Privacy policy

Effective October 3, 2026

Who we are

Cookie is developed and operated by BC Software LLC, based in Washington State, USA. Questions about this policy or your data: [email protected].

What Cookie is

Cookie is a household recipe, meal-planning and shopping app. You sign in, keep recipes, plan a week, build a shopping list, and share with the people you cook with. Unlike a notes app, your recipes live on our servers so your household and your phones see the same thing.

What we store

Your account: your email address, the name you choose to show, and when you signed in.
Your recipes: titles, ingredients, steps, notes, tags, photos, the source you imported from, and edit history.
Your plans and lists: meal plans, shopping lists, what you ticked off, and which store products you matched lines to.
Your groups: who is in them, what is shared into them, and invites.
Your store: if you pick one, its name, id and location, so the app can match your list to it.
Cookie Pro: if you subscribe in the app, which plan and until when, as the App Store reports it, so Cookie knows you're Pro.
Usage counts: how many times features that cost us money were used, to apply fair-use limits.

All of this is stored on Cloudflare's infrastructure in the United States.

What we don't do

We don't sell your data, show ads, or use advertising identifiers. We don't track your location: the store arrival feature runs entirely on your phone and never sends your position anywhere. We don't read your recipes except as needed to run the service or when you ask us for help.

Who else sees data, and why

Apple when you subscribe to Cookie Pro. Apple takes the payment and tells us the plan and when it renews or ends; we never see your card.
Apple and Google when you sign in with them. They tell us your email address; we don't receive your password.
Anthropic when you import a recipe from a link, a photo or pasted text, or ask Cookie to translate or tidy one. The page text or photo is sent to their Claude model to read the recipe. How they handle it is set by Anthropic's commercial terms.
Kroger and Walmart when you pick one of their stores. Your zip code, the store you chose, and the words on your shopping list go to their catalogue so we can show matching products. No account of yours with them is involved.
Open Food Facts when you scan a barcode: the barcode number is looked up in their public database.
Resend sends our sign-in emails. Google Fonts serves the site's typefaces, which means Google sees your browser's request for them.
People in your groups see what you share into the group: recipes, their photos and notes, and plans you share. That is the point of a group; share accordingly.

How long we keep it

Your data stays while your account exists. Deleted recipes stay in trash for 30 days, then are deleted for good; you can empty it sooner. Sign-in codes expire within minutes; sessions expire after a period of inactivity. Backups you export are yours to keep.

Deleting your account

In the app or on the site: More (or You) → Delete account. Take a backup first; the screen offers one. Your account is kept for seven days in case you change your mind, and signing in during that week lets you cancel. After that, everything is deleted for good: recipes, photos, plans, lists, groups you own, and the account itself. Nothing can be recovered afterwards. If you can't sign in, email [email protected] from the address on your account. Full steps: mycookie.app/delete-account. Deleting your account doesn't cancel a Cookie Pro subscription; cancel it in your App Store or Google Play subscriptions.

Your rights

You can export everything you have put into Cookie from the Backups screen at any time. You can correct or remove anything yourself. If you are in a place that gives you additional rights over your personal data, email us and we will honour them.

Children

Cookie is not for children under 13. If you think a child has an account, email us and we will remove it.

Changes

If this policy changes in a way that matters, we will say so in the app and here, with a new effective date.