This Privacy Policy describes how Remy (“Remy,” “we,” “us,” or “our”) collects, uses, and shares information when you use the Remy mobile application (the “App”). Remy is operated by Judah Holland, a sole proprietor based in Florida, United States.
If you have any questions about this policy, contact us at judahrobert123@gmail.com.
1. Summary
Remy is a personal recipe organizer. We collect the information needed to create your account, store the recipes you choose to save, and process recipe imports from URLs, photos, pasted text, and social media videos. We do not sell your personal information, we do not use it for advertising, and we do not share your recipes publicly.
2. Information We Collect
2.1 Information you provide directly
- Account information: your email address and password when you create an account. If you sign in with Google, we receive your email address and basic profile information from Google.
- Profile information: your chosen username, first name, last name, and an optional profile photo you upload.
- Recipe content: the recipes you save, including titles, descriptions, ingredients, instructions, notes, categories, servings, prep and cook times, source URLs, and recipe photos.
- Recipe import sources: URLs you paste, text you paste, photos of recipes, and social media video links you share to the App, which we process to extract structured recipe data.
- Preferences: your unit preference (imperial or metric), appearance preference, and display preferences.
- Communications: if you email us for support, we receive the contents of your message and your email address.
2.2 Information collected automatically
- Authentication and session data: when you sign in, our authentication provider issues session tokens and records sign-in events for security purposes.
- Subscription data: if you subscribe to Remy Unlimited, our subscription processor records your subscription status, purchase events, renewal status, and a pseudonymous user identifier. We do not receive your credit card number — those are handled entirely by Apple’s App Store.
- Crash and error logs: if the App crashes, basic technical information (device model, OS version, App version, and error details) may be recorded so we can diagnose issues.
2.3 Information we do not collect
- We do not collect precise location data.
- We do not access your contacts.
- We do not use third-party advertising identifiers (IDFA).
- We do not track your activity across other apps or websites.
3. Permissions the App Requests
- Camera: to capture photos of physical recipes or your profile picture. Used only when you actively choose to take a photo.
- Photo Library: to select existing photos of recipes or profile pictures. Used only when you actively choose to select a photo.
You can revoke these permissions at any time in your device’s Settings.
4. How We Use Your Information
We use the information described above to:
- Create and maintain your account (legal basis: contract).
- Save, organize, and display your recipes and preferences (legal basis: contract).
- Convert URLs, pasted text, and recipe photos into structured recipes using AI processing (legal basis: contract).
- Process your subscription and import limit (legal basis: contract).
- Respond to your support requests (legal basis: legitimate interest).
- Detect and prevent abuse, fraud, and security incidents (legal basis: legitimate interest).
- Comply with legal obligations (legal basis: legal obligation).
We do not use your data for advertising, profiling, or sale to third parties.
5. Third-Party Service Providers
Remy uses the following service providers (“sub-processors”) to operate the App. Each is contractually obligated to process your data only on our instructions.
| Provider | Purpose | Data Handled | Location |
|---|---|---|---|
| Supabase, Inc. | Account authentication, database hosting, file storage | Email, password hash, profile, recipes, photos, session tokens | United States |
| OpenAI, L.L.C. | AI-powered extraction of recipe content from URLs, photos, and pasted text | The URL, image, or text you submit for import (no account identifiers attached) | United States |
| Google Gemini (Google LLC) | AI analysis of social media videos (Instagram, Facebook, TikTok) | Video content from publicly shared URLs (no account identifiers attached) | United States |
| RapidAPI | Fetching social media video content for extraction | Video URLs shared by the user to the App | United States |
| RevenueCat, Inc. | Subscription management and entitlement tracking | Pseudonymous user ID, subscription events, purchase status | United States |
| Apple, Inc. | App distribution and in-app payment processing | Payment handled entirely by Apple — we receive only a transaction confirmation | United States |
| Google LLC | Authentication (if you use Google Sign-In) | Email address and basic profile data from your Google account | United States |
Important note about AI processing
When you import a recipe from a URL, photo, or pasted text, the content of that import is sent to OpenAI to extract structured recipe data. When you import a recipe from an Instagram Reel, Facebook video, or TikTok, the video URL is first sent to RapidAPI to retrieve the video content, which is then sent to Google Gemini for AI-powered extraction.
Do not share content you do not want processed by these services. Neither OpenAI nor Google Gemini uses your submitted content to train their models under their current API terms. Content sent for processing is not stored by these services beyond what is needed to complete the request. We do not send your account email, username, or other identifying profile information alongside any import. For details, review OpenAI’s API usage policies and Google’s Generative AI terms.
6. How Long We Keep Your Information
- Account and profile data: kept until you delete your account.
- Recipes and uploaded photos: kept until you delete them individually or delete your account.
- Subscription records: retained for as long as required by tax and accounting law (typically up to 7 years after the last transaction).
- Backups: deleted data may persist in encrypted backups for up to 30 days before being permanently removed.
7. Deleting Your Account
You can permanently delete your account at any time from inside the App: Settings → Account → Delete account.
Deleting your account permanently removes your profile, recipes, categories, uploaded photos, and authentication record. This action cannot be undone.
If you cannot access the App for any reason, you can also email us at judahrobert123@gmail.com to request deletion. We will verify your identity and complete the request within 30 days.
8. Your Rights
Depending on where you live, you may have the following rights:
For all users:
- The right to access the personal information we hold about you.
- The right to correct inaccurate information (you can edit most of this directly in Settings).
- The right to delete your account and associated data.
- The right to export your recipes (you can share any recipe as text or PDF from the App).
For users in the European Economic Area, United Kingdom, and Switzerland (GDPR): You additionally have the right to restrict or object to processing, the right to data portability, the right to withdraw consent where processing is based on consent, and the right to lodge a complaint with your local data protection authority.
For California residents (CCPA / CPRA): You have the right to know what personal information we collect, the right to delete that information, the right to correct it, and the right to opt out of sale or sharing of personal information. We do not sell or share personal information as those terms are defined under California law.
To exercise any of these rights, email us at judahrobert123@gmail.com. We will respond within 30 days.
9. Children’s Privacy
Remy is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact judahrobert123@gmail.com.
Users between 13 and 16 in the European Economic Area should have parental consent before creating an account.
10. International Data Transfers
Remy is operated from the United States, and the service providers listed in Section 5 process data in the United States. If you access Remy from outside the United States, your information will be transferred to and processed in the United States. Where required, we rely on Standard Contractual Clauses or equivalent safeguards approved by the European Commission for these transfers.
11. Security
We use industry-standard security measures, including encryption in transit (HTTPS / TLS), encryption at rest for stored data, and row-level access controls that prevent users from accessing each other’s recipes. No system is perfectly secure, however, and we cannot guarantee absolute security. If we learn of a data breach that affects your information, we will notify you as required by applicable law.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the “Last Updated” date at the top. For material changes, we will provide additional notice within the App or by email before the change takes effect.
13. Contact
Judah Holland
Questions, requests, and complaints can be sent to: judahrobert123@gmail.com