Privacy Policy

#01

Who this policy covers

CraveTwist is operated by Keith Parker, 2916 Grand Mission Way, Pflugerville, TX 78660, United States. This policy covers the CraveTwist iOS app, TestFlight builds, cravetwist.com, recipe-share pages, support, and related services. Privacy questions and rights requests can be sent to keith@cravetwist.com or made by phone at +1 512-367-2884.

#02

Data we handle

Depending on the features you choose, CraveTwist may process account identifiers and Sign in with Apple details; optional allergies, intolerances, health-related cooking targets, religious or ethical food rules, preferences and kitchen equipment; recipe text, links, files, photos, voice or typed requests; generated recipes, nutrition estimates, images, cooking progress, notes, feedback and memory; share settings and reports; purchase evidence; support messages; and limited device, security, crash and operational records.

• Account-linked constraints remain protected inside CraveTwist and are not sold or used for advertising.
• Private recipes and media remain private unless you deliberately publish a share.
• Apple handles payment-card details; CraveTwist does not receive or store them.

#03

Why we use data

We use data to provide and secure the service, create and refine recipes, apply confirmed constraints, estimate nutrition, support Cook Mode, save eligible preferences, publish or revoke chosen shares, reconcile Apple purchases, answer support requests, prevent abuse, and evaluate product quality.

• For European and UK users, contract or requested pre-contract steps support core app functions; legitimate interests support proportionate security and service operations; legal obligation supports required records; and consent supports optional sensitive preferences where required.
• You may withdraw an optional sensitive preference and its acknowledgement in the app.
• CraveTwist does not sell personal information, use it for cross-app tracking, or use private content for advertising.

#04

AI and service providers

CraveTwist uses disclosed providers for hosting, authentication, bounded privacy inspection, recipe reasoning, visual understanding, and illustrative image generation. These include Apple, Google Cloud and Firebase, Neon, Cloudflare, DeepSeek, and Xiaomi MiMo.

• DeepSeek receives anonymous cooking specifications rather than account or profile identity. Before a request leaves CraveTwist, persistent identifiers and provenance are removed, constraints are converted to purpose-limited cooking rules, and a one-use nonce replaces workflow identity.
• Google Cloud Sensitive Data Protection may transiently inspect and deidentify a bounded recipe description or post-Cook feedback field before it is sent to DeepSeek. CraveTwist does not persist the DLP request content or findings.
• MiMo receives authorized food imagery through a separately governed visual-understanding route. Cloudflare FLUX receives the bounded recipe and visual context needed to generate requested recipe imagery.
• A model result cannot override deterministic allergen, food-safety, permissions, publication, or deletion controls.

#05

Allergies and sensitive preferences

CraveTwist stores optional account-linked selections so it can apply them to recipes. A versioned acknowledgement is required when the first allergy, health-related target, or religious food rule is saved and again only if the notice materially changes.

• DeepSeek is not told a diagnosis, religious identity, name, relationship, address, contact detail, profile wording, or persistent profile identifier. It receives only the operative cooking rule, such as excluding a canonical allergen.
• CraveTwist blocks cooking and publication when a confirmed excluded allergen matches an ingredient or derivative, or when ingredient or product-label evidence remains unresolved.
• Cross-contact remains a user-verifiable risk. CraveTwist cannot inspect or clear a kitchen, preparation surface, packaged-product facility, or substitution.

#06

Preferences and memory

Confirmed allergies and other hard constraints are profile data, not inferred memory. Eligible cooking preferences may activate automatically at the narrowest useful scope. You can inspect them, remove them, view removed items, restore eligible items, or erase them through account deletion.

• Removed memory is excluded from retrieval immediately and protected against silent recreation.
• CraveTwist does not infer a diagnosis, health condition, or religious belief from recipe behavior.

#07

Public and unlisted sharing

Recipes are private by default. Publishing creates a version-pinned snapshot behind an opaque link. An unlisted link can be opened by anyone who receives it; a public link may be discoverable. Revoking a link stops access and triggers cache and object cleanup.

• Public and unlisted pages include the same governed allergen, AI, and nutrition notices as the app.
• Your original cook photo and creator name are included only when the share controls explicitly say so.

#08

Retention, export, and deletion

Core account content is kept while your account is active unless you delete it earlier. Export files expire after seven days. Operational records are retained only for documented security, legal, transaction, deletion, and recovery purposes, with content-free provider telemetry.

• Account deletion can be started inside the app and removes the account and associated recipes, notes, memory, shares, photos, generated media, vectors, and provider artifacts unless a narrow record must be retained by law.
• Deletion reconciliation includes Sign in with Apple revocation where linked, share-cache purge, exact storage deletion, and protection against restoration of erased data.
• Email is an assistance channel, not a substitute for the in-app deletion control.

#09

Your choices and rights

The app provides controls to view or change profile data, remove or restore memory, keep or revoke shares, export account data, withdraw optional consent, and delete the account. Depending on where you live, you may also have rights to access, correct, erase, restrict, object, receive a portable copy, withdraw consent, and complain to a regulator.

• Send a request to keith@cravetwist.com. Identity verification is limited to what is necessary to protect the account.
• Withdrawing consent does not make earlier lawful processing unlawful; it stops future processing based on that consent.

#10

Security and incidents

CraveTwist uses owner-scoped authorization, private object storage, short-lived access, least-privilege identities, secret management, rate limits, redacted logs, audit records, and deletion workflows. No service can promise absolute security.

• CraveTwist assesses notification duties under applicable privacy and data-breach laws, including consumer-health privacy laws where they apply.
• Do not send passwords, authentication tokens, or unnecessary medical details by email.

#11

Age and international use

CraveTwist is intended for people age 13 and older. Where local law requires it, a parent or guardian must authorize use by a person who has not reached the applicable age of digital consent. CraveTwist is not directed to children under 13. Country availability may be limited where required legal, language, provider, safety, or consumer-protection support is not yet available. Apple’s questionnaire determines the App Store age rating.

#12

Generated guidance and health claims

This recipe was developed with AI and reviewed by CraveTwist’s automated checks. It may contain errors. Use your judgment and follow appropriate food-safety guidance. Nutrition values are estimates and are provided for general informational purposes, not medical advice.

• Check every current product label, substitution, ingredient identity, preparation surface, cross-contact risk, safe temperature, storage method, equipment instruction, and personal suitability before cooking or eating.
• CraveTwist is not your only allergy safeguard and does not guarantee that a recipe or product is free from an allergen or cross-contact.
• Follow your established care plan and consult a qualified healthcare professional when you need medical or dietary guidance.

#13

Changes and contact

Material changes receive a new version and effective date and, where required, notice and renewed acknowledgement before a new use begins. Contact Keith Parker at keith@cravetwist.com, +1 512-367-2884, or 2916 Grand Mission Way, Pflugerville, TX 78660, United States.