Privacy Policy

Last updated: 26 May 2026

Smart Kitchen Assistant ("we", "us") operates https://smartkitchenassistant.co.uk. This policy explains what personal data we collect, why we use it, and your rights. We are committed to handling information responsibly, especially where it relates to diet, health-related preferences, and camera-based barcode scanning.

1. Who we are

Data controller: Smart Kitchen Assistant. Contact: smartkitchenassistant@gmail.com.

2. Data we collect

Account data: email, username, password (hashed), and sign-in method (e.g. Google OAuth where enabled).
Recipe & preference data: dietary requirements (vegan, halal, NEMA, etc.), saved recipes, AI prompts, and generated recipe content.
Nutrition & health-related data: calorie and macro logs, meal entries, weight/height/activity goals you choose to enter. This is wellness information, not medical records — we do not provide medical advice.
Camera & barcode data: when you scan a product barcode, your device camera may be used locally in the browser to read the code. We do not store raw camera video; barcode values may be sent to third-party food databases to look up nutrition information.
Payment data: processed by Stripe; we do not store full card numbers.
Technical data: cookies, local/session storage (e.g. session identifiers), and standard server logs.

3. How we use data

We use your data to:

Provide recipe generation, editing, discovery, and saving features.
Personalise recipes to your stated dietary requirements.
Operate calorie and macro tracking, goals, and meal logging.
Manage subscriptions, trials, and account security.
Improve the service and respond to support requests.

4. Legal bases (UK GDPR)

We process data on the basis of contract (providing the service you signed up for), legitimate interests (security, improvement), and consent where required (e.g. optional marketing). You may withdraw consent without affecting core account functions where processing is not required for the contract.

5. Third parties

Firebase (Google): authentication and database hosting.
OpenAI: AI recipe generation when you request it.
Open Food Facts: food search and barcode nutrition lookups on the calorie tracker.
Stripe: subscription payments.
Netlify: application hosting and delivery.

These providers process data under their own terms and only as needed to deliver the feature you use.

6. Retention

We keep account and recipe data while your account is active. You may request account deletion via settings or by emailing us. Some data may be retained where required by law or for legitimate dispute resolution.

7. Your rights

UK users may have rights to access, rectify, erase, restrict, object, and data portability. Contact smartkitchenassistant@gmail.com. You may also complain to the ICO (ico.org.uk).

8. Security

We use industry-standard measures including encrypted connections and hashed passwords. No method of transmission over the internet is 100% secure.

9. Children

The service is not directed at children under 13. We do not knowingly collect data from children.

10. Changes

We may update this policy; the date above will change. Continued use after updates constitutes acceptance of the revised policy.