TunedCook ("TunedCook," "we," "us," or "our") is a macro-aware recipe manager and meal planner that helps you scale recipes to your personal protein and calorie targets, plan meals, shop, and log what you actually eat. TunedCook is operated by 1001701572 ONTARIO LTD., which is the data controller for the personal information described in this policy. This Privacy Policy explains what data we collect, why, how we handle it, and your rights over it. It applies to the TunedCook mobile application and the tunedcook.app website. By using the App, you agree to this Policy; if you do not agree, do not use the App.
1. Information We Collect
Account information. Email (required to create an account), full name (optional, for display), and which sign-in method you used — email/password, Sign in with Apple, or Sign in with Google. You can browse and use limited features anonymously without an account, and upgrade to a full account at any time. If you use Sign in with Apple's "Hide My Email" option, we only ever see the private-relay address Apple provides — we do not receive your real Apple ID email.
Waitlist sign-ups (website). If you enter your email on tunedcook.app before launch, we store it plus basic technical metadata (signup time, referring page, user-agent) in our AWS-hosted database, used only to notify you at launch and honor any founding-member offer. Sent via Amazon SES. You may unsubscribe or request deletion any time via support@tunedcook.app.
Body metrics and fitness goals. Age, weight, height, biological sex, activity level, fitness goal, and your target protein-per-calorie ratio — used solely to calculate your personal macro targets and generate meal plans in-app.
Food and app preferences. Dietary restrictions, allergens, protein-source preferences, ingredients/tags you choose to avoid, and household/family profile targets if you set up a family plan.
App data. Recipes you create or import, meal plans, favorites, shopping lists, storage/leftover tracking, and food you log as eaten (including swaps and "I ate this" actuals).
Photos (optional). If you attach a photo to a recipe or your profile, we store it in our AWS S3 file storage, linked to your account, and use it only to display your content back to you. You can delete photos at any time.
AI meal photo/description logging ("log what I ate"). When you use the AI-assisted macro-estimate feature — either by taking/uploading a photo of your food or typing a description of what you ate — that photo or text is sent to our third-party AI provider, OpenAI (model: gpt-4o-mini, used for both the photo/vision path and the typed-text path), solely to estimate calories, protein, carbs, and fat for that meal. This is always a feature you actively trigger — nothing is sent automatically or in the background. We send only the photo or text you submit for that one estimate; we do not send your name, email, account ID, or any other identifying information alongside it. You always review the AI's estimate and can edit every number before it is saved to your log. This feature requires a signed-in account (it is not available anonymously) and is subject to a usage cap for non-Premium accounts (see "Subscriptions," below) as a cost-control measure — the cap itself is enforced by our own servers, not by OpenAI. See OpenAI's privacy policy at openai.com/policies/privacy-policy for how OpenAI itself handles API data (as of the Effective Date, OpenAI states it does not use data submitted through its API to train its models by default).
Recipe import (text/photo-to-recipe). When you import a recipe — from a web link, a screenshot, or typed/pasted text — the recipe content is likewise sent to OpenAI to parse and standardize it into structured ingredients and steps. Same handling as above: only the recipe content is sent, not your identity.
Usage data (first-party analytics). To understand which features are used and where errors occur, we record first-party usage events tied to your account — for example, which screen you opened, which feature you used, and whether an action succeeded or errored (e.g., recipe_opened, plan_generated, screen:explore). This is stored only in our own AWS database. We do not use any third-party analytics or advertising SDK (no Sentry, no Firebase Analytics, no PostHog, no ad-network SDK of any kind) — every event is first-party, generated by our own code, and never shared with or sold to anyone. We deliberately do not log free text you type — no search queries, no ingredient names you type, no notes; usage properties are limited to counts, booleans, category labels, and our own internal IDs.
Technical metadata. Last login time, onboarding completion status, account creation date, app version, and platform (iOS).
2. Information We Do Not Collect
We do not collect: location data of any kind; Apple HealthKit or any other health-platform data; advertising identifiers (IDFA) or any ad-targeting data; or any third-party behavioral-analytics, crash-reporting, or ad SDK (confirmed against the live app: no Sentry, Firebase, Crashlytics, PostHog, or equivalent is integrated).
We do not sell, rent, or share your personal data with advertisers or data brokers, and we do not "sell" or "share" your personal information as those terms are defined under U.S. state privacy laws, nor do we track you across other companies' apps or websites.
3. How We Use Your Information
| Purpose | Data used |
|---|---|
| Authenticate your account | Email, hashed password (or Apple/Google auth token), auth provider |
| Calculate macro and protein targets, generate meal plans | Body metrics, fitness goals |
| Personalize recipes & plans | Dietary restrictions, allergens, preferences, avoid lists |
| Estimate macros from a photo or typed description | The photo or text you submit for that request (sent to OpenAI) |
| Parse/standardize an imported recipe | The recipe content you submit (sent to OpenAI) |
| Operate, secure, and improve the App | First-party usage & error events |
| Deliver transactional email (verification, password reset) | Email address |
| Store your recipes, plans, favorites, shopping lists, storage/leftover tracking | App data |
| Notify you at launch / honor a founding-member offer | Waitlist email |
| Process your subscription | Handled entirely by Apple — see Section 6 |
| Comply with law and protect our rights | As reasonably necessary |
We use your data to provide, operate, secure, and improve the App, to communicate with you, and to comply with our legal obligations. We may analyze usage and account data — including with automated and AI-assisted tools — to operate, secure, and improve the Service (for example, to understand how features are used, diagnose problems, measure quality, and decide what to build next). Any such AI-assisted analysis is for our own internal product-improvement and service-operation purposes only. We do not use your data for advertising, and we do not sell your personal data.
4. Third-Party Services
Amazon Web Services (AWS). Our backend (App Runner), database, file storage (S3), content delivery (CloudFront), and transactional email (SES) run on AWS, in the United States. AWS is contractually restricted from using your data for its own purposes.
OpenAI. Used for exactly three user-initiated features: (a) parsing/standardizing content when you import a recipe, (b) estimating calories and macros from a food photo you submit, and (c) estimating calories and macros from a food description you type. Model in use: gpt-4o-mini. We send only the recipe content, photo, or text needed for that specific request — never your name, email, or account identifiers. See openai.com/policies/privacy-policy.
Apple and Google Sign-In. If you choose either, we receive an authentication token and, where you permit it, your name and email (Apple's private-relay email if you choose "Hide My Email"). We never receive your Apple ID or Google account password.
Apple App Store / StoreKit. If you subscribe to TunedCook Premium, the purchase is processed entirely by Apple. We never receive or store your card or payment details — only Apple's confirmation of your subscription status (active/trial/expired). See Section 6.
Google (email delivery). We use a Google email service to send transactional email such as verification and password-reset messages. Only your email address is used for this purpose.
We may also disclose information if required by law, subpoena, or legal process, to enforce our Terms, to protect the rights, safety, or property of TunedCook or others, or in connection with a merger, acquisition, financing, or sale of assets (in which case we will require the recipient to honor this Policy).
5. Data Storage, Retention, and Security
Your data is stored in a PostgreSQL database hosted on AWS in the United States. We retain your personal data for as long as your account is active or as needed to provide the App, and afterward only as required to comply with our legal obligations, resolve disputes, and enforce our agreements. Passwords are stored as salted hashes — we never store your password in plain text. We use encrypted connections (HTTPS/TLS) and access controls throughout. No method of transmission or storage is perfectly secure, but we take reasonable, industry-standard steps to protect your information; you use the App and provide information at your own risk to the extent permitted by law.
International transfers. We are based in Ontario, Canada and our infrastructure is in the United States. If you access the App from outside those regions, your information will be transferred to and processed in the United States and Canada, where data-protection laws may differ from those in your country. By using the App, you consent to this transfer.
6. Subscriptions and Payments
TunedCook offers a free tier and a paid Premium subscription (monthly or annual, with a limited-time free trial), purchased and managed entirely through the Apple App Store using Apple's StoreKit. We never see or store your card number or other payment details — Apple handles billing, trial-to-paid conversion, renewal, and refunds under its own terms, and shares with us only your current subscription/trial status so the App can unlock the right features. To manage or cancel your subscription, use your device's Settings → [your name] → Subscriptions, per Apple's standard process.
7. Your Rights and Data Deletion
You can permanently delete your account and all associated data directly within the App. Deletion removes your personal information, body metrics, recipes, meal plans, favorites, logged food/actuals, storage/leftover records, and shopping lists from our live systems (residual copies may persist in routine backups for a limited period and are then overwritten). We do not retain your data after account deletion except where required by law (e.g., transaction records Apple may separately retain for subscription purchases).
Depending on where you live, you may have rights to access, correct, port, restrict, object to, or delete your personal data, and to withdraw consent. Residents of the EU/UK (GDPR) and of U.S. states such as California (CCPA/CPRA) and other states with comprehensive privacy laws have these rights, subject to legal limits. Because we do not sell or share personal information for cross-context behavioral advertising and do not use it for targeted advertising, there is nothing to opt out of in that regard. To exercise any right, email support@tunedcook.app; we aim to respond within 30 days (and sooner where required by law). We will not discriminate against you for exercising your rights. If we ever deny a request, you may appeal by replying to our response, and you may also have the right to complain to your local data-protection authority.
8. Legal Bases (EU/UK Users)
Where the GDPR applies, we process your personal data on these bases: performance of a contract (to provide the App and your account and process your requests to AI features), legitimate interests (to secure, operate, and improve the App and prevent abuse, balanced against your rights), consent (where required, e.g., optional features you actively trigger — which you may withdraw at any time), and legal obligation (to comply with applicable law).
9. Children's Privacy
TunedCook is not directed to children under the age of 13 (or the equivalent minimum age in your region) and carries an App Store age rating consistent with that. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with their information, contact support@tunedcook.app and we will promptly delete it.
10. Changes to This Policy
If we make material changes to this Policy, we will update the Effective Date above and notify you via the App or email. Your continued use of TunedCook after changes are posted constitutes acceptance of the updated Policy.
11. Contact
Questions, concerns, or data requests: support@tunedcook.app. We aim to respond within 30 days.