Legal

Privacy Policy

Last updated: May 2, 2026

Vidhi Kosh is a personal recipe management app. We believe your kitchen data is yours. This policy explains what we collect, why, and how you can control it.

Information We Collect

Account information

When you sign in with Google, we receive your name and email address from Google. This is used solely to create and identify your account.

Recipe data

All recipes you save, including titles, ingredients, steps, images, and notes, are stored in your account. Family members you invite can view shared recipes within your family group.

Usage data

We track how many AI recipe extractions you perform each month to enforce fair-usage quotas. This counter resets monthly and is tied to your account.

Cookies & session tokens

We use HTTP-only cookies to keep you signed in. These cookies contain an encrypted session token and no personally identifiable information beyond your user ID.

How We Use Your Information

Providing the service

Your name and email are used to identify your account and send essential account-related notifications (e.g. family invitations). We do not send marketing emails.

AI recipe extraction

When you share a URL or paste a link, the page content is sent to Google Gemini to extract recipe data. We do not store the raw page content — only the extracted recipe that you choose to save.

Analytics

We use Vercel Analytics to understand aggregate usage patterns (page views, feature usage). This data is anonymous and not linked to your account.

Third-Party Services

Supabase

Our database and authentication infrastructure is provided by Supabase, Inc. Your account data and recipes are stored in Supabase-managed PostgreSQL databases hosted on AWS. See supabase.com/privacy for their privacy policy.

Google OAuth & Gemini AI

Sign-in is handled via Google OAuth 2.0. Recipe extraction uses the Google Gemini API. Google's privacy policy applies to data processed through these services: policies.google.com/privacy.

Vercel

Our application is hosted on Vercel. Anonymous request metadata (IP address, user agent) may be processed by Vercel's infrastructure. See vercel.com/legal/privacy-policy.

Data Retention

Active accounts

We retain your data for as long as your account is active.

Account deletion

You may request full account and data deletion at any time by contacting us at the email below. We will process the request within 30 days.

Family data

Recipes you shared with a family group remain accessible to other family members until the family is dissolved or the recipe is manually deleted.

Your Rights

Access & portability

You may request a copy of all personal data we hold about you at any time.

Correction

You can update your display name directly in the settings page.

Deletion

You may request deletion of your account and all associated data by emailing us.

Opt-out

Because we use only essential cookies, there is no tracking to opt out of beyond not using the service.

Children's Privacy

Vidhi Kosh is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page. Continued use of Vidhi Kosh after changes constitutes acceptance of the updated policy.

Contact

Questions about this Privacy Policy? Reach us at vidhikosh@gmail.com. We aim to respond within 5 business days.