Privacy Policy and Statement – Recipeat

1. General

This statement sets out the privacy policy of Recipeat (רספיט) (hereinafter: "Recipeat" or the "Service"): the social recipe website recipeat.me and the Recipeat apps for Android and iOS. Recipeat is operated by Tomer Ofer (Netdesign), who is also the owner of the Service's database.

Recipeat may change or update the provisions of this statement from time to time, and the date of the last update appears at the top of the page. It is recommended to review it again from time to time. The Hebrew original of this statement is drafted in the masculine form for convenience only, and it applies to all genders. Terms not defined in this statement shall have the meaning given to them in the Terms of Use, as they may be from time to time, unless this contradicts this statement.

This statement applies to any use, viewing or purchase of Recipeat's services, on the website, in the apps or in any other manner. Browsing the website and the apps and any other use of them constitutes the consent of the user (hereinafter: the "User" or "you") to this statement, which is in addition to what is stated in the Terms of Use.

2. The Information We Collect

2.1 Account and Sign-In Details

• On registration: name, email address and password. The password is stored in encrypted form (hash) and not as readable text.
• Sign-in with Google: if you choose to sign in with a Google account, we will receive from Google your name, your email address and your Google account ID, for the purpose of identifying you only.
• Sign-in with Apple: if you choose to sign in with Apple, we receive from Apple an account identifier, an email address (which may be a private Apple relay address, if you chose to hide your address) and your name, if you chose to share it, solely to identify you. We also store, encrypted, an identifier from Apple used to revoke the connection when your account is deleted.
• Passkeys: we store only the public key of the passkey. Your fingerprint, face recognition or device lock code are checked by the device itself and are not transferred to us.
• Two-step verification (optional): if you enable two-step verification using an authenticator app (TOTP), we will store the setup data required to verify the codes and your recovery codes.
• Sign-in with Facebook is no longer offered in the Service, and Recipeat no longer receives information from Facebook for signing in.

2.2 Content You Publish and Community Activity

Recipes, images, comments, "Like" marks (a heart, which are saved in your favorites), your personal recipe book, following other users' recipe books, and reports about content. Content you publish, as well as your name as it is displayed next to the content, is visible to all users and visitors of the website.

2.3 Private Recipes You Saved from the Web

Links, text and images of recipes you chose to save in the "Saved from the web" list. This information is private, as detailed in section 4.

2.4 Technical Information and Usage Information

While using the Service, information about your use may be collected, such as: the pages, recipes and categories you viewed, searches, device type, operating system and browser, app version, IP address, the sources from which you reached the Service, and additional statistical information (hereinafter: "General Information" or "Non-Identifying Information"). For the purpose of sending notifications, your device's notification identifier (token) is stored.

2.5 Inquiries to Us

The content of the inquiries you send us and the contact details you provide in them.

Personal information you provided as part of registration, the profile or any information published or shared in the Service (hereinafter: "Personal Information") may be stored in Recipeat's database. There is no legal obligation to provide information, but without providing the required information you may not be able to use some of the services. As part of using the Service, no Personal Information is collected without your prior consent.

3. Purposes of Using the Information

The information is collected by Recipeat, by itself and through third-party tools, for the purpose of providing the Service to the user and to the user community, and for improving, operating and developing the Service, including analyzing viewing and usage habits, the scope of use, its frequency and the sources of access to it, and adapting content, information and services to the user's preferences or to interest groups. The information will be used only in accordance with this statement and any law. The uses of the information are as detailed below, but are not limited to them:

1. 3.1to enable the use of the Service, as detailed in the Terms of Use: managing the account, publishing recipes and comments, favorites, the recipe book and following other users;
2. 3.2to identify you when you sign in and to secure the account, including two-step verification, passkeys, password reset and preventing misuse and fraud;
3. 3.3to send you, by email and by (Push) notifications, messages relating to the account and the activity in it, such as comments and "Likes" on your recipes, as well as items of information you asked to receive;
4. 3.4to send you marketing and advertising information, subject to your consent as required by law. You may at any time ask to stop receiving such information;
5. 3.5to handle reports about content, enforce the Terms of Use and remove prohibited content;
6. 3.6for analyzing and collecting statistical information;
7. 3.7to contact you when necessary;
8. 3.8for any other purpose detailed in this statement or in the Terms of Use.

For collecting statistical information and monitoring the activity of the Service, Recipeat uses external providers (such as Google Analytics and Google Tag Manager). The information collected for this purpose is statistical in nature and is not intended to identify you personally, and the service provider may keep it in its databases. However, Recipeat does not guarantee that the information will never identify a user.

Additional information may be collected for the purpose of future contact through direct marketing, including providing direct marketing services to Recipeat's business partners, by any means of communication (email, messages, notifications, social networks and similar technologies, existing and future), and in any marketing activity carried out by Recipeat alone or in cooperation with others – all subject to your consent and the provisions of law.

4. Recipes You Saved from the Web and Their Processing

In the "Saved from the web" service you can save, in a private list in your account, recipes you found on Instagram, TikTok, Facebook, YouTube or any other website: by sharing a link to the app, pasting a link or text, or typing manually, with up to 10 images per recipe.

• Privacy: the recipes in this list are visible only to you. They are not published in the Service and are not shared with other users.
• Storage: the recipes and images are stored on Recipeat's servers, in private storage that is not accessible to the public, as well as on your device.
• Reading a recipe from a link: to turn a link you shared into an organized recipe, the link and the text of the post (without the video) are sent to an extraction service operated for us, which uses Google's Gemini artificial intelligence to turn the text into a structured recipe (name, ingredients, preparation). You are not required to use the automatic extraction, and you can type the recipe yourself.
• Saving is intended for your personal use only. The responsibility for ensuring that you are permitted to save content from third-party platforms lies with you, as detailed in the Terms of Use.

5. Connecting AI Assistants to Your Account

You may choose to connect an external AI assistant to your account, such as Anthropic's Claude or OpenAI's ChatGPT. Connecting is optional, and a connection is created only after you sign in to your account on recipeat.me and explicitly approve the permissions shown to you.

• Permissions: according to what you approved, the assistant can search and read recipes on the site, read your recipes and favorites, add recipes to your book (they are published on the site like a recipe you added yourself), and read and add private recipes in your "Saved from the web" list (they stay private and are not published).
• What reaches the assistant: the information the assistant requests within the permissions you approved, including private recipes if you approved that, is transferred to the assistant's provider and processed by it under its own privacy policy and terms, for which Recipeat is not responsible. We recommend reading them before connecting. The assistant does not receive your account password.
• What we store: the name of the connected application, the permissions you approved, the dates of connection and last use, and time-limited access identifiers.
• Disconnecting: you can disconnect an assistant at any time in the app, under "My account" → "AI connections". Connections are also disconnected when your password is changed or reset, and when your account is deleted.
• Content that an assistant adds on your behalf, within the permissions you approved, is considered content you published, and you are responsible for checking it.

6. Service Language and Automatic Translation

The Service is available in Hebrew and English. The interface language you choose is saved in your account, so that emails and notifications are sent to you in that language.

Recipes published in the Service, articles and booklets are translated automatically between Hebrew and English when someone asks to read them in the other language. For this purpose, the text of the content (such as the name, description, ingredients and preparation) is sent to Claude, the artificial intelligence service of Anthropic. The translation is saved by us and shown to everyone reading in that language, and it is marked as an automatic translation with an option to show the original. Your account details are not sent for translation. Private recipes in the "Saved from the web" list and comments are not translated this way. Automatic translation may contain errors, and in any case of doubt the original should be relied on.

7. Service Providers and Transfer of Information Outside Israel

Recipeat uses external service providers to operate the Service, and they receive information to the extent required to provide the service for us:

• cloud servers for hosting the Service, the information and the images;
• Apple: sign-in with Apple;
• Google: sign-in with Google, notifications through Firebase Cloud Messaging, measurement and analytics (Google Analytics and Google Tag Manager), ads on the website (Google AdSense), and text processing with Gemini as detailed in section 4;
• Mailjet: sending operational emails, such as verification and password reset;
• Anthropic: automatic translation with Claude as detailed in section 6.

Some of these providers operate outside Israel, and therefore the information may be stored or processed outside Israel. We transfer to the providers only the information required for the purpose for which they are used, and we do so in accordance with applicable law. The providers are also subject to their own privacy policies and terms.

8. Transfer of General and Statistical Information

Recipeat may from time to time transfer the general and statistical information of all users to third parties, for its business, operational, marketing and technical needs, including:

1. 8.1creating lists for the purpose of building a database;
2. 8.2approaching users with offers to purchase products or services, or to participate in services, promotions or initiatives of Recipeat;
3. 8.3any other marketing and business activity of Recipeat.

Recipeat shall not be restricted in any way in transferring general, statistical and non-identifying information, all at its sole discretion.

9. Transfer of Personal Information

Beyond the service providers listed in section 7, Recipeat may from time to time transfer a user's Personal Information to third parties, in the cases detailed below, but not only in them:

1. 9.1at the user's request;
2. 9.2to comply with an instruction of a competent authority under law or a court order;
3. 9.3in any case of a dispute, claim, demand, suit or any legal proceedings between Recipeat and the user;
4. 9.4to any entity related to Recipeat, or in the event that responsibility for operating Recipeat is transferred or assigned to another entity;
5. 9.5upon receipt of a court order instructing Recipeat to provide information about you to a third party;
6. 9.6in any case where Recipeat believes that providing the information is necessary to prevent serious harm to your body or property, or to the body or property of a third party;
7. 9.7if the user uses the Service to commit an unlawful act or omission, or contrary to the Terms of Use, or to commit an act or omission that may harm the Service, its operators, its property or its interests, as well as in any attempt to do any of the above.

10. Cookies, Local Storage and Advertisements

For its operation, including collecting information about the use of the Service, verifying the user's identity, keeping the user signed in to the account, adapting the Service to the user's preferences and information security, the website uses cookies and the apps store information in local storage on the device. Cookies are small text files stored in the browser. You can block or delete cookies in the browser settings, but some of the services, such as staying signed in, may not work properly.

Recipeat operates or may operate an independent advertising and content system, and also allows third parties to manage the advertising system on the website. Google AdSense ads are currently displayed on the website. Within this framework, you may be shown ads of third parties, which, by themselves or through anyone acting on their behalf, collect information about you, including by means of cookies, for the purpose of information analysis, ad personalization and analysis of the user's needs. This use is made in accordance with the privacy policy and terms of use of those parties. If you wish to prevent this activity, you must act in accordance with the privacy policy of those parties (for example, in the ad settings of your Google account). Recipeat is not responsible for the content of the ads.

11. User Consents and the Right to Access, Correct and Delete

Under the Protection of Privacy Law, 5741-1981, every person is entitled to inspect, by themselves, or through their representative authorized in writing or their guardian, information about them held in a database. A person who has inspected information about them and found that it is not correct, complete, clear or up to date may apply to the database owner with a request to correct or delete the information. A refusal to allow inspection, or to correct or delete information, will be notified to the applicant in the manner and form prescribed in the regulations, and the applicant may appeal against it before the Magistrates' Court as prescribed in the regulations.

Most of your details are available for viewing and updating on the profile page on the website and in the app, and we invite you to correct yourself any detail that requires correction. In addition, you can exercise your right to access, correct or delete Personal Information about you by contacting us by email at [email protected]. We may ask to verify your identity before handling the request. Deletion of Personal Information will not prevent the use of information that is not personal, as defined above.

If the information in the database is used for contacting you personally through direct marketing, you may demand in writing, under the Protection of Privacy Law, that the information relating to you be deleted from the database. If within 30 days you do not receive notice that the information has been deleted, you will be entitled to apply to the Magistrates' Court in the manner prescribed in the regulations under the law, so that it orders Recipeat to act accordingly. You can also at any time remove yourself from mailings through the unsubscribe link in the message or by contacting us.

Any information you provide in the Service, as part of registration or use, is provided of your own free will and with your consent to the terms of this statement and of the Terms of Use, and constitutes consent in accordance with the provisions of sections 11 and 17 of the Protection of Privacy Law, 5741-1981, and subject to the provisions of section 30A of the Communications (Telecommunications and Broadcasting) Law, 5742-1982.

12. Account Deletion

You can delete your account at any time from within the app, or by contacting us by email (more information on the Data Deletion page). The deletion is final and cannot be undone, and it includes the account and the sign-in details (including passkeys, two-step verification and recovery codes), the recipes you published and their images, the comments, the favorites and the notifications, the private recipes you saved from the web and their images, and the devices and notification identifiers registered to the account.

Deleting the account will not prevent the use of general, statistical and non-identifying information collected beforehand.

13. Information Security

Recipeat takes reasonable measures to secure the information and to reduce the risk of unauthorized access to it, including: encrypted communication (HTTPS), storing passwords in encrypted form, the option of two-step verification and passkeys, restricting access to the information to authorized persons only, and private storage of the images of private recipes.

However, these measures do not provide absolute security, and Recipeat is unable to ensure that information or messages will not be intercepted by third parties operating on the internet without authorization. Therefore, Recipeat does not guarantee that the Service will be absolutely immune to unauthorized access to the information stored in it.

14. Age of Users

As detailed in the Terms of Use, use of the Service is permitted to legally competent users over the age of 18 or to corporations.

15. Changes to the Privacy Policy

Recipeat may change or update the Privacy Policy from time to time, without the need for prior notice. The changes will take effect upon their publication on this page. We will give notice of material changes, to the extent required, in the manner we determine (for example, a notice on the website or in the app). Continued use of the Service after the change constitutes consent to the Privacy Policy as changed.

16. Contact Us

For any question or request regarding privacy, including requests to access, correct and delete information, you can contact us by email at [email protected].