Cookabout Privacy Policy

Effective date: July 18, 2026

Cookabout ("we," "us," or "our") is developed and operated by Echohey. This Privacy Policy explains what information the Cookabout mobile application (the "App") collects, how we use it, and the choices you have. Cookabout is designed to collect as little personal information as possible: we show no ads, we use no third-party analytics tools, and we never sell your data.

If you have any questions, contact us at support@echohey.com.

1. Information We Collect

We collect only the following information:

• Account information from your sign-in provider. Cookabout offers passwordless sign-in through Google and Apple. When you sign in, we receive your email address and your name (or nickname) as provided by Google or Apple. We do not receive or store your Google or Apple password. If you use Apple's "Hide My Email" feature, we only receive the private relay address Apple generates for you.
• Your pantry and dietary preferences. If you choose to use the "What's for dinner tonight" feature, you can tell the App which ingredients you have at home, your dietary goals, and any food allergies or dietary restrictions. This information is stored on our servers and linked to your account so your selections stay in sync.
• Menu photos you choose to scan. When you use the menu scan feature at a restaurant, you can take or select photos of the menu to upload. Each photo is used only to recognize the dishes and generate ordering suggestions for that request; we do not keep the photo afterward. Camera and photo permissions are requested only when you actively use this feature, and the App never scans or reads other content in your photo library.
• Information you send us directly. If you email us feedback or a support request, we receive your email address and the contents of your message.

We do NOT collect:

• Your location. The App never requests location permissions.
• Advertising identifiers. The App contains no ads and no advertising SDKs.
• Analytics data. The App currently contains no third-party analytics SDKs.
• Contacts, microphone, or any other device data. Apart from the menu photos you explicitly choose to upload, we never access your photo library.

2. How We Use Your Information

We use the information described above only to:

• Create and maintain your account, and keep you signed in across your devices;
• Provide dish suggestions that match your pantry ingredients, dietary goals, and allergen settings;
• Recognize the menu photos you submit and generate ordering suggestions;
• Sync your pantry and preferences across your devices;
• Respond to your support requests and feedback;
• Maintain the security of our service, including letting you sign out of all devices.

We do not use your information for advertising, profiling unrelated to the App's cooking features, or any purpose not listed here. We never sell your personal information, and we never share it with third parties for their marketing purposes.

AI processing. The App's AI features (step-by-step cooking guidance, dish suggestions, and menu scanning) are powered by third-party AI model providers acting on our behalf. The content you submit for these features (your question text or menu photos) is transmitted to the provider solely to generate the response for that request, without your account identity attached.

3. Sign-in with Google and Apple

Cookabout uses Google Sign-In and Sign in with Apple solely to verify your identity. Your use of these services is also governed by the respective privacy policies of Google and Apple. We receive only the basic profile information (email address and name) they provide upon your authorization; we cannot access anything else in your Google or Apple account.

When you delete your Cookabout account, we unlink your Google or Apple identity from our service (see Section 6). You can also revoke Cookabout's access at any time in your Google Account settings or Apple ID settings.

4. Data Storage and Security

Your data is stored on our servers and transmitted exclusively over encrypted HTTPS connections. We apply reasonable technical and organizational measures to protect your information against unauthorized access, alteration, or destruction. No method of transmission or storage is 100% secure, but we limit risk by collecting only the minimum data necessary.

The App also provides a "Sign out of all devices" option so you can immediately end all active sessions if you believe your account has been accessed without your permission.

5. Data Retention

We keep your account information and preferences for as long as your account exists. When you delete your account (see Section 6), your personal information — including your email address, name, pantry selections, and dietary preferences — is erased from our active systems. Residual copies in routine backups are overwritten in the ordinary course of our backup cycle. Emails you send to our support address are retained only as long as needed to resolve your request.

6. Your Rights: Access, Deletion, and Control

Delete your account in the App. Go to Me → Account → Delete Account. Deleting your account unlinks your Google or Apple identity from Cookabout and erases your personal information from our systems. This action cannot be undone.

Delete by email. You may also request deletion by emailing support@echohey.com from the address associated with your account. We will complete the deletion within 30 days.

Access and correction. You may request a copy of the personal information we hold about you, or correction of inaccurate information, by emailing support@echohey.com.

Sign out of all devices. Available in the App under account settings.

7. Children's Privacy

Cookabout is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at support@echohey.com and we will promptly delete it, consistent with the U.S. Children's Online Privacy Protection Act (COPPA).

8. Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect and how we use it (described in Sections 1 and 2);
• Access the personal information we hold about you;
• Delete your personal information;
• Correct inaccurate personal information;
• Non-discrimination for exercising these rights.

We do not sell or "share" (as defined by the CPRA) your personal information, and we have not done so in the preceding 12 months. To exercise any of these rights, use the in-app account deletion feature or email support@echohey.com. We will verify your request using the email address associated with your account.

9. Users in the European Economic Area and United Kingdom (GDPR)

Cookabout is designed for users in the United States. If you nevertheless use the App from the EEA or UK, the following applies:

• Legal bases. We process your account information to perform our contract with you (providing the App), and your pantry/dietary preferences with your consent, which you may withdraw at any time by clearing those settings or deleting your account.
• Your rights. You have the rights of access, rectification, erasure, restriction of processing, data portability, and objection. Exercise them via the in-app deletion feature or by emailing support@echohey.com.
• International transfer. Your data is processed on servers that may be located outside the EEA/UK. We protect it as described in this policy regardless of where it is processed.
• Complaints. You have the right to lodge a complaint with your local supervisory authority.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify you in the App. Your continued use of Cookabout after changes take effect constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices: