Privacy Policy

We collect information in three ways: what you give us, what we generate through your use of the Service, and what our service providers process on our behalf.

Account information

• Email address and password (if you sign up with email), stored securely by our authentication provider, Supabase - we never see or store your password in plain text.
• If you sign up or log in with Google, Facebook, or X, we receive your name, email address, and profile identifier from that provider, as permitted by your settings with them.

Content you create

• Dish names, descriptions, and any restaurant context you choose to save.
• Recipes you generate and save, including ingredients, method, technique, and equipment notes.
• AI-generated allergen flags and substitution suggestions attached to a saved recipe (see the food safety notice in our Terms of Service - this labelling is automated and not a substitute for your own checks).
• Collections (recipe groupings), shopping lists, and the items and quantities in them.

Menu photos

When you photograph or upload a menu, the image is sent directly to our AI provider for processing and is not stored by Re-Made at any point - not on our servers, not in our database, not in a cache. Once the dishes have been extracted from the image, the photo is discarded. Only the structured text you choose to save (a dish name, a generated recipe) is ever persisted.

Payment information

Payments are processed by Stripe, Inc. We never receive or store your full card number, expiry date, or CVC. We retain a record of your purchases (credit packs, subscription status) and Stripe's internal reference for that transaction, so we can apply credits to your account and handle refund requests.

Usage and log data

We keep a record of when you generate a recipe or scan a menu (which AI model was used, whether the request succeeded, and a one-way hash of the dish name), so that we can enforce free-tier limits, fair use on unlimited plans, and diagnose problems. We do not log the contents of your menu photos.

• To create and secure your account, and to authenticate you when you log in.
• To operate the core features of the Service: extracting dishes from a photo, generating recipes, saving them to your collections, and building shopping lists.
• To process payments, apply purchased credits, and manage subscriptions.
• To enforce free-generation limits and fair-use limits on unlimited plans, and to prevent abuse of the Service.
• To communicate with you about your account, transactions, or changes to the Service.
• To comply with our legal obligations, and to establish, exercise, or defend legal claims.

We do not sell your personal data, and we do not use your saved recipes or menu content to train AI models.

We use a small number of service providers ("processors") to run Re-Made. Each is contractually bound to only use your data to provide their service to us.

• Anthropic - processes your menu photo and dish descriptions to extract dishes and generate recipes. See Anthropic's own privacy policy for how they handle API data.
• Supabase - hosts our database and handles authentication. Your account data and saved content is stored on Supabase's infrastructure.
• Stripe - processes payments and manages subscriptions.
• Google, Facebook, X (if used) - provide sign-in on your instruction; we only receive the profile fields needed to create your account.
• Vercel - hosts the Re-Made application and website.

We may also disclose information if required by law, to protect the rights and safety of Re-Made or our users, or in connection with a merger, acquisition, or sale of assets (in which case we'll tell you before your data is transferred and becomes subject to a different privacy policy).

Our service providers may process data outside your country of residence, including in the United States. Where this involves a transfer of personal data out of the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses.

We keep your account and saved content for as long as your account is active. If you delete a recipe, collection, or shopping list, it is removed from our active database immediately (backups are cycled out within a limited period afterward). If you delete your account, we delete your personal data within 30 days, except where we're required to retain certain records (for example, transaction records) for tax or legal purposes.

We use a small number of strictly necessary cookies to keep you signed in. See our Cookie Policy for details.

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent at any time. You can access and delete most of your content (recipes, collections, shopping lists) directly within the app. For anything else, or to delete your account entirely, contact us at privacy@re-made.uk. If you're in the UK or EEA, you also have the right to lodge a complaint with your local data protection authority.

We use industry-standard measures to protect your data, including encryption in transit and at rest, and row-level access controls so that your saved content is only readable by your account. No system is completely secure, and we can't guarantee absolute security of information transmitted to the Service.

The Service is not directed at children, and you must be at least 16 years old (or the age of digital consent in your country, if higher) to create an account. We do not knowingly collect personal data from children.

We may update this policy from time to time. If we make material changes, we'll let you know by email or through the Service before they take effect. The "Last updated" date at the top of this page shows when it was last revised.

Questions about this policy or your data? Email privacy@re-made.uk.