Privacy Policy

1. Data we may collect

We may collect and process the following categories of data about you:

(a) Account and contact data, such as your name, email address, password or authentication credentials, telephone number if you provide it, country, time zone, and other account information.

(b) Photos and image data. When you take a photograph through WhatDish or select an image from your camera roll, we collect and process the image to identify visible characteristics of a prepared dish, ingredients, or refrigerator contents and to generate a suggested recipe or meal idea. Images may contain metadata, such as the date, time, device information, or location information recorded by your device. We do not need precise geolocation to generate recipes, but image metadata may include it unless you remove it or limit it through your device settings.

(c) Recipe and interaction data, including AI-generated recipes, prompts, ingredient or portion changes, substitutions, saved recipes, cookbooks, cooking-view activity, shared recipe links, ratings, feedback, and other information you provide when using the Service.

(d) Dietary and preference data you choose to provide, such as vegetarian preferences, food allergies, intolerances, disliked ingredients, desired portions, or other recipe preferences. You are not required to provide this information. A photograph cannot reliably identify allergens or all ingredients, and you should not rely on WhatDish for allergy, medical, or food-safety decisions.

(e) Subscription and transaction data. Apple, Google, or another authorized payment provider processes your complete payment-card information. We generally receive limited transaction information, such as your paid-subscription status, purchase status, renewal or expiration date, country, currency, store transaction identifier, and whether a purchase was completed, refunded, or canceled. We do not receive or store your complete payment-card number for in-app purchases.

(f) Usage-entitlement and referral data, including the number of Free Snaps used or remaining, referral links or codes used, referral eligibility and reward status, whether a paid subscription is associated with your account, the number and timing of AI generations, the number of included Snaps used or remaining, rate-limit status, and information needed to administer promotional rewards, subscription usage allowances, and reasonable limits and to prevent self-referral, unusually high, commercial, or automated use.

(g) Device and technical data, such as device type, operating-system and app version, unique device or advertising identifiers where permitted, IP address, browser type, language, crash reports, system performance, referring pages, timestamps, and diagnostic or security information.

(h) Camera, photo-library, and notification permissions. With your permission, the app may access your device camera or the photos you select from your photo library and may send push notifications. You can change these permissions in your device settings. WhatDish does not receive access to photos you do not select unless your device permission settings expressly provide broader access and the app uses that access.

(i) Information collected through cookies, software development kits, pixels, local storage, and similar technologies, as described in section 5.

We do not intentionally use submitted images for facial recognition or to identify a person from biometric characteristics. Please avoid uploading images that contain people, private documents, payment information, government identifiers, or other information unrelated to the recipe request.

2. How we use data

We use personal data to:

(a) provide the Service, including accepting a photo, analyzing visible food characteristics, generating a recipe or meal idea, supporting recipe adjustments, displaying cooking steps, saving recipes and cookbooks, and enabling recipe sharing;

(b) create and manage accounts, authenticate users, administer promotional Free Snaps, including any that eligible users may receive when an invited friend signs up through a supported referral method, attribute and administer referral rewards, administer paid subscriptions, measure usage against included Snap allowances and reasonable usage or rate limits, process transaction status, and prevent duplicate promotional claims, self-referral, account sharing, unusually high or commercial usage, automated use, fraud, and abuse;

(c) personalize recipes and app experiences using the preferences and prior interactions you choose to provide;

(d) provide customer support, answer requests, investigate complaints, and communicate about accounts, purchases, security, policy changes, and Service updates;

(e) maintain, troubleshoot, test, secure, and improve the Service, including evaluating and improving the performance, safety, and accuracy of our AI and automated systems, as described in this Policy and any available in-product controls;

(f) understand usage, capacity, performance, and general geographic markets; conduct analytics and research; and develop new features;

(g) send marketing communications, push notifications, surveys, or promotional offers where permitted by law and consistent with your choices;

(h) advertise WhatDish on third-party services, where permitted by law and subject to applicable notice and opt-out rights;

(i) comply with legal obligations, enforce our agreements, protect the rights and safety of users and others, and establish, exercise, or defend legal claims; and

(j) carry out another purpose disclosed when the data is collected, with consent where required.

3. AI processing and generated recipes

WhatDish uses artificial-intelligence and machine-learning systems operated by us and by service providers to process submitted photos and related instructions and generate recipes. The system may infer likely ingredients, quantities, cuisine, and preparation methods from visible information, but those inferences may be inaccurate or incomplete.

We may use photos, prompts, generated recipes, edits, feedback, and usage signals to operate, secure, evaluate, and improve the Service and its AI systems, subject to applicable law, the disclosures made when data is collected, and any privacy or opt-out controls we make available. We may also create aggregated or de-identified data for analytics, research, safety, and service improvement. Where required by law, we obtain consent or provide an applicable right to opt out.

To create a recipe, we and our AI service providers process the photos and instructions you submit. Please avoid including confidential information or sensitive personal details, and upload only images you own, have permission to use, or may otherwise lawfully use.

4. Confidentiality and security

We use reasonable technical, administrative, and physical safeguards designed to protect personal data against unauthorized access, destruction, loss, alteration, misuse, or disclosure. Access is limited to personnel and service providers who need the information for authorized duties. Payment transactions are protected by the applicable payment provider and transmission-security measures such as TLS where available.

No method of transmission over the Internet or electronic storage is completely secure. You are responsible for safeguarding your account credentials and should notify us promptly if you suspect unauthorized access. Questions about security may be sent to info@kco.ai.

5. Tracking technologies and analytics

WhatDish and our service providers may use cookies, software development kits, pixels, tags, scripts, local storage, and similar technologies to recognize a device, remember preferences, authenticate users, measure how the Service is used, diagnose errors, prevent fraud, and improve performance and capacity.

Mobile analytics tools may collect information such as app launches, screen views, feature interactions, AI-request events, subscription events, crash information, performance data, and the source from which the app was downloaded. We may associate analytics information with account or device data where permitted by law.

We may work with advertising partners to measure campaigns or show advertisements for WhatDish on other sites and apps. These partners may use identifiers or similar technologies subject to your device settings, consent choices, and applicable law. We do not respond to browser do-not-track signals because there is not a uniform industry standard. Where legally required, we seek consent for non-essential tracking or provide a mechanism to opt out. You may also adjust device advertising settings and browser controls.

6. Marketing and electronic communications

You may unsubscribe from promotional emails using the link in the message or by contacting info@kco.ai. You may disable push notifications in your device settings. If you consent to receive text messages, standard message and data rates may apply, and the message will explain how to opt out.

Even if you opt out of promotional communications, we may still send service or transactional messages that are necessary to administer your account, subscription, security, or requested features.

7. Where we store and process data

We primarily store data on secure servers in the United States. Our service providers may access or process data in the United States or other countries as necessary to provide the Service, support operations, or comply with law. Privacy laws in those countries may differ from the laws where you live. When required, we use appropriate safeguards for international transfers.

8. How we disclose data

We may disclose personal data:

(a) to service providers that support cloud hosting, AI and machine learning, image processing, authentication, app analytics, crash reporting, customer support, communications, marketing, fraud prevention, subscription management, and payment processing;

(b) to Apple, Google, or another app-store or payment provider as necessary to administer purchases, subscriptions, cancellations, refunds, and entitlements;

(c) at your direction, including when you create a shareable recipe link, use a device sharing function, connect a third-party service, or ask us to send information to another person or service;

(d) among Kitchen Copilot Inc. and its affiliates for the purposes described in this Policy;

(e) to professional advisers, auditors, insurers, financing sources, and transaction counterparties subject to appropriate confidentiality obligations;

(f) in connection with a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar corporate transaction;

(g) when required by law, subpoena, court order, or other legal process, or when reasonably necessary to protect rights, property, safety, users, the public, or the Service; and

(h) with advertising or measurement partners where permitted by law and consistent with applicable consent and opt-out rights.

We do not sell personal data for money. Some privacy laws define certain advertising or measurement disclosures as a "sale," "sharing," or use for targeted advertising even when no money is exchanged. Where those laws apply, we provide the notices and opt-out rights they require. Aggregated or de-identified data that cannot reasonably identify you may be disclosed for business, research, analytics, or service-improvement purposes.

9. Recipe links and third-party services

If you share a recipe through a public or forwarded link, anyone with that link may be able to view, copy, or further share the associated content. Do not include information you wish to keep private. Deleting content from your account may not remove copies already saved or shared by others.

The Service may contain links to third-party sites, app stores, social networks, or services. Those parties have their own privacy practices, and we are not responsible for their services or policies. Review their policies before providing personal data.

10. Single sign-on

You may be able to sign in using services such as Sign in with Apple, Sign in with Google, Facebook Connect, or another identity provider. The provider authenticates you and may send us information you authorize, such as your name, email address, or provider-specific account identifier. The provider's handling of your data is governed by its own privacy policy and your account settings.

11. Data retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, including to provide the Service, maintain account and recipe history, administer Free Snaps and referral rewards, paid subscriptions, included Snap allowances, and reasonable usage limits, improve and secure our systems, comply with legal obligations, resolve disputes, and enforce agreements.

Transaction and subscription records may be retained for the duration of the customer relationship and afterward as required by financial-record, tax, fraud-prevention, and limitation-period obligations. Marketing data is used until you opt out, withdraw consent, or applicable law requires deletion. Support requests are retained for the period needed to respond and maintain appropriate records.

Photos, prompts, generated recipes, saved recipes, cookbook content, edits, and related interaction data are retained for as long as needed to provide the relevant features and for the other purposes described above. If the Service provides tools to delete a photo, recipe, or account, using those tools may shorten active retention. Copies may remain temporarily in backups and may be retained where necessary for security, fraud prevention, legal compliance, dispute resolution, or enforcement. We delete or de-identify data when it is no longer reasonably needed.

12. Your privacy rights

Depending on where you live, you may have rights to request access to personal data; correction of inaccurate data; deletion; restriction of processing; portability; withdrawal of consent; and objection to processing based on legitimate interests or for direct marketing. You may also have the right to opt out of certain targeted advertising, sale or sharing, or profiling; to limit certain uses of sensitive personal data; to appeal our response to a request; and to complain to a data-protection authority.

These rights are not absolute and may be subject to legal exceptions. We may need to verify your identity and authority before acting on a request. You may use available account or privacy controls or email info@kco.ai. We will respond within the period required by applicable law and will not discriminate against you for exercising a privacy right. An authorized agent may submit a request where permitted by law, subject to verification.

You may withdraw consent at any time by using available controls or contacting us. Withdrawal does not affect processing that was lawful before withdrawal.

13. Legal bases for processing

Where data-protection law requires a legal basis, we rely on:

(a) performance of a contract, including processing photos and instructions to generate recipes, providing account and recipe features, administering Free Snaps and referral rewards, paid subscriptions, included Snap allowances, and reasonable usage limits, and providing customer support;

(b) our legitimate interests, including securing and improving WhatDish, understanding usage, preventing fraud, abuse, and automated or commercial misuse, administering reasonable usage and rate limits, communicating about the Service, conducting analytics, and developing features, balanced against your rights and expectations;

(c) consent, where required, for matters such as non-essential tracking, certain marketing communications, device permissions, and particular uses of data to improve AI systems; and

(d) compliance with legal obligations and protection of vital or legal interests, including financial records, lawful requests, fraud prevention, safety, and the establishment or defense of claims.

14. Use of WhatDish by minors

You must be at least 18 years old, or the age of legal majority where you live, to create an account or purchase a subscription. A person under 18 may use the Service only with the consent and active supervision of a parent or legal guardian. The Service is not directed to children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided personal data contrary to this section, contact info@kco.ai so we can investigate and take appropriate action. Additional age requirements may apply under local law.

15. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in the Service, technology, law, or our data practices. If a change is material, we will provide reasonable notice through the app, by email, or by another appropriate method before it takes effect, unless earlier implementation is required for legal, security, or abuse-prevention reasons. The effective date identifies the current version.

16. Contact us

Questions, comments, privacy requests, and complaints may be sent to info@kco.ai.

Kitchen Copilot Inc.
P.O. Box 32454
Charlotte, NC 28232
United States