Privacy Policy

1. Personal Information We Collect

• Account and profile information: your email address, username, name, date of birth, optional country and language, profile details, preferences, and information received when you sign in through Google or Discord.
• Recipe and health-related inputs: ingredients, recipes, prompts, dietary preferences, allergies or restrictions, wellness goals, serving details, and your conversations with AI features. This information may be sensitive depending on what you choose to provide.
• Content and community activity: recipes, images, posts, comments, ratings, tags, favorites, messages, reports, and other content or actions you submit. Your profile and content are public only where you choose to publish them or make them visible.
• Communications: support requests, feedback, survey responses, and other messages you send us.
• Device, usage, and security information: IP address or a protected version of it, browser and device information, pages and features used, timestamps, login and security events, rate-limit records, and error or diagnostic information.
• Information we create: generated recipes and images, nutrition estimates, ingredient matches, health summaries, tags, recommendations, moderation results, and other information inferred from your inputs and activity.

2. How We Use Personal Information

• Provide, maintain, personalize, and improve Sipz.
• Create recipes, images, nutrition estimates, health summaries, search results, and recommendations, and provide community and messaging features.
• Authenticate users, keep accounts and the Service secure, prevent abuse and fraud, moderate content, and enforce our Terms.
• Respond to you and send service, security, account, and policy notices.
• Measure and improve reliability and features using aggregated, de-identified, or limited diagnostic information where practical.
• Carry out another purpose we clearly explain and, where required, ask you to consent to.

3. Consent and Legal Bases

We collect, use, and share personal information with your consent or as otherwise permitted by law, for purposes a reasonable person would consider appropriate. You may withdraw consent, but this will not affect earlier lawful processing and may prevent us from providing features that need the information. If European or UK law applies, our legal bases may include providing the Service under our contract with you, our legitimate interests in operating and securing Sipz, your consent, and compliance with law.

4. AI and Automated Processing

Sipz sends the information needed for an AI feature—such as your prompt, ingredients, recipe details, or health goals—to AI service providers, including OpenAI, to generate or check results. Sipz also uses automated systems to match ingredients, estimate nutrition, organize content, recommend recipes, detect misuse, and help moderate the Service. AI results may be inaccurate and are not medical advice. Sipz does not currently use automated processing to make decisions that produce legal or similarly significant effects about you. You may contact us if you believe an automated moderation or security action affected your account unfairly.

Only provide personal or health information that is necessary for the feature you are using. Do not include medical records, government identifiers, payment card details, or another person's private information in prompts, recipes, messages, or uploads.

5. When We Share Information

• Service providers: companies that help us run Sipz, such as Supabase for hosting, database, storage, and authentication; OpenAI for AI features; and, when enabled, Upstash for rate limiting. They receive only the information reasonably needed to provide their services and are subject to contractual or other protections. Providers may change as the Service develops.
• Services you connect or open: Google or Discord receives information when you choose its sign-in service. Embedded or linked services, such as YouTube, may collect information when you open or interact with them under their own privacy policies.
• Legal: when reasonably necessary to comply with law or valid legal process, investigate misuse, enforce our Terms, or protect the rights, safety, or property of Sipz, our users, or others.
• Business transfers: as part of a financing, reorganization, merger, acquisition, sale, or similar transaction, subject to appropriate confidentiality and use restrictions.
• Public content: profiles, recipes, images, comments, ratings, and other material you choose to publish can be seen, copied, or shared by anyone. Private messages and non-public account settings are not made public by Sipz.

6. Cookies and Device Storage

Sipz uses essential cookies and similar browser storage to keep you signed in, remember your language and preferences, protect forms, manage password recovery, apply usage limits, and preserve drafts or generation progress. Recipe drafts and form choices saved in local or session storage stay on your device until they expire, are replaced, or you clear them. You can remove cookies and site data in your browser, but some features may stop working. Sipz does not currently sell personal information or use it for targeted advertising.

7. Retention and Deletion

We keep personal information only as long as reasonably needed for the purposes described here. The period depends on the kind of information, whether your account is active, whether content is public, the sensitivity and risk of the information, and our security, dispute, and legal obligations. Short-lived AI working records and diagnostic logs are generally kept for less time than account records or content you publish. Browser storage remains on your device until it expires or you clear it.

You can request account deletion in account settings or by contacting us. We will process the request after any applicable waiting or verification period. Deletion may not be immediate, and limited information may remain in backups, security and abuse records, transaction records, content already shared by others, or records we must keep by law. Where appropriate, we may de-identify information instead of deleting it.

8. Security and Breaches

We use reasonable administrative, technical, and organizational safeguards designed for the nature and sensitivity of the information we handle. No internet service can guarantee perfect security. If a breach creates a real risk of significant harm, we will notify affected people and privacy regulators as required by law. Contact us promptly if you believe your account or information has been compromised.

9. Your Rights and Choices

• Ask whether we hold personal information about you and request access to it, including an account of how it has been used and shared.
• Correct inaccurate information, change profile visibility and preferences, or ask us to delete information.
• Withdraw consent or object to or restrict certain processing where applicable.
• Request a portable copy of eligible information where required by law.
• Raise a privacy concern without retaliation and complain to the appropriate privacy regulator.

You can manage some choices in account settings. For other requests, contact our Privacy Officer at contact@sipz.ai. We may need to verify your identity and may refuse or limit a request where permitted by law. We will explain any applicable exception.

10. International Processing

Sipz and its service providers may process or store personal information in Canada, the United States, and other countries where they operate. Information in another country may be subject to that country's laws and may be lawfully accessed by courts, law enforcement, or national-security authorities. We remain responsible for personal information transferred to providers acting on our behalf and use contractual or other measures intended to provide a comparable level of protection.

11. Children and Teens

Sipz is not for children under 13 or anyone below a higher minimum age required where they live. A user under the age of majority may use Sipz only with permission and supervision from a parent or legal guardian. We ask for date of birth to help apply age rules, and alcohol-related features are only for people of legal drinking age. If we learn that a child used Sipz without valid permission, we will restrict the account and delete or otherwise handle the information as required by law. Parents and guardians may contact our Privacy Officer about a young person's information.

12. Changes to This Policy

We may update this Policy as Sipz and privacy laws change. We will post the revised Policy with a new effective date and take reasonable steps to notify you of material changes. If we want to use personal information for a materially new purpose, we will explain that purpose and ask for consent where required by law.

13. Contact and Complaints

The operator of Sipz is responsible for personal information under its control. Send questions, requests, and complaints to the Sipz Privacy Officer at contact@sipz.ai.

We will investigate privacy complaints and explain our response. If we cannot resolve your concern, you may contact the Office of the Privacy Commissioner of Canada.