlock.
When information is shared
We share information with service providers only as needed to operate requested features, maintain security, comply with law, or protect users and the service. We may also disclose information during a business transaction subject to appropriate safeguards. We do not sell personal information.
Early-access setup and access-status emails use Resend. After the owner approves your request, we share your email with Google Play or Apple TestFlight for the platform or platforms you selected, to provide beta access. Unsubscribe cancels pending email and enrollment work; if you were already enrolled, contact Support to request removal from a tester group.
If community sharing becomes available, only content you deliberately review and publish is public or shared with the audience you choose. Private nutrition, meal-log, household, and account information is not automatically published.
Storage, security, and retention
Native apps may keep encrypted credentials and product data on your device so supported features can work offline. Signed-in information can also be synchronized to our servers. We use administrative, technical, and access controls designed to protect information, but no service can promise absolute security.
We retain account information while your account is active and as needed to provide the service, resolve security or billing issues, meet legal obligations, and maintain bounded backups. Legal acceptance records may be retained as needed to document the agreement and meet legal obligations. When you delete your account, account-owned data is scheduled for deletion except information we must retain for legal, fraud-prevention, transaction, or security reasons. Backup copies expire through controlled backup-retention cycles.
Your choices and rights
- Change website analytics at any time with the Privacy choices control.
- Manage camera, microphone, photo, speech, and notification access in your device settings.
- Export your account data from the app’s account settings.
- Delete your account and synced data from the app, or follow the steps on the account-deletion page.
- Unsubscribe from early-access email using the link in a message.
Local law may provide additional rights to access, correct, delete, restrict, or object to processing. Contact us to make a request.
Children and household profiles
The service is not directed to children creating their own accounts. An adult account holder may manage household profiles where that feature is available and is responsible for providing any required consent. Do not create or use a child profile unless you are authorized to do so.
Contact and policy changes
Questions or privacy requests can be sent to support@theherbkitchen.app. We may update this policy as the product, providers, or legal requirements change. Material changes will be identified by the updated date and communicated when appropriate.