Privacy Policy

Overview

Whip It Flip It (“we,” “us,” or “our”) is a recipe and cooking platform that helps you discover meals, save favorites, manage allergy preferences, and use AI-assisted cooking features.

This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and the choices you have. By creating an account or using the service, you agree to this policy.

Information we collect

Account information: email address, display name, profile details you provide during onboarding (such as name, language, cooking habits, and food preferences), and authentication identifiers managed through our auth provider.

Recipe and content data: recipes you create or upload (titles, ingredients, instructions, photos, video links), public profile information shown on chef pages, and cookbook or affiliate links you add.

Preferences and safety: saved recipes, allergy and dietary selections, strict vs. warn modes for allergen filtering, and related profile settings used to personalize browsing and “Help me cook” results.

Usage and technical data: pages viewed, features used, device/browser type, approximate location derived from IP (for security and analytics), log data, and cookies or similar technologies described below.

Payment-related data: if you subscribe to a paid plan, Stripe processes payment card and billing details. We receive subscription status, Stripe customer IDs, and limited billing metadata—not full card numbers.

How we use your information

Provide and improve the service, including recipe browse/search, saves, dashboards, AI Chef and pantry matching, and allergy-aware filtering.

Authenticate you, secure accounts, prevent abuse, and comply with legal obligations.

Process subscriptions and manage your plan tier through Stripe.

Send service-related communications (for example sign-in links or important account notices).

Understand aggregate usage to fix bugs, improve performance, and develop new features.

Authentication and storage (Supabase)

We use Supabase for authentication, database storage, and file storage (for example recipe photos). Your account credentials and session tokens are handled by Supabase Auth; recipe and profile data are stored in Supabase-hosted databases with access controls.

Row-level security and server-side checks limit access to your data. You should keep your login credentials confidential and sign out on shared devices.

Cookies and similar technologies

We use essential cookies to keep you signed in, remember language preferences, and protect the service.

We may use analytics or performance cookies to understand how the app is used. You can control non-essential cookies through your browser settings; disabling essential cookies may affect sign-in and core features.

Third-party services

Stripe: processes payments and subscriptions when you upgrade. Stripe’s privacy policy governs payment data they collect directly.

Supabase: hosts authentication, database, and storage infrastructure as described above.

Embedded content: recipe pages may include third-party video players (for example YouTube). Those providers may collect usage data under their own policies when you interact with embedded media.

We do not sell your personal information. We share data with service providers only as needed to operate the product, under contractual safeguards.

Data retention

We retain account and recipe data while your account is active. If you delete your account or request deletion, we will remove or anonymize personal data within a reasonable period, except where retention is required for legal, security, or backup purposes.

Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or export your personal data, and to object to or restrict certain processing.

You can update profile, allergy, and language settings in the app. To change subscription billing, use the billing portal linked from your profile or upgrade page.

To exercise privacy rights or ask questions, contact us using the details below. We may need to verify your identity before fulfilling a request.

Children

The service is not directed to children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children. Contact us if you believe a child has provided data we should delete.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the “Last updated” date. Material changes may be communicated through the app or by email where appropriate.