1. Introduction
This Privacy Policy describes how Expulvis Interactive ("we", "us", "our") collects, uses, stores, and protects your personal information when you use the Cookery Vault mobile application ("the App"). The App is a free recipe reader and grocery list manager. We are committed to protecting your privacy and handling your data with transparency.
By using the App, you consent to the data practices described in this policy.
2. Data We Collect
Account Information
- Email address (used for authentication and account recovery)
- Display name (user-provided)
- Password (hashed — we never store or have access to plaintext passwords)
Recipe Content
- Recipes you view, browse, and organize (title, description, ingredients, steps, notes, tags, classifications)
- Grocery lists and grocery items you create and manage
Technical Data
- Device type and operating system version (from standard HTTP headers)
- We do NOT use cookies, device fingerprinting, or tracking pixels for advertising or analytics
3. How We Use Your Data
Your data is used exclusively to provide and improve the App:
- Authentication and session management
- Displaying and organizing your recipes and grocery lists
- Syncing your data across devices
- Sharing recipes among members of your household group
We do NOT use your data for advertising, profiling, or sale to third parties.
4. Data Storage & Encryption
Your data is stored securely in cloud infrastructure:
Infrastructure
- Database: Supabase (PostgreSQL) hosted in AWS with Transparent Data Encryption (TDE) enabled at the platform level
- Backend: Cloudflare Workers (global edge network)
Encryption at Rest
- The database uses Transparent Data Encryption (TDE), ensuring raw disk-level data is unreadable without the database decryption key
- Sensitive recipe content (descriptions, notes, cooking instructions, preparation details) is additionally encrypted using column-level encryption
- Non-sensitive searchable metadata (recipe titles, ingredient names, tags) remains in plaintext to preserve search functionality
Encryption in Transit
- All connections use TLS/HTTPS
5. Data Access & Sharing
Household Scoping
- All recipe and grocery data is scoped to your household group via Row-Level Security (RLS) policies enforced at the database level
- Household members can view shared recipes; only the recipe owner can edit or delete
- Grocery lists are private to each user and are NOT shared with other household members
We Never Share Your Data With
- Advertisers or marketing platforms
- Data brokers
- Any third party not essential to providing the App
6. Data Retention
- Your account data and recipe content are retained as long as your account is active
- If you request account deletion, we will delete your account and all associated data within 30 days
- Database backups containing your data may persist for up to 30 days after deletion, after which they are purged through normal backup rotation
7. Your Rights
You have the following rights regarding your data:
- Access: You can view all your recipe content, grocery lists, and account information through the App at any time
- Correction: You can edit your grocery lists and other content at any time
- Deletion: You may request deletion of your account and all associated data
- Portability: Your recipe data can be exported via the share feature
To exercise any of these rights, submit a request through the Help & Support feature in the App.
8. Children's Privacy
The App is not directed at children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete that information.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top. We encourage you to review this policy periodically. Continued use of the App after changes constitutes acceptance of the updated policy.
10. Contact
For questions, concerns, or requests regarding this Privacy Policy or your personal data, please use one of the following methods:
Submit a support request through the Help & Support feature in the App.