Privacy Policy

Who we are

SavaPlate and savaplate.com are operated by MagnoliaLex LLC ("SavaPlate", "we", "us"). MagnoliaLex LLC is responsible for the personal information described in this policy. Contact our privacy team at admin@savaplate.com. This policy covers the app and our public website.

Information we process

• Account information, including an app user ID and, if you choose to protect your account, your email address. Your display name and profile photo are optional.
• Recipe content you provide, including photos, screenshots, links, ingredients, steps, notes, collections, meal plans, and cooking history.
• Preferences you choose, including cuisines, dietary needs, cooking goals, kitchen confidence, available cooking time, household size, palate adventurousness, dinner-planning habits, units, theme, notifications, and other personalization settings.
• Subscription and recipe-pack entitlement information from Apple, Google, and RevenueCat. SavaPlate does not receive your full payment-card details.
• Product interaction and diagnostic information used to operate, secure, and improve the app, such as feature events, error details, app version, and device platform.

How we use information

• Provide recipe capture, AI extraction, search, synchronization, cooking, planning, and account-recovery features. We use your chosen preferences together with your saved recipes, favorites, and cooking history to rank recipe suggestions and personalize your experience.
• Verify subscriptions, restore purchases, enforce usage limits, prevent abuse, and keep the service reliable.
• Understand feature performance and diagnose crashes and errors.
• Respond to support requests and comply with legal obligations.

AI and service providers

When you ask SavaPlate to extract or modify a recipe, the content needed for that request may be securely sent to our processing services and AI providers. We limit the information sent to what is needed to return the requested result.

With your permission, public-link submissions may contribute reusable recipe facts and rewritten instructions to our shared recipe catalog. We preserve source attribution, exclude private photos and personal notes, and count catalog responses and favorites to identify useful recipes. Descriptive tags help search and filtering; they are not allergy certifications. Only recipes reviewed for discovery may be highlighted to others. Private imports stay private. You can turn off future online processing in Settings under Online recipe processing.

Community dish photos are optional and use separate, per-photo permission. If you submit your own photo for consideration, we store a resized copy with location and other image metadata removed, your consent receipt, recipe reference, optional public credit, and moderation and reward records. We manually review photos before featuring them alongside a matching recipe, including in recipe packs. These photos are not used for advertising or AI model training. Private imports and ordinary social sharing do not grant this permission.

You can withdraw photo permission and delete the display image in Settings → My Photo Contributions. Withdrawal is prospective: SavaPlate stops future delivery and removes the image from its active library, but cannot delete copies that other users already downloaded or exported with a recipe. Existing in-app community displays recheck availability. Backup copies expire under our backup retention. Minimal consent and reward receipts remain until account deletion, and earned Points are retained after withdrawal. Pending images are removed during routine cleanup after their 30-day review window; account deletion removes account-linked contribution images and records.

On iPhone, narration uses an installed Apple voice, preferring Premium, then Enhanced, then the system voice. Narration text is not sent to an online speech provider. Other platforms may use online speech when you invoke it.

We use service providers including Supabase for authentication, database, and private image storage; RevenueCat and the applicable app store for purchases; Sentry for diagnostics; and AI, search, and speech providers for features you invoke: Google (Gemini and Vertex AI models, Places, and Cloud Text-to-Speech), OpenAI, Anthropic, and Spoonacular. These providers process information on our behalf or under their own platform terms.

Device permissions

Camera, photo-library, microphone, speech-recognition, notification, and location permissions are optional and requested in context. Camera and photo access import recipes. Microphone and speech access support voice features. Notifications support timers and reminders. Location is used on-device for optional sunrise and sunset theming. If you use Dish Detective, the location attached to your photo, or your device location for a camera capture, is sent with that request so we can look up nearby restaurants through Google Places; we use those coordinates for that lookup and do not store them on our servers. Local capture history may retain location on your device. Saved restaurant names and addresses can reveal where a dish was captured; Dish Detective also stores your capture photos, analysis, chat, answers, and feedback to provide its history. Location is never used for advertising.

Storage, retention, and security

Anonymized processing-spend totals and recipe popularity aggregates, and shared public-source recipe facts and rewritten instructions without your account identity, may remain after account deletion. These records do not retain your private photos or notes.

Recipes are stored locally and may be synchronized to your account when cloud services are configured. Private recipe images are stored with owner-scoped access controls. We keep information while your account is active or as needed to provide the service, resolve disputes, meet legal obligations, and maintain security. When you delete your account, your recipes, images, preferences, Dish Detective captures, analytics events, and account-linked usage records are erased; a hashed deletion receipt may be retained for up to 400 days, and purchase records held independently by the app stores and anonymized crash diagnostics may remain under their applicable retention. We also request deletion of your RevenueCat customer record. Our servers are located in the United States, and our providers process information in the United States and in other countries where they operate. No system is perfectly secure, but we use technical and organizational safeguards appropriate to the information processed.

Operational retention periods

Scheduled cleanup removes raw analytics events and AI usage logs after 90 days, rate-limit windows after two days, monthly AI usage counters after 14 months, and account-linked processing receipts and completed deletion receipts after 400 days. Catalog reader identities are removed after 90 days and catalog pull aggregates after 400 days. Account deletion removes the relevant account-linked records sooner. Anonymous daily and project totals may remain for operations.

Crash reports are subject to the diagnostics provider’s retention settings. Backup copies are not used to restore deleted accounts to active use and expire under the hosting provider’s backup schedule. Contact us for the retention details applicable to a specific support, backup, or provider record.

Your choices and rights

You can review and change permissions in device Settings. In SavaPlate Settings under Your Data, you can export your data or delete your account and associated cloud data. You may also contact admin@savaplate.com to request access, correction, deletion, or other rights available where you live.

You can initiate deletion without reinstalling the app at https://savaplate.com/delete-account. We may verify account ownership before acting on a request. Uninstalling the app does not delete your cloud account, and deleting your account does not cancel a subscription with Apple or Google.

Depending on where you live, you may also have rights to portability, restriction of processing, objection, withdrawal of consent, and a complaint to your local data-protection authority. Withdrawing consent does not affect processing that was lawful before withdrawal. We respond within the time required by applicable law and do not discriminate against you for exercising your rights.

Website and support communications

Our public launch website does not set advertising cookies, use marketing pixels, or include a visitor analytics SDK. Our hosting provider processes technical request information, such as IP address, browser information, requested page, and error or security events, to deliver and protect the website.

When you email us, we receive your email address, message, and any attachments you choose to send. We use these to answer your request and maintain necessary support records. Links to the App Store or other external services are governed by those services’ privacy policies when you visit them.

Legal grounds and disclosures

Where applicable law requires a legal basis, we process information to provide the service you request and fulfill our agreement with you, with your consent for optional processing, to meet legal obligations, or for legitimate interests such as service security, fraud prevention, and troubleshooting. You may contact us to ask about the basis for a particular use.

We may disclose information when legally required, to protect users and the service, or in connection with a business transfer subject to applicable privacy protections. We require service providers acting on our behalf to protect personal information and use it for the services they provide. Contact us for information about the transfer arrangements and safeguards applicable to your data.

Children

SavaPlate is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided information, contact us so we can remove it.

Changes and contact

We may update this policy as the app changes. We will post the revised policy here and update the effective date. Questions can be sent to admin@savaplate.com.