Privacy Policy

Last Updated: March 21, 2026

Privacy Policy

This privacy notice for CleanCook ("we," "us," or "our") describes how and why we may access, collect, store, use and/or share ("process") your information when you use our services ("services"), including when you:

  • Download and use our mobile application (CleanCook), or any other application of ours that links to this privacy notice
  • Engage with us in other related ways, including any marketing or events

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our services. If you still have questions or concerns, please contact us at alonshellywork@gmail.com.

Key Principle: All data is stored on your device only

CleanCook protects your privacy: All your recipes, shopping lists, and preferences are stored locally on your device only. We do not store any personal information on external servers. Your data remains yours - always.

Summary of Key Points

This summary provides key points from our privacy notice. You can find more information about each of these topics by using the table of contents below.

1. What Personal Information Do We Collect?

Key Principle: We do not collect or store personal information on our servers. All your recipes, shopping lists, and preferences are stored locally on your device only.

Information Stored on Your Device

In short: All information is stored on your device only - not on our servers.

Your recipes, shopping lists, and preferences are stored locally on your device. If you choose to enable iCloud sync, your information will be synced through your private iCloud account only.

Sensitive Information. We do not process sensitive information.

Payment Data. We may collect data necessary to process your payment if you choose to make purchases, such as your payment instrument number and security code. All payment data is processed and stored by Apple. You can find their privacy notice here: https://www.apple.com/legal/privacy/

Application Data. If you use our application, we may also collect the following information if you choose to give us access or permission:

  • Push Notifications. We may request to send you push notifications about your account or certain features of the application. If you want to opt out from receiving these types of communications, you can disable them in your device settings.

Authentication Data

We automatically create an anonymous account for each user using a device identifier. This is stored on Supabase servers in the United States. No email or personal information is required or collected for this purpose.

AI Usage Data

We store the number of AI cleanups you perform per day on our servers to enforce usage limits. This data is linked to your anonymous account and deleted after 30 days.

Automatically Collected Information

In short: Certain information, such as your IP address and/or your browser and device characteristics, is collected automatically when you visit our services.

We automatically collect certain information when you visit, use, or navigate through our services. This information does not reveal your specific identity but may include device and hardware information such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our services, and other technical information.

The information we collect includes:

  • Log and Hardware Data. Information related to service, diagnostics, hardware, and performance that our servers automatically collect when you access or use our services.
  • Device Data. Information about the computer, phone, tablet, or other device you use to access the services, including IP address, device ID, location, browser type, hardware model, etc.
  • Location Data. We collect location data such as information about your device location, which could be precise or imprecise. You can opt out by disabling the location setting on your device.

2. How Do We Process Your Information?

In short: We process your information to provide, improve, and manage our services, to contact you, to check for safety and fraud, and to comply with the law.

We process your personal information for a variety of reasons, including:

  • To provide and facilitate the delivery of the services to the user.
  • To fulfill and manage your orders, payments, returns and exchanges made through the services.
  • To protect our services as part of our efforts to keep them safe and secure, including fraud monitoring and prevention.
  • To identify usage trends and to better understand how our services are being used so we can improve them.
  • To determine the effectiveness of our marketing campaigns and promotions.
  • To preserve or protect the vital interests of an individual, such as preventing harm.

3. What is the Basis for Processing Your Personal Information?

In short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e., legal basis) to do so under applicable law.

If you are located in the EU or United Kingdom, this section applies to you.

The General Data Protection Regulation (GDPR) and GDPR in the United Kingdom require us to explain the legal bases we rely on:

  • Consent. We may process your information if you gave us permission to use your personal information for a specific purpose. You can withdraw your consent at any time.
  • Performance of a Contract. We may process your personal information when we believe it is necessary to fulfill our contractual obligations to you.
  • Legitimate Interests. We may process your information when we believe it is reasonable to achieve legitimate business interests, including: analyzing how our services are used, supporting our marketing activities, and resolving and/or preventing serious and related issues.
  • Legal Obligations. We may process your information to the extent we believe it is necessary to comply with our legal obligations.
  • Vital Interests. We may process your information when we believe it is necessary to protect the vital interests of you or a third party.

4. When and With Whom Do We Share Your Personal Information?

In short: We may share information in specific circumstances and with specific third parties.

We may need to share your personal information in the following circumstances:

  • Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
  • Offer Walls. Our application may display a "offer wall" hosted by a third party that allows third-party advertisers to offer virtual currency, gifts, or other items to users in exchange for the acceptance and completion of an advertisement offer.
  • Supabase. Used for anonymous authentication and usage tracking. Privacy policy: https://supabase.com/privacy

5. Do We Use Cookies and Other Tracking Technologies?

In short: We may use cookies and similar tracking technologies (such as web beacons and pixels) to collect and store information.

We may use cookies and similar tracking technologies (such as web beacons and pixels) to collect information when you interact with our services. Certain online technologies help us maintain the security of our services, prevent crashes, fix bugs, save your preferences, and provide basic functionality within our services.

We also allow third parties and service providers to use online tracking technologies on our services for analysis and advertising, including to help manage and display advertisements.

Google Analytics

We may share your information with Google Analytics to track and analyze the use of our services. To opt out from tracking by Google Analytics across our services, visit https://tools.google.com/dlpage/gaoptout. For more information about Google's privacy practices, visit the Google Privacy & Terms page at https://policies.google.com/privacy.

6. Do We Offer AI-Based Products?

In short: We offer products, features, or tools powered by artificial intelligence, machine learning, or similar technologies.

As part of our services, we offer products, features, or tools powered by artificial intelligence, machine learning, or similar technologies (together, "AI Products"). These tools are designed to enhance your experience and provide you with innovative solutions.

We provide AI Products through third-party service providers ("AI Service Providers"), including OpenRouter. Your input, output, and personal information will be shared with and processed by these AI Service Providers to enable your use of AI Products.

Our AI Products are designed for text analysis.

How to Opt Out: Users can disable AI processing at any time through the application settings screen by enabling "Ask Before Using AI".

7. Is Your Information Transferred Internationally?

Your anonymous account data is stored on Supabase servers located in the EU (Frankfurt). AI requests are processed via OpenRouter servers in the United States.

Your recipes, shopping lists, and preferences remain stored locally on your device only. The only data transferred internationally is related to your anonymous account authentication and AI processing requests, which you can control through the application settings.

8. Where and How is Your Data Stored?

Important: All your data (recipes, shopping lists, preferences) is stored locally on your device only. We do not store any information on our servers or external servers.

If you choose to enable iCloud sync, your data will be synced through your private iCloud account to your other devices. Even in this case, the information remains under your ownership and complete control through Apple - we cannot access it.

9. How Do We Keep Your Information Safe?

In short: Your information is safe because it is stored only on your device.

Because all data is stored locally on your device only, it is protected by the device's own security mechanisms (lock code, Face ID, Touch ID, etc.). We do not send your data to any server, so there is no risk of server breaches or data leaks from our end.

10. Do We Collect Information from Children?

In short: We do not knowingly collect, process, or market data to or from children under the age of 18, or knowingly sell such personal information.

We do not knowingly collect, process, or market data to or from children under the age of 18, and we do not knowingly sell such personal information. By using the services, you represent that you are at least 18 years old or that you are a parent or guardian of such a child and consent to your minor child's use of the services. If we learn that personal information from users under 18 years old has been collected, we will deactivate the account and take reasonable steps to promptly delete such data. If you are aware of any data we may have collected from children under 18, please contact us at alonshellywork@gmail.com.

11. What Are Your Privacy Rights?

In short: Depending on your state of residence in the US or certain regions, such as the EEA, UK, Switzerland, and Canada, you have rights that allow you to greater access and control over your personal information.

In certain regions (such as the EEA, UK, Switzerland, and Canada), you have certain rights under applicable data protection laws. These may include the right to: request access and obtain a copy of your personal information, request correction or deletion, restrict the processing of your personal information, data portability, and not be subject to automated decision-making.

If you have questions or comments about your privacy rights, you may email us at alonshellywork@gmail.com.

12. Controls for Do-Not-Track Features

Most web browsers and certain mobile operating systems include a "Do-Not-Track" (DNT) feature or setting that you can activate to signal your privacy preference. As such, we currently do not respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If an internet-wide standard for the distribution of web-based Do Not Track signals is adopted that we must follow in the future, we will inform you of this practice in a revised version of this privacy notice.

13. Do US Residents Have Specific Privacy Rights?

In short: If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have specific privacy rights.

Categories of Personal Information We Collect:

CategoryExamplesCollected
A. IdentifiersContact details, such as real name, nickname, postal address, email address, and account nameNo
B. Personal Information (CA Registry)Name, contact information, education, transactions, financial informationNo
C. Protected Classification CharacteristicsGender, age, date of birth, race and ethnicity, national origin, marital statusNo
D. Commercial InformationTransaction information, purchase history, financial details, and payment informationYes
E. Biometric InformationFingerprints and fingerprint voiceprintsNo
F. Internet or Other Network ActivityBrowsing history, search history, online behavior, interest data, and interactions with websitesYes
G. Geolocation DataDevice locationNo
H. Audio, Electronic, Sensory InformationImages, audio, video, or voice recordingsNo
I. Professional or Business-Related InformationBusiness contact details, work history, professional skillsNo
J. Education InformationStudent records and instructor informationNo
K. Inferences Drawn from Personal InformationInferences drawn to create a profile or summary of individual preferencesNo
L. Sensitive Personal InformationNo

We will use and retain the personal information collected as needed to provide the services or for:

  • Category D - As long as the user has an account with us
  • Category F - 1 year

Your Rights

  • Right to know whether we process your personal data or not
  • Right to access your personal information
  • Right to correct inaccuracies in your personal data
  • Right to request deletion of your personal information
  • Right to obtain a copy of personal information you previously submitted
  • Right to non-discrimination for exercising your rights
  • Right to opt out from processing of your personal information if it is used for targeted advertising

To exercise these rights, you can contact us by submitting a Data Subject Access Request or by sending us an email at alonshellywork@gmail.com.

14. Do Other Regions Have Specific Privacy Rights?

In short: You may have additional rights based on the country in which you reside.

Australia and New Zealand

We collect and process your personal information under the obligations and provisions established by Australia's Privacy Act of 1988 and New Zealand's Privacy Act of 2020.

Republic of South Africa

At any time, you have the right to request access or correction of your personal information. You can make such a request by contacting us using the contact details provided below.

15. Do We Update This Notice?

In short: Yes, we will update this notice as required to remain compliant with relevant laws.

We may update this privacy notice from time to time. The updated version will be indicated by an updated "Revised" date at the top of this privacy notice. If we make material changes to this privacy notice, we may notify you either by prominently posting a notice of such changes or by sending you a direct notification.

16. How Can You Contact Us About This Notice?

If you have questions or comments about this notice, you can email us at alonshellywork@gmail.com or contact us by mail at:

CleanCook

Jerusalem, Israel 9100000

Israel

17. How Can You Review, Update, or Delete the Data We Collected from You?

Based on the applicable laws of your country or state of residence in the US, you may have the right to request access to the personal information we collected from you, details about how we processed it, correction of inaccuracies, or deletion of your personal information. You may also have the right to withdraw your consent to our processing of your personal information. To request a review, update, or deletion of your personal information, please fill out and submit a Data Subject Access Request at:

https://app.termly.io/dsar/7bbea211-b477-4c8a-aff2-6c8c252d3a7c

This privacy policy was created using Termly's Privacy Policy Generator.