Privacy Policy

What we store

• Your name, email and sign-in details, so you can access your account.
• Kitchen records you enter: ingredients, recipes, menu, prep plans, notes, the 86 list, stock imports and requisitions.
• Recipe photos and, only if you choose “keep a copy”, the original receipt or invoice file. These are stored privately.
• Contact messages: your name, email and message, stored privately for follow-up and sent to Daniel through Lovable’s app email service. Contact details are not public.
• A basic activity log so kitchen leads can see team changes.

How it is stored and shared

Account and kitchen records are stored online in Lovable Cloud. Photos and any originals you choose to keep use private file storage. Kitchen records are shared with authorized members of that kitchen; private notes belong only to their writer. We do not sell your data or show ads.

Service providers

• Lovable Cloud — hosting, database, sign-in and private file storage.
• Lovable app emails — welcome messages, requested order lists and account-deletion confirmations. Email delivery providers process the recipient address and message to deliver them.
• Lovable AI Gateway — powers the optional Kitchen Assistant page when you use it.
• Your browser’s speech provider — tap-to-talk recognition and spoken replies for “Ask Brunoise · AI” run through your browser and may be processed by its speech service.

These providers process data only to run the app.

Scanning and AI

• Photo, PDF, CSV and Excel reading happens on your device. Files are not sent to any AI or recognition service.
• Scanned results may contain errors. Check the photo, quantities, prices and units before confirming an import.
• The optional Kitchen Assistant (sign-in only) sends your question and relevant saved kitchen information to an AI model to write a reply. Don’t include personal or guest information in questions.
• “Ask Brunoise · AI” uses tap-to-talk browser speech recognition, which may process audio through your browser’s speech provider. Brunoise Kitchen does not store voice recordings. Typed or recognized text is sent to the app to query your live kitchen records and is not saved as chat history. Confirmed availability changes and their audit records are saved. The assistant and its spoken replies are AI-generated — a synthetic browser voice, not a real person. Optional AI understanding and custom voice are off.
• The public sample kitchen uses fictional data and sends nothing.

How long data is kept

• Active kitchen records remain until removed by the kitchen or the last member confirms deletion of the whole kitchen.
• Normal Trash records remain recoverable for 30 days. A daily cleanup permanently removes expired records and related private photos; failed file removals retry on subsequent runs, so cleanup can take an additional day. Removed recipe photos currently use the recipe’s last-updated time as their retention start.
• Activity logs and anonymous account-deletion events are retained for one year, then removed by daily cleanup.
• Export download links expire after one minute. Temporary ZIP files are eligible for removal after one hour and removed by daily cleanup.
• Lovable Cloud’s documented daily database backups are retained for roughly 14 days. Deleted database records may remain there until those snapshots expire. Storage files are not included in these database backups. We cannot inspect the provider’s individual backup inventory from the app.
• Contact messages remain for follow-up; request deletion through the contact form.

Download my data

Open Account settings → Your data to prepare a private ZIP with Excel-friendly CSV files: your profile name and email, your notes and activity entries, and recipes, ingredients/inventory, requisitions and 86 entries you created in kitchens you still belong to. No other members’ profiles or activity are included. Older recipes and ingredients without a verified creator are omitted rather than assigning them to the wrong person. The export excludes passwords and private file attachments. Three exports per account are allowed per UTC day.

Delete my account

In Account settings → Your data, download a copy first, confirm your password, type DELETE and press the final confirmation. Password confirmation expires after ten minutes; five attempts are allowed per hour. Social sign-in users can set a Brunoise Kitchen password through the password-reset flow first.

Deletion permanently removes your sign-in credentials, email, profile, personal notes (private and kitchen-visible), memberships, assistant history, account settings stored online, pending import drafts, and uploaded recipe photos or retained receipts/invoices. Account preferences on other devices may remain locally until those devices clear their browser storage; they no longer provide account access. Files are removed immediately where possible, with daily retries for failures.

Shared kitchen recipes, ingredients/inventory, requisitions and 86 entries remain for the other members, with your creator identity removed. Activity entries remain as Former member without personal change details. The app cannot automatically identify personal information someone types into free-text kitchen records; use the contact form for help with that. If you are the only lead of a shared kitchen, deletion is blocked until you appoint another lead in Team & Activity. If you are the only member, separately confirm deletion of the whole kitchen and its records.

Your sign-in is removed and kitchen access ends across devices. A deletion confirmation email is sent to your old address when delivery is available; unsubscribed or suppressed addresses may not receive it. Deletion failures are kept in a private retry record until completed; the final security log holds only a random anonymous ID and timestamp.

For privacy questions or help, use the contact form. See the Terms of Use.

Beta notice

This is a beta, not a certified system. Avoid storing sensitive personal data in Brunoise Kitchen.