Antojo Privacy Policy

Effective July 11, 2026 · Version 1.0

The short version: Antojo works without an account. We collect the minimum needed to suggest and filter recipes. Your dietary restrictions are sensitive information and are used only to filter recipes — never for advertising or profiling. You can export or permanently delete everything from inside the app (Settings → Privacy), no account or email required. We don't sell your data. There are no ads.

Who we are

Antojo is operated by Maria Freaner, Ontario, Canada ("we"). For anything in this policy, contact mariarfreaner@gmail.com.

What we collect, and why

Data	When	Why
Anonymous identifier (a random Firebase ID)	Created automatically on first launch	Makes the app work without an account. Not linked to your name, email, or phone. It does not survive uninstalling the app.
Dietary profile — diets, allergies and intolerances (health information), religious dietary restrictions (information about religious beliefs), excluded ingredients	Only if you choose to enter them	Used exclusively as a hard filter so we never show you recipes you can't or won't eat. Processed on the basis of your explicit consent, which you can withdraw at any time by clearing the profile or deleting your data.
Usage events — cards shown/accepted/rejected, funnel answers (flavor, effort, time), timings, session IDs, app version	While you use the app	Fixing problems and improving suggestion quality (analytics).
Ingredients on hand	Only if you use the optional feature	Ranking recipes that use them higher, for that session.
Email address	Only if you join the couples waitlist or create an optional account	Contacting you about that feature; linking your profile to an account.
Crash data — device model, OS version, stack traces	When the app crashes	Fixing crashes.

What we do not collect: your name (unless you provide an email), contacts, precise location, photos, or advertising identifiers. The app contains no advertising SDK.

Sensitive information gets special treatment

Allergies are health information; halal/kosher preferences reveal religious beliefs. Under GDPR these are "special category" data, and we treat them that way regardless of where you live: collected only with your explicit, opt-in consent; used only for recipe filtering; never used for advertising, profiling, or any secondary purpose; never sold or shared for third-party use; deletable by you at any moment.

Who processes data on our behalf

Google Firebase / Google Cloud — app infrastructure: database, authentication, analytics, crash reporting, and AI recipe generation (Vertex AI). Data is stored in Google Cloud's us-central1 region (United States).
Spoonacular (spoonacular.com) — recipe search. Your dietary filter categories (for example "vegetarian" or "tree nut intolerance") are sent as anonymous search parameters; your identity is not.

These providers act as processors under our instructions. We do not sell personal information, and no third party receives it for its own purposes.

International transfers

We operate from Canada and store data in the United States on Google Cloud. Google LLC participates in recognized transfer frameworks and provides contractual safeguards (Standard Contractual Clauses) for transfers from the EU/UK.

How long we keep things

Dietary profile and usage history: until you change or delete them, or delete your data entirely. (Recipe bookmarks are session-only in this version and are not stored on our servers.)
Recipe results from our search provider are cached for at most 1 hour (these are recipes, not personal data).
Anonymous accounts that stay inactive for an extended period may be removed by routine housekeeping.

Your controls — built into the app

Open Settings → Privacy in Antojo:

Export my data — a complete, machine-readable copy of everything linked to your identity (right to access and portability).
Delete my data — permanently and immediately erases your profile, history, saves, waitlist entry, and the identity itself (right to erasure). This works without an account and cannot be undone.

If you are in the EU/UK, these implement your GDPR rights; you may also complain to your local supervisory authority. In Canada, PIPEDA gives you comparable access and correction rights — contact us at the address above. You can also email us to exercise any right manually.

Children

Antojo is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has used Antojo and entered personal information, contact us and we will delete it.

Changes

If this policy changes materially, we will update the date above and note the change prominently in the app before it takes effect.

Contact

Maria Freaner · Ontario, Canada · mariarfreaner@gmail.com