Saucebook Privacy Policy
Your recipes are never shared or sold.
This covers the Saucebook app, getsaucebook.com and the free calculator.
Who we are
Saucebook is made by Emberwing Labs.
Contact us at privacy@getsaucebook.com.
What we collect
Your account. Your email, the name you choose, and a hash of your password. If you sign in with Apple or Google, they give us your email and an account ID. We also keep your time zone, your referral code and a random ID for each device you sign in on.
Your kitchen. Recipes, prices, pantry, menu prices and change history. Backup is on by default, so a copy is kept on our servers for a new phone. The app also keeps a copy on your device.
Kitchens and roles. Which kitchens and businesses you belong to, your role, the emails of people you invite, and a log of changes like invites and role changes.
Saucy and AI import. Saucy chats aren't saved, on your device or on our servers. A chat lives only in the app's memory and clears when the app reloads. To answer, we send your message and the kitchen details Saucy needs to Anthropic, which writes the reply. Text you paste for AI import goes there too. Our servers log only the AI model, the amount of text and the cost, never your words. Under its commercial terms, Anthropic doesn't train its models on this data and deletes it within 30 days, unless its safety systems flag it for breaking its usage policy or the law requires keeping it.
Payments. Stripe, Apple and Google handle payments. We never see your full card number. We keep your plan, billing status, billing email and, for businesses, the legal name for invoices. For web purchases, Stripe Tax uses your billing address to work out sales tax. Stripe keeps that address.
Feedback. If you tell us why you're canceling or what's missing, we keep that note with your account so we can let you know if we build it.
App events. To improve our plans, we log: hitting a limit and what happened next, your first tap on a plan, trials, purchases (monthly, 6-month or yearly), recipe packs, referrals, free swap-chart answers, and the steps of canceling (with the reason you picked). Each event is linked to your account and carries the plan, home or business, the platform and your account's first campaign tag. Never recipe content, chat words, your name, email, IP address or device ID. Raw events are kept 13 months, then rolled into monthly totals.
Campaign tags. Our links can carry a tag like ?from=postcard-1. We count visits and signups per tag, per day, with no personal data. Your account remembers the first tag you arrived with.
Website visits. getsaucebook.com and the calculator use Cloudflare Web Analytics, which counts visits without cookies.
Email list. If you sign up we keep your email, the page you signed up on and the date, plus sign-up status. Nothing else. Unsubscribe anytime with one click.
Visit counts. We count anonymous page visits and button taps with no cookies or personal data.
Security. We use your IP address for a short time to limit requests and stop abuse. Those records expire within minutes.
What we don't do
- We don't sell your personal information or your recipes.
- We don't use your recipes for anything except running Saucebook for you.
- We don't track you across other apps or websites for ads.
- We don't use cookies for tracking.
- We don't use the Meta Pixel. If we ever add ad measurement to our marketing pages, we'll update this policy first.
Who can see your recipes
- You.
- People you share a kitchen with. Family members see your Home kitchen. Staff see recipes at the locations they work at, as their role allows. On Pro, business admins see what the owner's role settings allow, including whether costs show.
- Your first name shows next to edits you make in a shared kitchen, and stays in its history if you leave.
- Our service providers, only to run Saucebook.
- Us, only when you ask for help, to keep Saucebook secure, or when the law requires it.
Service providers
- Cloudflare: hosting, database, email routing, website analytics
- Anthropic: Saucy chat and AI recipe import
- Stripe: web payments and sales tax
- Apple and Google: app store payments and sign-in
- RevenueCat: checks your plan on every device. It gets your account ID, purchase records from Apple, Google or Stripe, and basic device details like device type, language and currency. Never your email or recipes. RevenueCat's privacy policy
Your choices
- Export. Email privacy@getsaucebook.com and we'll send your recipes to you as a file.
- Delete your account. You have 30 days to change your mind. Then we delete your sign-ins, devices, memberships, Home kitchen, any business you own alone, and your RevenueCat record. A plan bought on our website stops renewing: you won't be charged again, and it ends at the end of the period you've already paid for. Your account record is anonymized, your email is freed, and your app events are unlinked. Billing records stay for tax, without your email or a link to you (a business keeps its legal name on invoices), and are deleted after 7 years. If you pay through the App Store or Google Play, cancel there first. We can't do it for you. If you own a business with other people in it, transfer it first. Recipes you added to someone else's kitchen stay with that kitchen.
- Turn off backup (Home kitchens). We delete the server copy. Your recipes are then only on your device. If it's lost or reset, they're gone, so export first.
- Email. Every marketing email has an unsubscribe link. We still send account emails, like invites and password resets.
- Cancel anytime in the app, or in your App Store or Google Play settings for store plans.
- Ask us for a copy of your data, a fix or deletion at privacy@getsaucebook.com.
Ages
Account owners must be 18 or older. People 13 and older can join a household or kitchen when the owner invites them. We don't knowingly collect data from children. If you think a child gave us information, email us and we'll remove it.
Where your data lives and how we protect it
Your account and kitchen data is stored in the United States by Cloudflare, which processes it for us. It's encrypted in transit and at rest. Passwords and sign-in tokens are stored only as hashes.
How long we keep things
| Data | How long |
|---|---|
| Account and kitchen backups | Until you delete your account, plus the 30-day undo window |
| Backup after you turn it off | Deleted right away |
| Canceled business | 90 days read-only with export, then deleted |
| Saucy chats and AI import text | Not saved by us or on your device. Anthropic deletes them within 30 days |
| Our billing records | 7 years, the usual period for tax records. Stripe, Apple and Google keep their own copies |
| Feedback notes | Until you delete your account |
| App events | 13 months, then monthly totals only |
| Campaign tag counts | 400 days |
| Email list sign-ups | Until you unsubscribe, ask us, or delete your account. Unconfirmed sign-ups: 30 days. After you unsubscribe we keep only a scrambled marker (a hash, not your address) so we never email you again. |
| IP addresses for rate limits | About an hour, scrambled with a secret key that changes daily |
The calculator
Your recipe and prices never leave your browser. It saves only three values for that browser tab: the first campaign tag, whether that visit was counted, and whether a result was counted. No cookies, no local storage. If you tap "Send me my Saucebook link", we get your email, whether you're a home cook or a restaurant, and the campaign tag.
Your state privacy rights
Some states, like California, give you rights over your personal information. We don't sell or share personal information, and we don't use it for targeted ads. You can ask to know what we have, get a copy, correct it or delete it. We'll never treat you differently for asking. Email privacy@getsaucebook.com.
Changes to this policy
When this policy changes, we update this page. For big changes, we'll tell you in the app or by email first.