Skip to main content

Privacy Policy

Effective: 1 August 2026

Savora ("we," "us," or "our") operates the Savora mobile application and the website located at cooksavora.com (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully. By accessing or using the Service, you agree to the practices described in this Privacy Policy.

1. Information We Collect

1.1 Information You Provide

  • Account information: When you create an account, we collect your name, email address, and password. You may also sign in using a third-party provider (such as Google or Apple), in which case we receive your name and email address from that provider.
  • Profile data: Dietary preferences, allergies, cooking skill level, and household size that you choose to provide to personalise your experience.
  • Photos and camera data: When you use the ingredient scanning feature, we process images captured by your device camera to identify ingredients. These images are processed in real time and are not stored on our servers unless you explicitly choose to save a scan.
  • User content: Recipes you create, save, or share; shopping lists; meal plans; ratings; and reviews.
  • Communications: When you contact us via email at hello@cooksavora.com or through in-app support, we retain the content of those messages.

1.2 Information Collected Automatically

  • Usage data: Pages viewed, features used, search queries, recipes viewed, time spent in the app, and interaction patterns.
  • Device information: Device type, operating system, browser type, screen resolution, language preference, and unique device identifiers.
  • Log data: IP address, access times, referring URLs, and crash reports.
  • Location data: We may collect approximate location data (city or region level) based on your IP address to provide localised recipe suggestions. We do not collect precise GPS location unless you explicitly grant permission.

2. How We Use Your Information

We use the information we collect for the following purposes:

  • To provide, operate, and maintain the Service, including recipe recommendations, ingredient scanning, meal planning, and shopping lists.
  • To personalise your experience based on your dietary preferences, skill level, and usage patterns.
  • To authenticate your identity and manage your account via Firebase Authentication.
  • To process transactions and manage your subscription (Free or Premium).
  • To send transactional emails such as account verification, password resets, and subscription confirmations.
  • To send marketing communications, including our newsletter, with your consent. You may opt out at any time.
  • To analyse usage trends, monitor the effectiveness of our features, and improve the Service.
  • To detect, prevent, and address security issues, fraud, and technical problems.
  • To comply with legal obligations and enforce our Terms of Service.

3. Authentication and Third-Party Services

We use Firebase Authentication (provided by Google) to manage user accounts and sign-in. When you create an account or log in, Firebase processes your authentication credentials. Firebase's use of your data is governed by the Firebase Privacy Policy.

If you choose to sign in with Google or Apple, we receive only the information you authorise those providers to share (typically your name and email address). We do not receive or store your third-party account password.

4. Analytics

We use analytics tools to understand how users interact with the Service:

  • Google Analytics 4 (GA4): Collects anonymised usage data including page views, session duration, and user interactions. GA4 may use cookies to distinguish unique users. For more information, see Google's Privacy Policy.
  • Microsoft Clarity: Captures anonymised session replays and heatmaps to help us understand how users navigate the Service. Clarity does not collect personally identifiable information. For more information, see Microsoft's Privacy Statement.

You can opt out of analytics tracking by adjusting your cookie preferences. See our Cookie Policy for details.

5. How We Share Your Information

We do not sell your personal information. We may share your information in the following limited circumstances:

  • Service providers: We share data with trusted third-party vendors who assist us in operating the Service, such as cloud hosting (Vercel, Firebase), payment processing, email delivery, and analytics providers. These providers are contractually obligated to use your data only to perform services on our behalf.
  • Legal requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency).
  • Business transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have.
  • With your consent: We may share your information for any other purpose with your explicit consent.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal, accounting, or reporting obligations.

Anonymised and aggregated data that cannot be used to identify you may be retained indefinitely for analytical purposes.

7. Data Security

We implement industry-standard security measures to protect your personal information, including encryption in transit (TLS/SSL), encryption at rest, access controls, and regular security audits. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

8. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal information:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate or incomplete data.
  • Deletion: Request deletion of your personal data, subject to certain legal exceptions.
  • Portability: Request a machine-readable copy of your data.
  • Objection: Object to the processing of your data for certain purposes, including direct marketing.
  • Withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at hello@cooksavora.com. We will respond to your request within 30 days.

9. Children's Privacy

The Service is not intended for children under the age of 13 (or the applicable age of consent in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal information from a child, we will take steps to delete it promptly. If you believe a child has provided us with personal information, please contact us at hello@cooksavora.com.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from the laws of your jurisdiction. We take appropriate safeguards to ensure your personal information remains protected in accordance with this Privacy Policy, including the use of Standard Contractual Clauses where applicable.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Effective" date at the top. For significant changes, we may also send a notification via email or an in-app alert. Your continued use of the Service after the effective date of the revised policy constitutes your acceptance of the changes.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: