Privacy Policy

What Tavola is

Tavola is a recipe management app in active beta development. It is built and operated by a solo developer. This policy is written in plain language to be transparent about how your data is handled.

What data we collect

• Account information: Email address and optional display name, stored via Supabase Auth.
• Recipe data: Recipes you save, import, or scan, including ingredients, instructions, images, and source URLs.
• AI preferences: Cooking skill level, dietary restrictions, kitchen equipment, and heritage context you optionally provide for AI personalization.
• Meal plans and grocery lists: Weekly meal plans and generated grocery lists.
• AI usage logs: We log AI API calls (provider, model, token counts, estimated cost) for cost tracking. These do not include your recipe content or personal data.
• Analytics: We use Vercel Analytics to collect anonymous, aggregated page view and performance data. No cookies are set and no personal data is collected by analytics.

How we use AI

Tavola uses third-party AI providers (currently Google Gemini and OpenAI) for features like recipe search, meal planning, ingredient normalization, and recipe chat. When you use these features, relevant recipe data is sent to the AI provider to generate responses.

AI providers process data under their own terms. We do not use your data to train AI models. AI responses are not stored beyond what you see in the app (e.g., chat history, meal plan suggestions you accept).

How we store and protect data

All data is stored in Supabase (hosted on AWS) with Row Level Security enabled on every table. Your data is only accessible to your account. Recipe images are stored in Supabase Storage with access-controlled URLs.

The app is deployed on Vercel. All traffic is encrypted via HTTPS.

Data sharing

We do not sell your data. We do not share your data with third parties beyond the infrastructure providers needed to run the app (Supabase, Vercel, AI providers as described above).

Your rights

• Export: You can export all your recipes at any time from the Export page in the app.
• Delete: You can delete your account from Settings. This soft-deletes your profile and associated data. To request permanent deletion of all data, contact us.
• Access: You can view all data stored about you through the app itself.

Contact

For privacy questions or data requests, use the beta feedback form in the app or email the address listed in your beta invite.