Privacy Policy

Cravin LLC ("Cravin," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you use the Cravin mobile application, our website at cravinai.com, and related products and services (collectively, the "Services").

Cravin is an AI-powered food and recipe application that allows users to identify ingredients, generate and discover recipes, receive personalized food recommendations, use AI-powered cooking and recipe features, maintain shopping lists, save recipes, and access related functionality.

By using the Services, you acknowledge the practices described in this Privacy Policy.

1. Who We Are

The Services are operated by:

• Cravin LLC
• 306 W Redwood St, STE #4586
• Baltimore, MD 21201
• United States
• Email: support@cravinai.com
• Website: cravinai.com

2. Information We Collect

The information we collect depends on how you use Cravin.

A. Account and Contact Information

When you create or maintain an account, we may collect:

• Email address
• Internal user or account identifier
• Authentication and session information
• Account creation and activity timestamps
• Optional display name
• Optional username
• Optional profile/avatar image

Authentication is provided through our authentication infrastructure. Passwords, where applicable, are not stored by Cravin in plaintext.

B. Age and Profile Information

We may collect information you provide during onboarding or while using Cravin, including:

• Date of birth or age
• Gender
• Cooking skill level
• Food and cuisine preferences
• Dietary style
• Preferred seasonings and pantry ingredients
• Food-related goals
• Information about how you learned about Cravin

Cravin is intended for users who are at least 16 years old. Additional requirements apply to users under 18 as described below.

C. Allergy, Dietary, and Health-Related Information

You may choose to provide information concerning:

• Food allergies
• Food sensitivities
• Dietary restrictions
• Dietary preferences
• Certain food, nutrition, or wellness-related goals

Some of this information may constitute health-related or sensitive personal information under applicable law.

We use this information primarily to personalize recipes, ingredient suggestions, recommendations, and other Cravin features.

Cravin does not guarantee that any recipe, recommendation, ingredient identification, substitution, or AI-generated output is allergen-free or appropriate for your individual health needs. AI systems may make mistakes. You should independently verify ingredients, product labels, substitutions, preparation methods, and potential cross-contact or cross-contamination risks before consuming or preparing food.

Additional disclosures regarding consumer health data may be provided in our Consumer Health Data Privacy Notice.

D. Photos and Images

Cravin may allow you to provide photos using your device's camera or photo library. These may include:

• Fridge or pantry photographs used to identify ingredients
• Photographs attached to AI chat or dish-identification features
• Optional profile/avatar photographs

Fridge and pantry photographs may be transmitted to third-party AI service providers, including OpenAI and Anthropic, to identify ingredients and provide the requested functionality. Certain dish or chat photographs may be processed by OpenAI.

Cravin does not persistently store fridge/pantry scan photographs or chat-attached food photographs on its own servers after they are processed for the requested functionality. Such images may be processed temporarily through our infrastructure and may be processed or retained by our service providers according to their applicable terms, contractual commitments, configurations, and retention practices.

Optional avatar images are stored using our cloud object-storage provider and remain stored until they are replaced, removed, or deleted in connection with account deletion, subject to applicable exceptions.

AI-generated recipe illustrations are generated from recipe-related text and are not copies of your fridge or pantry photographs.

E. Recipe, Chat, and Other User Content

We may collect content you submit or create through Cravin, including:

• Recipe-generation requests and "craving" prompts
• AI chat messages and chat history
• Generated-recipe history
• Saved recipes
• Shopping-list items
• Recipe ratings and reviews
• Recipe reports and accompanying notes
• Regeneration feedback
• Other feedback
• Other text or content you voluntarily provide

Some AI-generated recipes may become part of Cravin's shared recipe catalog. If your account is later deleted, Cravin may retain recipes and associated AI-generated recipe images that have been incorporated into the shared catalog, provided they are no longer linked to you or your deleted account.

F. Nutrition and Recipe Information

Cravin generates nutritional estimates for recipes, including:

• Calories
• Protein
• Carbohydrates
• Fat

These values are estimates generated or calculated as part of the Services and may not reflect the precise nutritional composition of a meal.

G. Usage and Interaction Information

We may collect information about how you interact with Cravin, including activities such as:

• Recipe views
• Recipe saves
• Ingredient scans
• AI chats
• Recipe generations
• Ratings and reviews
• Shopping-list interactions
• Recipe completion or cooking activity
• Other feature interactions

We may also maintain first-party AI usage information such as the feature used, AI provider or model, token usage, generation counts, and estimated processing costs. This information may be associated with your internal user identifier.

At launch, Cravin does not use third-party advertising, attribution, or behavioral analytics SDKs and does not collect advertising identifiers for cross-context behavioral advertising.

H. Technical and Security Information

Our infrastructure and service providers may automatically process limited technical information necessary to operate, secure, and troubleshoot the Services, such as:

• IP address
• Request metadata
• Authentication/session information
• Server or function logs
• Security-related information

Cravin does not currently collect precise device location through the Services. A software package being present within an application build does not mean that Cravin accesses location information; Cravin does not currently invoke location functionality or request location permission for its Services.

I. Subscription and Transaction Information

Cravin may offer paid subscriptions, including Cravin Pro. Purchases made through the Apple App Store or Google Play are processed by the applicable platform and, where implemented, subscription-management service providers.

Cravin may receive information necessary to determine subscription status and entitlements, such as:

• Subscription status
• Product or subscription purchased
• Renewal or expiration information
• Transaction or receipt identifiers
• Related entitlement information

Cravin does not receive your full payment-card number from Apple or Google merely because you purchase a subscription through their app stores.

3. How We Use Information

We may use personal information to:

• Create, authenticate, secure, and maintain accounts
• Provide fridge and pantry scanning
• Identify ingredients and dishes
• Generate recipes and recipe images
• Operate AI-powered chat and cooking features
• Personalize recipes based on allergies, dietary preferences, cuisines, seasonings, cooking ability, and other preferences
• Generate and display nutritional estimates
• Maintain saved recipes and shopping lists
• Operate reviews, ratings, reporting, and feedback functionality
• Maintain and improve the shared recipe catalog
• Provide and manage subscriptions and paid features
• Monitor usage, reliability, security, abuse, and AI-processing costs
• Troubleshoot and improve Cravin
• Respond to support requests
• Send administrative, security, transactional, and service communications
• Send marketing communications where permitted by applicable law and subject to applicable choices and consent requirements
• Protect Cravin, our users, and others against fraud, abuse, security threats, and unlawful activity
• Comply with legal obligations and enforce our agreements
• Establish, exercise, or defend legal claims

We may also use de-identified or aggregated information for legitimate business purposes where the information can no longer reasonably identify you.

4. Artificial Intelligence Processing

AI is fundamental to Cravin. To provide AI-powered functionality, information you submit may be transmitted to AI service providers acting on our behalf. Our current AI service providers include:

• OpenAI — used for functions such as ingredient detection, dish identification, recipe generation, conversational recipe assistance, recipe planning and processing, and AI-generated recipe imagery
• Anthropic — used as an additional ingredient-detection provider for fridge and pantry scanning

For example, a fridge scan may be processed by both OpenAI and Anthropic so that Cravin can improve ingredient-identification results.

We seek to configure our AI services so that Cravin API data is not voluntarily contributed for general model training or product-improvement programs where such choices are available. However, provider-side processing and retention may vary based on the service, account configuration, contractual terms, security requirements, abuse-prevention requirements, and other circumstances. We therefore do not promise that third-party AI providers retain information for zero time unless such a commitment actually applies to our account and the relevant service.

Cravin attempts to minimize the personal information transmitted to AI providers. For example, information such as your name or email address is not necessary for a fridge scan and is not intentionally included merely to perform ingredient recognition.

AI outputs may be inaccurate, incomplete, or inappropriate. You should independently evaluate AI-generated information before relying on it, particularly information involving allergies, food safety, nutrition, or health.

5. How We Disclose Information

We do not sell personal information for money. At the time this Privacy Policy became effective, Cravin does not share personal information for cross-context behavioral advertising and does not use third-party advertising SDKs.

We may disclose information in the following circumstances.

A. Service Providers and Processors

We use companies that help us operate Cravin. Depending on the functionality used, these may include:

• Supabase — authentication, databases, server-side functions, storage, and backend infrastructure
• OpenAI — AI-powered text, vision, recipe, and image-generation functionality
• Anthropic — AI-powered ingredient recognition
• Cloudflare — object storage for certain content, including avatar images and recipe imagery
• Apple — distribution, platform services, and App Store subscription/payment functionality for iOS users
• Google — Google Play distribution and subscription/payment functionality when Cravin is offered through Google Play. Cravin does not use Google Gemini to process user data under the current production architecture described by this Policy
• Subscription-management providers — such as RevenueCat, if and when integrated, to manage subscription entitlements, receipts, and related subscription functionality

These providers may process information only as necessary for the services they provide to us, subject to their applicable agreements and legal obligations.

B. Legal, Safety, and Security Disclosures

We may disclose information when we reasonably believe doing so is necessary to:

• Comply with law, regulation, legal process, or enforceable governmental request
• Protect the rights, property, or safety of Cravin, our users, or others
• Investigate fraud, abuse, security incidents, or violations of our Terms
• Establish, exercise, or defend legal claims
• Respond to an emergency involving risk of serious harm where permitted by law

C. Business Transactions

If Cravin is involved in a merger, acquisition, financing, restructuring, bankruptcy, sale of assets, or similar transaction, information may be disclosed or transferred as part of that transaction, subject to applicable law.

D. With Your Direction or Consent

We may disclose information when you direct us to do so or otherwise provide valid consent.

6. No Sale or Behavioral Advertising at Launch

Cravin does not currently:

• Sell personal information for monetary consideration
• Sell individual allergy or consumer health information
• Use advertising identifiers for targeted advertising
• Use third-party advertising SDKs
• Share personal information for cross-context behavioral advertising

If Cravin materially changes these practices in the future, we will update our disclosures and implement legally required consent or opt-out mechanisms before engaging in such practices.

We do not use individual allergy information to create advertising audiences based on a user's medical or allergy status.

7. Marketing Communications and Notifications

We may send administrative or transactional communications relating to your account, security, subscriptions, material policy changes, support requests, or operation of the Services. Where permitted, Cravin may also send promotional or marketing communications.

You may unsubscribe from marketing emails using the unsubscribe mechanism included in those messages. Push notifications are subject to your device and operating-system permissions. You can generally disable push notifications through your device settings and, where available, through Cravin's notification settings.

Opting out of marketing communications does not prevent us from sending necessary transactional, security, legal, or account-related communications.

8. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing the Services, maintaining security, complying with legal obligations, resolving disputes, and enforcing agreements. Retention varies by category.

Account, profile, preference, saved-recipe, shopping-list, and similar information may generally be retained while your account remains active. Avatar images may remain until replaced, removed, or your account is deleted.

Cravin does not persistently store fridge/pantry scan photographs or chat-attached food photographs on its own servers after processing, although AI and infrastructure providers may temporarily process or retain information according to their applicable practices and configurations.

Certain security, fraud-prevention, accounting, legal, or operational records may be retained where reasonably necessary or legally required. Where appropriate, Cravin may de-identify information rather than retain information that continues to identify you.

AI-generated recipes and recipe images incorporated into Cravin's shared catalog may remain after account deletion when they have been disconnected from the originating user and no longer identify that user.

9. Account and Data Deletion

You may initiate deletion of your Cravin account through the in-app account-deletion functionality. When account deletion is completed, Cravin's deletion process is designed to:

• Delete your account/profile
• Delete your stored preferences
• Delete saved and personal recipe records associated with you as applicable
• Delete your shopping-list information
• Delete personally linked reviews and interactions as applicable
• Delete your avatar
• Delete your authentication account
• Clear Cravin's applicable locally stored account information
• Remove your identity from certain records that Cravin legitimately retains in de-identified form

Certain information may be retained when required or permitted for legal, security, fraud-prevention, accounting, dispute-resolution, or similar purposes. Shared AI-generated recipes and recipe imagery may remain in Cravin's catalog after account deletion if they have been de-identified and are no longer linked to you.

For platforms requiring an external account-deletion mechanism, Cravin may also provide account-deletion information or a request mechanism through cravinai.com. You may contact support@cravinai.com regarding deletion or privacy requests.

10. Your Privacy Rights

Depending on where you live and applicable law, you may have rights concerning your personal information, including the right to:

• Request access to certain personal information
• Request correction of inaccurate information
• Request deletion
• Obtain certain information about our collection, use, or disclosure practices
• Withdraw consent where processing is based on consent
• Opt out of certain marketing communications
• Appeal certain decisions where applicable
• Exercise additional rights provided by applicable state, federal, or international privacy laws

Cravin will not unlawfully discriminate against you for exercising applicable privacy rights. We may need to verify your identity before completing certain requests. Authorized agents may submit requests where permitted by applicable law, subject to appropriate verification.

Requests may be submitted to: support@cravinai.com

Additional rights concerning consumer health data may be described in Cravin's Consumer Health Data Privacy Notice.

11. Sensitive and Consumer Health Information

Cravin recognizes that allergy information and certain dietary or health-related information can be sensitive. We use such information primarily to provide and personalize functionality you request.

Where legally required, we will request appropriate consent before collecting or processing consumer health data for purposes that require consent. We do not sell individual consumer health data. We restrict access to sensitive information to personnel and service providers with a legitimate need to process it for the applicable purpose, subject to appropriate safeguards and contractual or legal obligations.

For additional information, please review Cravin's Consumer Health Data Privacy Notice.

12. Users Ages 16 and 17

Cravin is not intended for children under 16. You must be at least 16 years old to use Cravin. Users who are 16 or 17 may use Cravin only with permission from a parent or legal guardian.

As part of Cravin's age and onboarding process, users who indicate that they are 16 or 17 may be required to confirm that they have obtained permission from their parent or legal guardian before accessing Cravin and its AI-powered features.

Cravin may maintain information necessary to administer and document this process, such as:

• The user's internal account identifier
• Confirmation that the required permission was represented as having been obtained
• The date and time of the confirmation
• The version of the notice or confirmation presented

Cravin may modify or strengthen its age-assurance or parental-permission procedures where required by applicable law, contractual requirements, platform requirements, or changes to the Services.

If you are a parent or legal guardian and believe a minor is using Cravin without your permission or contrary to these requirements, contact us at support@cravinai.com.

If we learn that we collected personal information from a person under 16 in circumstances where we should not have done so, we will take reasonable steps to delete the information and terminate or restrict the account as appropriate.

13. Security

Cravin uses reasonable administrative, technical, and organizational safeguards designed to protect personal information. These safeguards may include:

• Encryption of information in transit using HTTPS/TLS
• Authentication and access controls
• Hashed authentication credentials handled through our authentication provider
• Database row-level security
• Server-side storage of AI API credentials
• Restricted access to production systems
• Security monitoring and logging

However, no method of transmission, storage, or information security is completely secure. We therefore cannot guarantee absolute security. You are responsible for protecting access to your account and devices.

14. International Users and Future International Availability

Cravin is operated by Cravin LLC in the United States. Cravin's initial service availability may be limited to the United States. If Cravin expands availability to the European Economic Area, United Kingdom, or other jurisdictions, additional privacy rights, lawful-basis disclosures, international-transfer safeguards, representative information, and other jurisdiction-specific terms may apply.

Where applicable law requires additional notices or rights, Cravin will provide those disclosures and implement required mechanisms before or in connection with making the relevant Services available in those jurisdictions.

Personal information processed through Cravin may be processed in the United States and other countries where our service providers operate, subject to applicable legal requirements.

15. Third-Party Services and Links

Cravin may contain links to or integrations with third-party websites, platforms, applications, or services. Their privacy practices are governed by their own policies, not this Privacy Policy, except to the extent Cravin itself determines how information is processed.

We encourage you to review the privacy practices of third parties before providing information directly to them.

16. Public and Shared Content

Certain Cravin features may make content available to other users, including recipe ratings, reviews, and recipes incorporated into Cravin's shared catalog. Do not include information in public-facing content that you do not want others to see.

AI-generated recipes incorporated into the shared catalog may be displayed to other users, used to operate and improve Cravin's catalog, and used in Cravin's promotional or marketing materials without identifying the user whose interaction originally resulted in the recipe. Where a user's account is deleted, Cravin may retain such catalog content in de-identified form.

17. Changes to This Privacy Policy

We may update this Privacy Policy as Cravin evolves, our service providers change, or legal requirements change. When we make changes, we will update the "Last Updated" date above.

If changes are material, we will provide additional notice where required or appropriate, such as through the app, by email, or on our website. Where applicable law requires consent to a new processing activity, updating this Privacy Policy alone will not substitute for obtaining that consent.

18. Contact Us

If you have questions, concerns, complaints, or requests concerning this Privacy Policy or Cravin's privacy practices, contact:

• Cravin LLC
• 306 W Redwood St, STE #4586
• Baltimore, MD 21201
• United States
• Email: support@cravinai.com
• Website: cravinai.com