Privacy Policy
Last updated: May 22, 2026
Who we are
HomeMade AI ('we', 'us') is a personal kitchen assistant operated by Clearskai Technologies. Contact: support@homemade.ai.
Data we collect
Account info (email, name, avatar). Profile (household size, dietary preferences, allergies, cooking skill). Content you create (recipes, labels, inventory items, meal plans, grocery lists, food logs, photos). Device tokens for push notifications you opt in to. Subscription / billing identifiers from Stripe, Apple, and Google. Usage telemetry (page views, feature counts) for performance and abuse detection. Camera/photo input is processed only to identify food items and generate recipes — images may be sent to AI providers (Google Gemini, OpenAI) for inference and are not retained for training by those providers under our enterprise terms.
Legal basis (EU/UK)
Contract performance for account, recipes, labels, billing. Legitimate interest for security, abuse prevention, and aggregate analytics. Consent for marketing email and push notifications. You can withdraw consent at any time.
How we use it
Provide and improve the service, generate AI recipes/labels, send the notifications you opt in to, prevent abuse, comply with law. We do not sell personal data.
Sharing
Service providers under contract: Lovable Cloud (Supabase) for storage and authentication, Stripe and RevenueCat for payments, Google Gemini and OpenAI for AI inference, Apple and Google for push delivery and (when you choose) Sign in with Apple / Sign in with Google. If you use Sign in with Apple with the 'Hide My Email' option, Apple relays a private address to us — we treat it the same as any other email. We disclose data only as needed to operate the service or when required by law.
Third-party sign-in
When you sign in with Apple or Google, the provider returns a verified email and (with your consent) your name. We do not receive your provider password. You can disconnect a provider at any time from Settings → Account; doing so does not delete your HomeMade data.
International transfers
Data may be processed in the United States and other countries where our providers operate, under Standard Contractual Clauses where required.
Retention
Account data is retained while your account is active. Deleting your account removes profile, recipes, labels, inventory, photos, push tokens within 30 days. Payment records are retained 7 years where required by law.
Your rights
Access, correct, export, or delete your data anytime from Settings → Account, or by emailing privacy@homemade.ai. EU/UK/CA residents have additional rights under GDPR/UK-GDPR/PIPEDA. California residents have rights under the CCPA/CPRA.
Do not sell or share (CCPA)
We do not sell or share personal information for cross-context behavioral advertising as defined by California law.
Children
Not intended for users under 13. We do not knowingly collect data from children.
Security
Encryption in transit (TLS) and at rest. Row-level access controls. Service-role keys are server-side only. Report vulnerabilities to security@homemade.ai.
Changes
Material changes will be announced in-app and by email at least 14 days before taking effect.
Contact
Questions: privacy@homemade.ai. EU representative: privacy-eu@homemade.ai. UK representative: privacy-uk@homemade.ai.