Back home

Trust & Privacy

How we handle your account, recipes, and payments.

This page is maintained by the Social Media Foodie team to answer common security and privacy questions about the app. It describes our current practices and the platform capabilities we rely on — it is not a certification or an independent audit.

Account & sign-in

You sign in with email and password or with your Google account. Sessions are managed by our authentication provider (Supabase Auth) using short-lived tokens that refresh automatically.

You can sign out at any time from the dashboard. You can also reset your password from the sign-in screen.

Your recipes and collections

Saved recipes, collections, notes, favorites, and tags belong to your account. They are stored in our managed Postgres database with row-level security policies that restrict every row to its owner — other signed-in users cannot read or modify your recipes.

We do not sell your saved recipes or share them with third parties for advertising.

How data is protected

Traffic to and from the app is served over HTTPS. Data at rest is stored in our managed database and authentication provider (Supabase). Administrative access to that infrastructure is restricted to our team.

Sensitive credentials (API keys, webhook secrets, AI provider tokens) are stored as server-side secrets and are never sent to your browser.

Payments

Pro subscriptions are processed by Paddle, which acts as the Merchant of Record. Card details are entered directly into Paddle's hosted checkout — we never see or store your full card number.

For each subscription we store only: your user ID, the Paddle subscription and customer IDs, the plan you bought, status, and the current billing period. Refunds and invoices are handled by Paddle at paddle.net.

Cookies, analytics & AI

We use cookies and local storage required to keep you signed in and remember small UI preferences (for example, which items on a grocery list you've checked off).

When you use the AI recipe extractor, the recipe URL you submit is sent to our AI provider so it can return a structured recipe. We do not send your account email or other profile data with that request.

Deleting your data

You can delete any saved recipe or collection from inside the app. To delete your account and all associated data, email us at the address below and we will remove your records.

If you cancel Pro, your saved recipes remain readable forever; only new saves past the free limit are blocked.

Security issues

If you believe you've found a security vulnerability, please email us before disclosing it publicly. We aim to acknowledge reports within 3 business days.

Contact

Questions about your data, privacy, or this page? Email hello@thesocialmediafoodie.com.

Operated by the Social Media Foodie team. This page is editable content maintained by the app owner and will be updated as our practices evolve.