Privacy Policy

Account information. Your email address and password when you sign up. Passwords are stored by our sign-in provider in hashed form; we never see them.

What you create and tell us. Recipe ideas and requests, the recipes we develop for you and your edits to them, and anything you add to your account, such as “About your business” details, weekly specials preferences, your shop's location, ingredient prices, labor and overhead settings, and feedback on specials.

Goals & diet. If you choose to set them, your nutrition goals, dietary needs, allergies and health preferences (for example “heart-healthy” or “pregnancy-safe”). We use these only to tailor your recipes. They're optional, and you can change or delete them at any time.

Photos you upload. Menu photos, supplier invoices and recipe photos are read to extract the text and prices, then deleted. We keep what was read (for example menu items and prices), not the photos.

Payment information. Payments are handled by Stripe. We don't receive or store your card number; we keep your subscription status and a Stripe customer reference.

How you use recipes. When you're signed in, we record what you do with your recipes, such as saving, favoriting, refining, comparing versions, sharing, copying or printing, changing costs or supplier prices, and, if you tell us, that you made a recipe, how it turned out, what you changed and whether you'd make it again. This is stored with your account, and you can ask for a copy like any other information we hold about you.

Usage information. Pages you visit and actions you take in the Service (for example signing up, creating a recipe, sharing or starting checkout), and the website or campaign that referred you. We use two first-party cookies for this: snb_vid (a random visitor ID) and snb_attr (where you came from). For café ordering, two more that last 7 days: snb_cafe_ref (the café QR code or link you used) and snb_cafe_creator (the creator link you used), so an order is credited to the right café or creator. Our hosting provider also keeps standard server logs, such as IP address and browser type, for security and reliability.

Your browser. Some preferences and drafts (for example a recipe idea you started typing before signing up) are kept in your own browser's storage and stay on your device.

• To provide the Service: develop, cost and check recipes, make weekly specials, run menu audits and keep your account working.
• To process subscriptions and payments, and to enforce plan limits.
• To send emails you need or asked for, such as account confirmation, your weekly specials, and margin alerts.
• To understand how the Service is used and improve it, for example which pages lead people to sign up. The site owner also reviews recent requests and the recipes and drinks made from them, to check quality and fix problems.
• To improve recipes for everyone, unless you turn off "Use my anonymized activity to improve recipes" in Preferences (it's on unless you turn it off). Ratings, the reasons you give (such as "too salty"), "I made this" answers and how recipes are used are looked at in combined counts across people, and the owner may pick a recipe people loved as an example that guides new recipes. Only the recipe itself is used as an example, never your name, email, notes or what you typed. Turning it off stops this from then on, including for recipes of yours already picked as examples.
• To keep the Service secure, prevent abuse and comply with the law.

We don't use your information for third-party advertising, and we don't sell it or “share” it for cross-context behavioral advertising.

We share information only with the service providers that run the Service for us, and only what each one needs:

• Supabase: accounts, sign-in and our database.
• Anthropic: our AI provider. Your recipe requests, business details, goals & diet, and uploaded photos are sent to Anthropic's Claude models to produce your results. Under Anthropic's commercial terms, this data isn't used to train their models.
• Stripe: payments and subscriptions.
• Resend: sending email.
• Netlify: hosting the website.

When you share a recipe or a menu audit, anyone with the link can see the parts of it shown on the shared page; you can stop sharing at any time. We may also disclose information if required by law, to protect someone's safety, or as part of a sale or transfer of the business (in which case this policy would continue to apply).

We keep your account information and what you've created for as long as your account is open. When you delete your account in Preferences, your account and what you've created are deleted straight away; when you ask us by email, we do it within 30 days. We keep some records where we must or need to: payment records (for legal and tax reasons), finished café orders with your name removed (the café's sales records), and a note of how many free recipes your email address has used, so deleting and signing up again doesn't start them over. The record of how you use recipes and your “I made this” answers are kept while your account is open and deleted with it. Usage information is kept in a form that isn't used to identify you once it's no longer needed.

• See, correct or download the information we hold about you.
• Delete your account and personal information yourself in Preferences (Your account, then Delete my account), or by emailing us. Deleting ends any paid plan straight away. Café partners email us so we can close the café first.
• Change or remove your goals & diet and business details at any time in the app.
• Turn off "Use my anonymized activity to improve recipes" in Preferences at any time. Your recipes, ratings and tastes keep working for you; they just stop being used to improve recipes for other people.
• Turn off weekly specials emails in your specials settings, or cancel your subscription from Billing at any time.
• Block or clear cookies in your browser. The Service still works; we just won't know how you found us.

To make a request, email hello@saltnbean.com from the address on your account. We'll respond within 30 days (45 days where the law allows, with notice). We won't treat you differently for using these rights.

California residents. Under the California Consumer Privacy Act (CCPA), you have the right to know what personal information we collect, use and disclose; to delete it; to correct it; and to opt out of its sale or sharing. We don't sell or share personal information as those terms are defined in the CCPA. The categories we collect are listed above: identifiers (email), commercial information (subscriptions), internet activity (usage), sensitive information you choose to give (goals & diet), and the content you create. You may use an authorized agent to make a request; we may ask to verify it.

We use encrypted connections (HTTPS), hashed passwords, access controls in our database, and reputable providers. No system is perfectly secure, so please use a strong, unique password and tell us right away if you think your account has been accessed without permission.

The Service isn't directed to children under 13, and we don't knowingly collect personal information from them. If you believe a child has given us information, email us and we'll delete it.

The Service is run from the United States, and your information is stored and processed there. If you're in another country, you may have additional rights under local law; email us and we'll help.

If we change this policy, we'll update the date at the top and, for significant changes, let you know by email or in the Service before they take effect.

Questions or requests about your privacy: hello@saltnbean.com. See also our Terms of Service.