last updated
privacy policy
what thyme collects, why, and who else sees it.
the short version
- we collect what thyme needs to work: your email, your recipes and your purchases.
- when you import a recipe, OpenAI or Anthropic reads it and helps format it. nothing that identifies you is sent with it. you can turn off auto enhance any time.
- no ads, no tracking, no selling your data.
- you can export everything. deleting your account deletes it from our servers.
what we collect
only what the app needs to do its job:
| what | why | where it's kept |
|---|---|---|
| your email address | your account and sign-in links | Supabase |
| your Apple or Google sign-in id, and your name if you share it | signing in with Apple or Google | Supabase |
| recipes, notes, photos and cookbooks | keeping your library in sync across devices, and sharing cookbooks | Supabase |
| a push token for your device | telling you when an import finishes or fails | Supabase, and Apple to deliver it |
| purchases and your import balance | import packs | Apple handles payment; Supabase keeps your balance |
| error reports: what failed, the app version, your device type, a device id and your account id | to find and fix bugs | our server (Fly.io) |
| what you import: a link's page, a video, a photo or pasted text | turning it into a recipe | see imports and ai |
we don't collect your location, contacts, browsing history or usage analytics. if you've allowed it on your iPhone, Apple may share crash reports with us. Apple collects those, not thyme.
imports and ai
when you import a recipe, thyme sends it to our import server, which passes it to OpenAI or Anthropic. that can be the page behind a link, a video or reel, a photo, or text you pasted. their models find the title, ingredients, steps and timings. the same happens when you ask thyme to enhance a recipe.
- nothing is sent until you start an import.
- nothing identifies you: we don't send your name, email or account with it.
- you can turn off auto enhance in profile › import settings, so links you save stay as the page wrote them. importing a video, a reel or a photo always uses ai, because that's how thyme reads it.
- under their API terms, OpenAI and Anthropic don't use this data to train their models. they may keep it for a limited time to prevent abuse. their policies are linked below.
- ai can make mistakes, so you can edit any imported recipe.
who helps us run thyme
these companies process data for us, only to provide thyme:
- Supabase — accounts, database, photo storage. privacy policy
- Fly.io — our import server. privacy policy
- OpenAI and Anthropic — reading imported recipes. OpenAI · Anthropic
- Apple — Sign in with Apple, purchases, push notifications. privacy policy
- Google — Sign in with Google. privacy policy
- Resend — sending sign-in emails. privacy policy
- Cloudflare — this website and email forwarding. privacy policy
what we don't do
- no ads, in the app or on this site.
- no tracking across other companies' apps or websites.
- we never sell your data or share it with advertisers or data brokers.
- no analytics on this website, and no cookies.
shared cookbooks
everyone in a shared cookbook can see its recipes, its photos and the names of the other members. if you leave or are removed, you lose access to it. if the owner deletes their account, the cookbook passes to another member so it doesn't disappear for everyone else.
how long we keep it
we keep your data while you have an account. when you delete your account, we remove your account, recipes, photos, push tokens and import balance from our servers, including backups, within 30 days. shared cookbooks you own pass to another member. if you choose, your recipes can stay on your device and keep working without an account. Apple keeps its own record of your purchases.
your choices and rights
- export: profile › export recipes gives you every recipe, any time.
- correct: edit any recipe or your name in the app. to change your email, email us.
- delete: delete your account in the app, or email us from the address on your account.
- access: email us and we'll send a copy of what we hold about you.
depending on where you live, such as the EU, the UK or California, the law gives you these rights and more. we honor them for everyone, wherever you live, and answer requests within 30 days.
this website
recipethyme.app has no analytics and sets no cookies. our host, Cloudflare, may keep standard server logs, such as IP addresses, for a short time to keep the site secure.
ages 13 and up
thyme isn't meant for children under 13, and we don't knowingly collect data from them. if you think a child has given us data, email us and we'll delete it.
changes and contact
if this policy changes in a way that matters, we'll say so in the app before it takes effect. the date at the top shows the latest version.
thyme is run by Dan Little in Connecticut, USA. questions or requests: support@recipethyme.app.