Privacy Policy

1. Who operates AtoCook, and how to reach us

AtoCook operates the AtoCook mobile application and the website at atocook.com. This Privacy Policy describes how information is collected and used in connection with those services.

For privacy questions, access or correction requests, consent choices, deletion or export requests, or privacy complaints, contact AtoCook at support.atocook@gmail.com. You can also visit our Support page.

2. Scope

This Privacy Policy applies to the AtoCook website and the AtoCook mobile app for iOS and Android, including related account, community, and support features connected to those services.

It explains practices associated with accounts, personal cooking records, published community content, recipe nutrition estimation tools where available, and technical operation of the website and app.

3. Information collected, and its purposes

Depending on how you use AtoCook, we may process the following categories of information.

Account and profile information

Email address, authentication identifiers, display name, username, profile photo, biography, profile preferences, and creator profile details. Sign-in may use email authentication, Sign in with Apple, or Google sign-in.

Purpose: create and secure your account, show your profile, operate sign-in, and provide account settings.

User-created content

Recipes (including drafts and private recipes), blogs, videos, photos, comments, saves, likes, follows, reports, and other content you submit.

Purpose: store and display content you create, operate publishing and community features, and support moderation and safety review.

Personal cooking records

Meal plans and recurring weekday meal rules; What you ate (actual intake), including portions and recorded nutrient totals; personal nutrition targets and related target history where that feature is available; pantry items; and shopping lists.

Purpose: show and update your plans, intake history, targets, pantry, and shopping lists, and related nutrition summaries in the app.

Guest (signed-out) pantry and shopping lists are stored in on-device app storage. When you are signed in, pantry and shopping lists are stored on AtoCook’s servers associated with your account.

Community interactions and notifications

Follows, likes, saves, comments, and similar interactions. AtoCook may show in-app notifications about activity such as comments, follows, moderation actions, and account notices. Notification preferences may be stored to respect your choices. AtoCook does not currently send push notifications.

Purpose: operate community features, show activity in the app, and help prevent abuse.

Creator Chat

Where Creator Chat is enabled for an eligible creator, AtoCook may process private communications between that creator and AtoCook staff. This can include messages, image or video attachments, staff announcements, and users’ like or dislike reactions to announcements.

Purpose: creator support, staff–creator communication, and announcement interactions.

These communications are visible to the participating creator and to AtoCook staff as needed to provide the service. They are not shown to the public or to followers. Service providers that host or store data for AtoCook (see section 6) may process them as needed to run the service. Creator Chat is not public community content. AtoCook does not offer creator-to-follower messaging. Creator Chat is also separate from ATO AI Chat, which is currently disabled. Creator Chat may not be available in every version of the app or to every creator.

Image selection and permissions

When you choose a profile photo (avatar), recipe images, or a Creator Chat image or video attachment, the app may ask for photo library access on your device and open the system photo library picker so you can select what to upload. These uploads use photo library selection, not in-app camera capture. If access is not granted when asked, that library upload cannot proceed.

Device permission, upload, and later visibility are separate steps. Granting photo library access does not mean AtoCook uploads or inspects your entire photo library. Only the media you select is uploaded for that purpose. Some flows allow selecting more than one image, and some may include an optional crop step. After upload, visibility depends on the feature: profile photos and published recipe images may be public; Creator Chat attachments remain part of private creator–staff communications and are not public community posts.

Support and safety information

Messages you send to support, content reports, and moderation and enforcement records.

Purpose: respond to support requests, investigate abuse or policy issues, and maintain safety and security.

Automatic diagnostics

The mobile app may automatically send first-party error reports to AtoCook’s servers when something fails. This reporting does not depend on you contacting support. This information can include platform, app version and build, screen or route, relevant content identifiers, the operation or backend request that failed, and error details.

Purpose: reliability, troubleshooting, and security.

This is first-party diagnostic reporting operated by AtoCook. It is not a third-party analytics SDK; AtoCook does not currently use third-party analytics SDKs. Diagnostic logs are intended for technical troubleshooting and may still contain personal information in some cases.

Website technical information

When you visit the website, hosting and network infrastructure may process standard technical information such as IP addresses and request logs as part of delivering pages securely. See section 11.

4. Private records vs. public and community information

Personal records and private recipes. Meal plans, recurring weekday rules, What you ate, nutrition targets, pantry items, shopping lists, and private or draft recipes are personal records. These records are not published as community content.

AtoCook may access these personal records only where necessary for a specific purpose: responding to your own support or privacy request, investigating a security incident, or meeting a legal obligation.

Public and community information. Public creator profiles, published recipes, blogs, and videos, public engagement counts, and comments shown with the commenter’s identity may be visible to other users. Follower and following lists can show identifiable users (such as username, display name, and avatar). Users are responsible for information they choose to publish.

Published content may be moderated, restricted, or removed if it is reported or found to violate AtoCook policies. See our Community Guidelines, Creator Guidelines, and Content Reporting pages.

5. Recipe nutrition estimation and AI processing

Where available, a creator may request a nutrition estimate for a recipe. Recipe nutrition estimation is a recipe tool and is separate from What you ate.

Estimation is processed through AtoCook’s servers. An external estimation provider may be used, and recipe information may be sent to that provider to produce the estimate.

After an estimate is returned, creators may review results and save nutrition information associated with a recipe. Stored estimate review state may include nutrient values and related review metadata. Estimates may be incomplete, unavailable, or approximate. AtoCook also provides non-AI nutrition reference tools in some flows (for example, ingredient lookups that use USDA FoodData Central as nutrition reference data). Using USDA reference data does not mean user personal information is sent to USDA.

Estimates can be wrong. Review them before relying on them or publishing them. See our AI Disclosure and Health & Nutrition Disclaimer.

6. Providers and permitted disclosures

AtoCook does not sell personal information.

Information may be processed by service providers that help operate AtoCook, including:

• Supabase — authentication, database, and file storage for the app and related backend services
• Sign in with Apple — optional account authentication
• Google sign-in — optional account authentication
• Vercel — hosting for the AtoCook website
• Gmail — support email delivery for communications with support.atocook@gmail.com

These providers process information as needed to provide their services to AtoCook. AtoCook does not currently use third-party advertising or analytics SDKs, and the app does not currently process payments.

Information may also be disclosed when reasonably necessary to comply with law, respond to lawful requests, investigate abuse or security issues, enforce policies, protect users, or defend legal rights.

7. Storage, international processing, and retention

Account and server-stored app information is hosted with AtoCook’s backend providers. Website pages are hosted with Vercel. Guest pantry and shopping lists are stored in on-device app storage. The app includes a Clear app cache control that removes certain temporary local data and image caches. It does not delete your account, and it does not remove saved guest pantry or shopping lists or notification preferences. You can remove items from a guest shopping list in the app.

Providers may process information in countries other than where you live.

AtoCook keeps information as long as needed for the purpose it was collected for. You can remove personal cooking records from the active views where the app provides removal controls. Removing an item from view does not necessarily erase the underlying stored record. Item removal and account deletion are separate processes. Some support, security, and moderation records may be kept longer where needed for those purposes.

8. Access, correction, consent choices, and deletion or export requests

You can review and update certain profile information in the app. Some account details, such as email managed by your sign-in provider, may need to be changed through that provider. You can also remove personal cooking records in the app where controls are available, including meal plan items, What you ate entries, items from your pantry, and shopping list items.

You may request access to personal information associated with your account, ask us to correct inaccurate information, withdraw consent where processing is based on consent, or raise a privacy complaint by emailing support.atocook@gmail.com.

You may request account deletion or a copy of your data in these ways:

• In the app, through Data & account settings (in-app deletion and export request flows).
• By following the website instructions on Delete Account and Data Export.
• By emailing support.atocook@gmail.com.

AtoCook will explain the outcome of a request, including any information that must be retained, when it responds.

Some support, security, and moderation records may still be retained where needed for those purposes, legal compliance, fraud prevention, or dispute resolution.

9. Security

AtoCook uses reasonable technical and organizational measures intended to help protect information, including authenticated access controls for personal records and careful handling of support and moderation tools.

No online service can guarantee complete security. Protect your devices, passwords, and authentication credentials, and contact support if you suspect unauthorized access.

10. Age eligibility

AtoCook is not intended for young children. Users must be at least 13 years old, or the minimum age required by applicable local law.

If AtoCook becomes aware that information was collected in violation of applicable child privacy laws or age requirements, related accounts and information may be restricted or removed where appropriate.

11. Website cookies and technical information

The AtoCook marketing website does not currently set first-party analytics cookies and does not currently load third-party analytics or advertising scripts. Store badges on the site are local images that link to the official app stores.

Website hosting and related network infrastructure may still process IP addresses, security logs, and other technical request data needed to deliver pages, protect the service, and operate hosting.

When a creator profile page shows an avatar, the browser requests the image from the URL returned by the backend. The host serving that image can receive standard request information such as the IP address, browser user agent, and requested URL.

12. Policy changes and contact details

AtoCook may update this Privacy Policy when practices change. When changes are significant, AtoCook will provide appropriate notice and, where required, obtain consent before relying on new processing that needs consent. Posting a revised “Last updated” date alone is not used as authorization for new processing that requires consent.

Privacy contact: support.atocook@gmail.com

Nothing in this Privacy Policy limits your rights under applicable privacy laws.