Legal
Privacy Policy
Last updated: May 2, 2026
Vidhi Kosh is a personal recipe management app. We believe your kitchen data is yours. This policy explains what we collect, why, and how you can control it.
Information We Collect
Account information
When you sign in with Google, we receive your name and email address from Google. This is used solely to create and identify your account.
Recipe data
All recipes you save, including titles, ingredients, steps, images, and notes, are stored in your account. Family members you invite can view shared recipes within your family group.
Usage data
We track how many AI recipe extractions you perform each month to enforce fair-usage quotas. This counter resets monthly and is tied to your account.
Cookies & session tokens
We use HTTP-only cookies to keep you signed in. These cookies contain an encrypted session token and no personally identifiable information beyond your user ID.
How We Use Your Information
Providing the service
Your name and email are used to identify your account and send essential account-related notifications (e.g. family invitations). We do not send marketing emails.
AI recipe extraction
When you share a URL or paste a link, the page content is sent to Google Gemini to extract recipe data. We do not store the raw page content — only the extracted recipe that you choose to save.
Analytics
We use Vercel Analytics to understand aggregate usage patterns (page views, feature usage). This data is anonymous and not linked to your account.
Third-Party Services
Supabase
Our database and authentication infrastructure is provided by Supabase, Inc. Your account data and recipes are stored in Supabase-managed PostgreSQL databases hosted on AWS. See supabase.com/privacy for their privacy policy.
Google OAuth & Gemini AI
Sign-in is handled via Google OAuth 2.0. Recipe extraction uses the Google Gemini API. Google's privacy policy applies to data processed through these services: policies.google.com/privacy.
Vercel
Our application is hosted on Vercel. Anonymous request metadata (IP address, user agent) may be processed by Vercel's infrastructure. See vercel.com/legal/privacy-policy.
Data Retention
Active accounts
We retain your data for as long as your account is active.
Account deletion
You may request full account and data deletion at any time by contacting us at the email below. We will process the request within 30 days.
Family data
Recipes you shared with a family group remain accessible to other family members until the family is dissolved or the recipe is manually deleted.
Your Rights
Access & portability
You may request a copy of all personal data we hold about you at any time.
Correction
You can update your display name directly in the settings page.
Deletion
You may request deletion of your account and all associated data by emailing us.
Opt-out
Because we use only essential cookies, there is no tracking to opt out of beyond not using the service.
Children's Privacy
Vidhi Kosh is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page. Continued use of Vidhi Kosh after changes constitutes acceptance of the updated policy.
Contact
Questions about this Privacy Policy? Reach us at vidhikosh@gmail.com. We aim to respond within 5 business days.