Privacy policy

CraveRight helps you fit the recipes you love to your calorie and protein goals. This page explains what information we keep, why, who helps us process it, and your rights. We keep it as short as we can.

Who we are

CraveRight is run by Basim Hafiz, a sole trader in the United Kingdom, who is responsible for your information (the “data controller”). Contact us any time at support@craveright.app.

What we keep

• Your account. When you sign in with Google, we receive your name, email address and profile picture from Google. We never see your Google password.
• Your household. The people you add and their goals (calories, protein, and any carb or fat limits), and the email addresses of anyone you invite to share your household.
• Your meals. Recipes you add, including the links or text you give us, their ingredients and photos, your plans, shopping lists and cooking steps.
• Usage of the recipe assistant. A record of each time the AI is used for your household and what it cost, so we can keep usage fair.

The goal calculator asks for your age, height, weight and sex to suggest a daily goal. Those answers stay on your screen and are not saved; only the goal you choose is kept.

Why we use it

• To provide CraveRight: scaling recipes to each person's goals, shopping lists, cooking steps and portions. This is necessary to provide the service you asked for.
• To keep it secure and fair, for example limiting how much of the recipe assistant one household can use in a day. This is in our legitimate interests.
• To answer you when you contact us, and to improve CraveRight using feedback you give us.

We do not sell your information, and we do not use it for advertising.

Who helps us

These companies process information for us, only to run CraveRight:

• Supabase: our database and sign-in. Your data is stored in London.
• Vercel: hosts the website and app.
• Google: lets you sign in with your Google account.
• Anthropic: the AI that reads recipes, adjusts them to your goals and writes cooking steps. It receives the recipe text, links and video frames you add, the goals they are being fitted to, and the names you gave the people in your household. It does not receive your email address.
• Unsplash: when a recipe has no photo, we search Unsplash for one using the dish name.
• Cloudflare: runs our web address and forwards email sent to us.

Some of these companies are based in the United States. Where your information leaves the UK, it is protected by the safeguards UK law requires, such as the UK–US data bridge or approved contract terms.

When you add a recipe from a link, CraveRight fetches that page or video to read the recipe. The site it comes from (for example TikTok or YouTube) sees a request from our servers, not from you.

Cookies and your device

We use only cookies needed for CraveRight to work: one keeps you signed in, one remembers an invite link while you sign in, and one remembers which step of a cook you were on. Your phone also keeps your shopping ticks, finished steps and running timers, so they survive closing the app. We use no advertising or tracking cookies. If that ever changes, we will ask you first.

How long we keep it

We keep your information while you have an account. If you ask us to delete your account, we delete your household's people, meals and plans within 30 days, unless the law requires us to keep something.

Your rights

You can ask to see the information we hold about you, correct it, delete it, receive a copy, or object to how we use it. Email support@craveright.app and we will reply within one month. If you are unhappy with how we handle your information, you can complain to the Information Commissioner's Office at ico.org.uk.

Who CraveRight is for

CraveRight is for adults aged 18 and over. Please don't use it if you are under 18.

Changes

If we change this policy, we will update the date at the top, and tell you in the app or by email if the change matters.