Privacy Policy

Who is responsible

The service is operated by the Nonnabook developer in Israel, who is the controller of your data. Contact for any privacy matter: support@nonnabook.com.

Stored only on your device

Recipes, collections, shopping lists, meal plans, notes, photos, "made it" counters and preferences. Kosher level, dietary preferences, Shabbat mode and city stay on your device and are not stored on our server.

Sent to our server, and when

• Smart import and recipe chat: when you share, paste or ask about a recipe, its text, link or image is sent to our server (Supabase) and passed to an Anthropic AI model for processing. Content is not used for model training and is not kept after processing, apart from a usage counter (a random device identifier) and a cache of the result for public links.
• Smart menu planning: your recipe titles and tags, with your kosher level and dietary preferences, are sent with that request only so the suggestion fits you, and are not stored.
• Cloud backup (optional): recipes, lists and plans sync to your account.
• Share links: a recipe you choose to share is published on a public web page with a short code, with the name you chose to show.
• Purchases: subscriptions are handled by Apple and RevenueCat. We never see payment details.
• Analytics and crash reports: anonymous usage events (e.g. "recipe saved") through PostHog, and technical crash reports through Sentry. No recipe content, no location, no cross-app tracking.

Sign in with Apple or Google

Signing in is optional and only used for backup and sync. From Apple or Google we receive an account identifier, your email address, and your name if you chose to share it (the openid, email and profile scopes). We use them only to identify your account and store your backup. We do not sell them, do not use them for advertising, and do not share them except with our server provider (Supabase), which hosts the account. We do not access any other data in your Google account.

Nonnabook's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Service providers

Supabase (server and database), Anthropic (AI processing), RevenueCat (subscriptions), PostHog (analytics, EU servers), Sentry (crash reports), Cloudflare (website and share pages). Each is bound by agreement to protect the data at least as well as this policy. Some providers process data outside Israel, including in the United States and the European Union.

Permissions

Camera and photo library for recipe photos; notifications for timers and reminders. All optional, and can be turned off in iPhone Settings.

Retention and deletion

• Cloud data is kept while the account exists. "Delete account" under Settings › Account removes your cloud data and the account immediately.
• You can also ask for deletion without the app by emailing support@nonnabook.com from the account's address. We handle it within 30 days.
• A share page stays available until you delete your account, or ask us by email to remove it.
• Deleting the app removes local data. PDF and JSON export are always available.

Your rights

You may ask to access, correct, delete or receive a copy of your data, and withdraw consent at any time. Requests: support@nonnabook.com; we reply within 30 days. If you are not satisfied, you can contact the Israeli Privacy Protection Authority, or in the EU your local supervisory authority.

Children

The app is not directed at children under 13, and we do not knowingly collect their data.

Changes

This page is updated when something changes; the date above marks the version. Material changes are also shown in the app.