Privacy Policy — Cookiva

1. Who we are

Cookiva ("Cookiva", "we", "us", or "our") is a mobile app for pantry inventory tracking, recipe discovery, and meal planning, operated by Abbas Ashraf Mughal, registered at B2 12 05, Razak City Residences, No. 1, Jalan Razak Mansion, Sungai Besi, 57100 Kuala Lumpur, Malaysia. This policy explains what data we collect through the Cookiva app and website, why we collect it, and the choices you have.

2. Information we collect

We collect the following categories of information when you create an account and use Cookiva:

Account information — name, email address, or phone number when you sign up or sign in, including via Google or Apple sign-in.
Pantry & recipe data — the food items you add, expiry dates, dietary preferences, allergens, dislikes, favourite recipes, meal plans, and shopping lists.
Receipt & barcode images — photos you take to scan receipts or barcodes, processed to extract item and price information.
Voice input — when you use voice input to add items, your phone's speech recognition turns what you say into text (on Android this is done by Google's speech service under its own terms). Cookiva never receives or stores the audio. Only the text is sent to our servers to be turned into a list of items, and we do not keep it once the list is returned.
Family plan data — profile information for additional household members you add to a Family plan (up to 5 besides you), including their individual dietary preferences.
Social content — posts, photos, and comments you choose to share via Cook With Me, and the accounts you follow.
Purchase information — subscription tier and purchase status. Payment card details are handled directly by the Apple App Store, Google Play, and our subscription platform (RevenueCat) — Cookiva does not store your card details.
Diagnostics & usage data — crash reports and performance data (via Firebase Crashlytics).
Advertising identifier — on the free tier, an advertising identifier is used to serve ads (via Google AdMob).
Referral information — if you install Cookiva on Android from someone's invite link, Google Play tells the app which referral code the link carried, so the person who invited you can be credited. On iPhone, a referral is only recorded if you enter a code yourself.

3. How we use your information

To operate core features: inventory tracking, expiry reminders, recipe suggestions, and meal planning.
To personalize recipe results based on your dietary preferences, allergens, and dislikes.
To process and manage your subscription, including free trials and renewals.
To detect, diagnose, and fix crashes and performance issues.
To serve relevant ads to free-tier users.
To credit the person who referred you, if you joined with their invite link or code.
To communicate with you about your account, service updates, and support requests.
To keep Cookiva secure and prevent fraud or abuse.

4. Who we share information with

We share information with service providers ("subprocessors") who help us run Cookiva. We do not sell your personal information.

Provider	Purpose
Firebase (Google)	Authentication, database (Firestore), storage, and crash reporting (Crashlytics)
RevenueCat	Subscription and purchase management
Google AdMob	Advertising on the free tier
Anthropic	Reads the text of your receipts and voice input to turn it into a list of items, and writes recipe suggestions, substitutions and search results from your pantry and preferences
Google Cloud Vision	Reads the text on receipt photos you scan

We may also disclose information if required by law, or to protect the rights, property, or safety of Cookiva, our users, or others.

5. Data retention

We keep your account data for as long as your account exists, so that your pantry, plans and favourites are there when you come back. We do not delete accounts for inactivity.

Receipt photos and the text read from them are kept on your account until you delete your account. They are not deleted automatically after a scan.
Cook With Me photos and your profile photo are kept until you delete them or delete your account.
Voice input is not stored (see above).
Crash reports are kept by Firebase Crashlytics for a limited period set by Google.
Invite link visits (when someone opens an affiliate's invite link) are recorded with the visitor's IP address and browser details to count referrals and prevent fraud, and are not tied to a Cookiva account.
Affiliate earnings records are kept after account deletion so unpaid balances can be settled. Your name and email are removed from them.
Purchase records are held by Google Play or the App Store and RevenueCat under their own policies.

When you delete your account, everything else listed above is permanently deleted.

6. Your rights & account deletion

Depending on where you live, you may have the right to access, correct, export, or delete your personal information.

To delete your account and associated data: in the app, go to Profile > Delete Account and confirm. If you can no longer open the app, email cookiva.support@gmail.com with your request. More detail is at /delete-account.

7. Children's privacy

Cookiva is not directed to children under 13, and we do not knowingly collect personal information from children under that age.

8. International data transfers

Cookiva is operated from Malaysia, and your data is processed on the servers of our service providers (listed above), mainly in the United States. By using Cookiva you understand that your information is transferred to and processed in countries other than your own, which may have different data-protection laws. We only use providers that commit to protecting your data under their own data-protection terms.

9. Changes to this policy

We may update this policy from time to time. We'll update the effective date above and, for material changes, notify you in the app or by email.

10. Contact us

Questions about this policy or your data? Contact us at cookiva.support@gmail.com or B2 12 05, Razak City Residences, No. 1, Jalan Razak Mansion, Sungai Besi, 57100 Kuala Lumpur, Malaysia.