Privacy Policy

Last updated: 15 August 2026

Taters is a recipe book and meal planning app. This policy explains what data the app collects, why, who it is shared with, and how to delete it.

The data controller is Beyond West Foundry, contactable at hello@mytaters.com.

What we collect

Data	Why
Email address, and a password if you sign up with one	To create and secure your account. Handled by Firebase Authentication; we never see your password. If you join a household, your email address is also shown to the other members of it.
Google or X (Twitter) account identifier, if you sign in that way	As an alternative to a password.
Display name	Shown to other members of a household you join.
Your recipes, collections, meal plans, and shopping lists	This is the content of the app. Stored so it syncs across your devices.
Recipe photos you add	Stored in Firebase Storage and shown in your recipes.
Household membership and invitations	To share recipes, meal plans, and shopping lists with people you invite.
Subscription status and monthly AI extraction count	To apply your plan's limits. Payment card details are handled by the app store and never reach us.
Crash diagnostics and error logs	To find and fix crashes. These reports include your account identifier so we can correlate a crash with an account.
App usage events (for example: a recipe was created, the paywall was shown)	To understand which features are used. These are not sold and are not used for advertising.
Your device's advertising identifier, along with device model, operating system, app version and approximate location derived from your IP address	Collected by Firebase Analytics as part of the usage events above, so we can tell how many people use a feature and on what devices. Taters contains no advertising. We do not use this identifier to target ads, to build a profile of you, or to track you across other apps, and we do not sell it. You can reset or delete it at any time in your device's Google settings.

Why we are allowed to process it

Under the GDPR we must have a legal basis for each purpose. Ours are:

Purpose	Legal basis
Creating and securing your account; storing and syncing your recipes, meal plans and shopping lists; household sharing; AI recipe extraction	Performance of a contract — these are the service you signed up for, and it cannot be provided without them.
Recording your subscription status and monthly extraction count	Performance of a contract, and legal obligation for records we are required to keep for tax and accounting purposes.
Crash diagnostics and app usage events	Legitimate interests — keeping the app working and understanding which features are used. We use the minimum needed for that, and never for advertising or profiling.
Abuse prevention (App Check / Play Integrity)	Legitimate interests — protecting the service from fraudulent or automated use.

Where we rely on legitimate interests you have the right to object; see Your rights below.

AI recipe extraction

When you import a recipe from a web address or a photo, that content is sent from our servers to an AI provider — Anthropic (Claude) or OpenAI — which reads it and returns structured recipe data. Specifically:

For a web address: the address and the text of the page at it.
For a photo: the image you selected or captured.

The request is made by our backend, not by your device, and your email address and account identifier are not included in it. Your API usage is subject to the provider's own terms and retention practices.

Who your data is shared with

Google Firebase — authentication, database, file storage, backend functions, crash reporting, and abuse prevention (App Check / Play Integrity). Firebase acts as our processor and stores this data on our behalf.
RevenueCat — subscription management. Receives your account identifier so your purchase can be matched to your account.
Anthropic and OpenAI — receive only the recipe content described above, when you use AI extraction.
Google Play — processes payment for subscriptions. We do not receive or store your payment details.
Other members of a household you join — see below.

We do not sell your data and we do not use it for advertising.

Where your data is processed

Beyond West Foundry is established in Norway, but the services above are operated by companies headquartered in the United States. Your data is therefore transferred outside the European Economic Area and processed in the United States — including our database, file storage, and the backend functions that run AI extraction.

We rely on the following safeguards for those transfers, as required by Chapter V of the GDPR:

the EU–US Data Privacy Framework, where the recipient is certified under it; and
the European Commission's Standard Contractual Clauses, incorporated into our agreements with each provider, where it is not.

You can request a copy of the relevant safeguard by contacting us at hello@mytaters.com.

How long we keep it

Your account and its content — until you delete your account. We do not expire inactive accounts.
Crash diagnostics — retained by Firebase Crashlytics on its own schedule, which Google documents as up to 90 days.
Backups — a copy may persist for a short period after deletion before the backup expires.
Records we must keep by law — accounting and tax records relating to a purchase are kept for as long as Norwegian law requires, even after an account is deleted.

Households

If you create or join a household, recipes you explicitly share, along with the household's shared meal plans and shopping lists, become visible to every member of that household. Your display name and the email address you signed up with are visible to them, so that members can tell each other apart. Recipes you have not shared remain private to you.

If you leave, or the household is dissolved, recipes you shared are returned to you rather than deleted.

Deleting your account and data

You can delete your account from inside the app at Settings → Account → Delete Account. You can also request deletion from our account deletion page.

Deleting your account permanently removes:

your recipes, collections, meal plans, and shopping lists;
your recipe photos;
your household membership;
your subscription record held by us; and
your sign-in credentials.

Deleting your account does not cancel your subscription. Subscriptions are billed by Google Play, not by us, and must be cancelled separately in your Play Store account — otherwise billing continues.

A few things outlast the deletion — crash diagnostics, backups, and records we are legally required to keep. See How long we keep it above for what and for how long.

Your rights

Under the GDPR you have the right to:

ask what personal data we hold about you, and get a copy of it;
have inaccurate data corrected;
have your data deleted;
receive your data in a portable, machine-readable format;
restrict how we process your data; and
object to processing we base on legitimate interests — that is, crash diagnostics, usage events, and abuse prevention.

Deletion you can do yourself, in the app or via our account deletion page. For anything else, contact hello@mytaters.com and we will respond within one month.

If you are unhappy with how we have handled your data, you can complain to the Norwegian Data Protection Authority, Datatilsynet (datatilsynet.no), or to the supervisory authority where you live.

Children

Taters is not directed at children under 18 and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will remove it.

Changes

We will update this page when our practices change, and will revise the date at the top.