Privacy Policy

1. Who we are

Cobble ("we", "us", "our") is the company behind the Cobble kitchen app, available at eatwithcobble.com and via the Apple App Store and Google Play. We are the data controller for the personal information described in this policy.

For all privacy matters, contact us at: privacy@eatwithcobble.com

2. What data we collect

We collect personal data in the following categories:

2.1 Account data

• Name and email address (provided when you create your account)
• Encrypted password (stored via our authentication provider we never see your plaintext password)
• Account creation date and last login date

2.2 Profile and preferences

• Dietary preferences (e.g. vegetarian, gluten-free, halal)
• Cuisine preferences (e.g. Italian, Japanese, Mexican)
• Household size and default serving settings
• Measurement preference (Metric, Imperial, or Auto)

2.3 Pantry and ingredient data

• Ingredient names and quantities you add to your pantry (by scanning or manual entry)
• Pantry update history (dates you added or removed ingredients)

2.4 Recipe interaction data

• Recipes you save or favourite
• Recipes you cook (cooking history)
• Recipes you rate or dismiss
• Shopping lists you generate and items you mark as purchased

2.5 Camera and image data

If you use the camera scanning feature, your device's camera is temporarily accessed to capture images for ingredient detection. Images are processed to identify ingredients and are not stored on our servers after processing is complete. We do not retain photographs of your fridge, pantry, or kitchen.

2.6 Usage and device data

• App version and device type (iOS/Android)
• Operating system version
• App feature usage patterns (which screens you visit, which features you use)
• Error logs and crash reports
• IP address (used for security and fraud prevention, not linked to your profile for advertising)

3. How we use your data

We use your personal data for the following purposes:

• To provide the Cobble service: Creating your account, authenticating you, storing your pantry, generating recipe suggestions, building shopping lists, and all core app functionality.
• To personalise your experience: Using your dietary preferences, cuisine preferences, and cooking history to improve the relevance of recipe suggestions.
• To improve the app: Analysing usage patterns in aggregate to understand how features are used and where improvements are needed. This analysis is never done at an individual level for advertising purposes.
• To communicate with you: Sending transactional emails (account confirmation, password reset, subscription receipts) and, with your consent, product updates and announcements.
• For security and fraud prevention: Monitoring for unusual activity to protect your account and our service.
• To comply with legal obligations: Retaining records as required by applicable law.

4. Legal basis for processing (UK GDPR)

We process your personal data under the following legal bases:

• Contract performance: Processing necessary to provide the Cobble service you've subscribed to.
• Legitimate interests: Improving the app, detecting fraud, and ensuring security where these interests are not overridden by your rights.
• Consent: For optional communications such as marketing emails you can withdraw consent at any time.
• Legal obligation: Where we are required by law to retain or process certain data.

5. Data sharing

We do not sell your personal data to any third party. We share data only with the following trusted service providers, who process data on our behalf under strict data processing agreements:

• Supabase: Our database and authentication infrastructure provider. Stores your account, profile, pantry, and recipe interaction data.
• Analytics provider: Aggregated, anonymised usage data to understand app performance (no individual-level advertising profiling).
• Payment processors (Apple / Google): Subscription payments are handled entirely by Apple App Store or Google Play. We do not process or store payment card information.
• Error tracking: Crash reporting and error logging to diagnose technical issues.

All third-party providers are chosen for their strong privacy and security practices and are contractually prohibited from using your data for purposes beyond providing their service to us.

We may disclose personal data if required to do so by law, court order, or government authority, or to protect the rights, property, or safety of Cobble, our users, or the public.

6. Data retention

We retain personal data for as long as your account is active and for a reasonable period afterwards to allow for account recovery or to comply with legal requirements. Specifically:

• Account data: Retained while your account is active. Deleted within 30 days of a verified deletion request.
• Pantry and recipe data: Deleted with your account.
• Usage logs: Retained for up to 12 months for security and diagnostic purposes, then deleted.
• Payment records: Retained as required by financial and tax law (typically 7 years) held by Apple/Google, not by Cobble directly.

7. Your rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access: Request a copy of all personal data we hold about you.
• Right to rectification: Ask us to correct inaccurate data.
• Right to erasure ("right to be forgotten"): Request deletion of your personal data.
• Right to restrict processing: Ask us to limit how we use your data in certain circumstances.
• Right to data portability: Receive your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests.
• Right to withdraw consent: Where we process data on the basis of consent, withdraw that consent at any time.

To exercise any of these rights, email privacy@eatwithcobble.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Security

We take the security of your personal data seriously. We use industry-standard encryption for data in transit (HTTPS/TLS) and at rest. Passwords are hashed and never stored in plaintext. Access to production systems is restricted to authorised personnel only.

No system is completely secure. If you become aware of any security vulnerability in the Cobble app or website, please contact us immediately at privacy@eatwithcobble.com.

9. Children's privacy

Cobble is not directed at or intended for children under the age of 13. We do not knowingly collect personal data from anyone under 13. If you believe we have inadvertently collected data from a child under 13, please contact us immediately and we will delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify users via in-app notification or email. Continued use of Cobble after changes are published constitutes acceptance of the updated policy. The "last updated" date at the top of this page indicates when the most recent changes were made.

11. Contact us

For all privacy-related enquiries, requests, or complaints:

Email: privacy@eatwithcobble.com
Website: eatwithcobble.com