2. Information we collect
We collect information in three ways: information you provide to us, information collected automatically, and information from third parties.
Information you provide
Account information. When you create a Tradish account, we collect your email address. Authentication is handled by our identity provider, Amazon Cognito; we never see or store your password. We assign your account a unique identifier that we generate ourselves; we do not collect an identifier from you. If you sign in through Apple, Google, or another third-party authentication provider, we receive the basic profile information that provider shares with us, which may include your name and email address. You can manage what each provider shares through your privacy settings on that platform.
Anonymous accounts. You can use Tradish before signing in. When you first launch the App, we create an anonymous account for you, identified only by a random identifier we generate; no name or email is required. We use standard device integrity checks to protect the Services from abuse. While your account is anonymous, your recipes and other content stay on your device and are not stored on our servers. Signing in with Apple, Google, or email upgrades your anonymous account, and enables cloud backup and cross-device sync.
Profile and content. Providing your name is optional; we store it only if you add it to your profile, along with preferences such as dietary restrictions or measurement units. Your recipes, collections, notes, ratings, and tags are always stored on your device. When you sign in, we also store this content on our servers, associated with your account, so it syncs across your devices and can be restored if you lose your device.
Photos and voice recordings. If you photograph a recipe card, add photos to a recipe or cook log, or use voice input to dictate a recipe, the App requests camera, photo-library, microphone, or speech-recognition access at the moment you use that feature. Recipe-card photos and voice input may be transcribed on your device or processed on our servers by automated systems to extract the recipe, and the resulting recipe and images are stored with your account.
Purchase information. When you subscribe or make an in-app purchase, the transaction is processed by Apple (App Store), Google (Google Play), or Stripe (on the Site). We use Adapty, a subscription-management service, to manage subscriptions and purchases; Adapty receives your account identifier and purchase history, but never your name, email, or payment details. We receive confirmation of the purchase and a transaction ID, but we do not store full credit card numbers.
Communications. When you email us, sign up for the newsletter, fill out a contact form, or respond to a survey, we collect the information you send (name, email, message contents, and any attachments).
Information collected automatically
Usage data (Site). On the Site: pages visited, time spent, taps and clicks, and referring URLs, measured with analytics cookies as described in Section 6.
Diagnostics data (App). The App does not use a general-purpose analytics SDK. Our diagnostics service, Sentry, collects error logs, crash reports, performance timings, and the sequence of screens and taps leading up to a problem, tied to your random account identifier, never your email. On a small sample of sessions it also records a replay of the screen with text and images masked. You can turn diagnostics off at any time in Privacy & Security in the App.
Device data. Device type and model, operating system and version, unique device identifiers, language settings, time zone, and crash reports.
Location data. Approximate location inferred from your IP address. We do not collect precise GPS location unless you explicitly grant permission for a feature that requires it.
Cookies, log files, and similar technologies. The Site uses cookies, pixels, web beacons, and local storage to remember preferences, measure traffic, and improve performance. Our servers also generate standard log files (IP address, browser type, internet service provider, date and time stamp, referring and exit pages). The App uses similar mobile identifiers. See Section 6 for details.
Information from third parties
•
Analytics providers such as Google Analytics, which tell us how visitors find and use the Site.
•
Payment processors including Apple, Google, and Stripe, which confirm completed transactions.
•
Authentication providers such as Apple and Google, if you sign in using one of those accounts.
•
Service providers that help us send email, host the Services, monitor performance, and handle customer support.
•
Affiliate partners. If you click an affiliate link or use a referral code in the App or on the Site, the affiliate platform may share information about the click or purchase with us so we can credit the referral.