Tapas
Privacy Policy
Last updated 25 August 2026
Tapas is a cooking app. This policy describes exactly what it stores, why, and who else sees it. It is written to be read, not to be skimmed past.
The short version. Your cookbook, meal plan, groceries and preferences are private to you and to the household you choose to share them with. Nothing is posted publicly unless you turn on activity sharing. We do not sell your data and we do not use it for advertising. You can delete everything from Settings → Delete account.
What we collect
| Data | Why |
|---|---|
| Email address and password, or your Apple / Google sign-in | To create and secure your account. Passwords are stored hashed; we never see them. |
| Display name, handle, avatar, bio | Your profile, shown to people you allow. |
| Recipes, ingredients, tags, notes and cover photos | The cookbook itself. |
| Meal plans and grocery lists | Planning and shopping, synced live with your household. |
| Cook sessions: photos, notes, ratings, timestamps | Your cooking history, and posts if you share activity. |
| Kitchen equipment and spices | To suggest substitutions and leave staples off your grocery list. |
| Food preferences, including allergies and dietary restrictions | To tailor suggestions. This can be health-related, so it is treated as sensitive: it is optional, visible and editable at Settings → What Tapas knows, and deletable at any time. |
| Messages you send the assistant | To answer them, and to keep the conversation for you to re-read. |
| Follows, posts, likes, blocks and reports | The social features and their safety controls. |
| Household membership | To share a cookbook, plan and grocery list with the people you live with. |
| Device push token | To notify you when a household member changes the plan or the grocery list. Only if you allow notifications. |
| Subscription status from Apple | To unlock Premium. We receive a transaction identifier and an expiry date, never your payment details. |
| Referral code and who used it | To credit free months to both people. |
| Moderation records of screened posts | To keep the feed safe and to answer appeals. |
| Feedback you send us | To answer it and fix what you reported. Includes your app version, device model and which screen you were on, and your email address only if you ask for a reply. |
| Anonymous usage events | Counts of what gets used: imports started and finished, cooks, grocery lists built, meals planned, whether the paywall converted. Never a recipe title, an ingredient, a caption, a message or a photo. You can turn this off at Settings → Analytics, which stops collection rather than merely hiding it. |
Tapas has no advertising SDK and does not track you across other apps or websites. We do not collect your location. The only analytics is the product usage above, which exists to tell us which features are worth building on, it is never sold, never used for advertising, and never shared with a data broker.
Who your data goes to
- Supabase hosts the database, file storage and server functions. Your data lives there. Supabase privacy policy.
- Anthropic processes AI requests: recipe imports, assistant messages, auto-tagging, preference parsing and post screening. Recipe text, your saved preferences relevant to the question, your message, and posted photos and captions are sent for processing. Anthropic does not train on this data. Anthropic privacy policy. Turning AI off in Settings stops all of this except post screening, which applies to anything you publish to other people.
- Apple handles sign-in, payments and push notifications.
- Google handles Google sign-in, if you use it.
- PostHog receives the anonymous usage events described above, keyed to your account id and nothing else. PostHog privacy policy. Turning off "Share usage data" in Settings stops this entirely.
- Resend delivers feedback you send us to our inbox, and our reply back to you. Resend privacy policy.
Nobody else. We do not sell personal information, and we do not share it for cross-context behavioural advertising.
Who else can see it
- Your household. Everyone in a household shares one cookbook, meal plan and grocery list, and can see and edit all of it. Your chats and saved preferences stay yours alone.
- People who follow you see your posts, and your cookbook if your profile is public or you accept their follow request.
- Everyone, if you set your profile to public, your handle, name, avatar, bio and public recipes become findable.
Posts are off by default. A new account shares nothing.
How long we keep it
Until you delete it. Feedback you send is kept for up to 24 months so we can follow up and track whether we fixed it. Usage events are retained by PostHog for 12 months. Deleting a recipe, chat, preference or post removes it. Deleting your account removes your profile, recipes, chats, preferences, photos, posts, follows and device tokens permanently. Recipes you shared into a household stay with that household, because they belong to everyone in it. Moderation records tied to a report are kept for up to 12 months so we can handle appeals and repeat abuse.
Your rights
You can see, correct, export or delete your data. Most of it is directly editable in the app; account deletion is in Settings. If you are in the EEA, UK, California or another place with data-protection law, you also have the right to object to processing, to restrict it, and to complain to your regulator. Email [email protected] for anything the app cannot do itself, including an export. We answer within 30 days.
Our legal basis for processing, where that concept applies, is performance of our contract with you (running the app), your consent (sensitive dietary preferences, notifications), and our legitimate interest in keeping the service safe (moderation, abuse prevention).
Children
Tapas is rated 12+ and is not directed at children under 13. We do not knowingly collect data from them. If you believe a child has an account, email us and we will delete it.
Security
Traffic is encrypted in transit. Access to your rows is enforced in the database itself, per user and per household, not only in the app. Private import uploads are stored in a non-public bucket. No system is perfect; if a breach affects you, we will tell you.
International transfers
Our providers process data in the United States. If you are outside the US, your data is transferred there under standard contractual clauses or an equivalent mechanism.
Changes
If this policy changes materially we will say so in the app before the change takes effect. The date at the top always reflects the current version.