Privacy Policy

Last Updated: March 2, 2026

At 2FullCups.com, your privacy is important to us. This policy explains how we collect, use, and protect your personal information when you use our website and services. By using the Service, you agree to the practices described below. This policy should be read alongside our Terms of Use.

1. Information We Collect

We collect information you provide directly to us, including:

Account registration information (e.g., name, email address, password)
Uploaded recipes, notes, and media (e.g., photos, audio, video)
Comments, stories, reactions, and feedback you contribute to the community
Group memberships, follower/following relationships, and notification preferences
Payment and subscription information (processed by Stripe; we do not store your full card details)

We also automatically collect certain information when you use the Service, including:

Device and browser information (e.g., browser type, operating system)
IP address and approximate location
Pages visited, features used, and interactions within the Service

2. How We Use Your Information

We use your information to:

Provide and personalize your experience with 2FullCups.com
Enable collaboration on shared recipe boxes with family and friends
Send transactional emails (e.g., verification, password reset, activity notifications)
Process payments and manage subscriptions
Provide AI-powered features such as recipe scanning (Pro tier)
Improve our services based on user feedback and engagement
Enforce our Terms of Use and protect against fraud or abuse

3. Cookies and Tracking

We use essential cookies to maintain your login session and remember your preferences. We may use analytics tools to understand how users interact with the Service. We do not use cookies for third-party advertising.

4. Media Content

You may upload personal media, including photos, handwritten recipe cards, audio recordings, or video content. All such media is securely stored by our cloud infrastructure provider and is accessible only to you or those you choose to share it with. Recipes shared to the community are publicly visible. We do not sell your media to third parties.

5. Third-Party Service Providers

We work with trusted third-party service providers to operate the Service. These providers process data on our behalf under strict confidentiality agreements:

Supabase — Database hosting, authentication, and file storage
Stripe — Payment processing and subscription management
Resend — Transactional email delivery (e.g., verification and notifications)
OpenAI — AI-powered recipe scanning for Pro subscribers (recipe text is sent for processing and is not stored by OpenAI beyond the request)
Vercel — Website hosting and performance

We do not sell your personal data. We only share your information with your consent, to comply with legal obligations, or with the service providers listed above.

6. Public and Private Data

Some of your data may be publicly visible depending on your actions:

Public: Recipes shared to the community, your display name, comments, and reactions on public recipes
Private: Your email address, personal recipe collection (unless shared), group memberships, and payment information

You control what you share. Recipes remain private by default until you explicitly choose to share them to the community.

7. Data Retention

We retain your account data for as long as your account is active. Deleted recipes are soft-deleted and may be recoverable from your trash for a limited time before permanent removal. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention).

8. Security

We take appropriate security measures to protect your data from unauthorized access, alteration, disclosure, or destruction. These include encryption in transit (HTTPS), secure authentication, and access controls on our infrastructure.

9. Your Rights

Depending on your location, you may have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data
Export your data in a portable format
Opt out of non-essential email communications
Withdraw consent for data processing where applicable

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

10. Children's Privacy

The Service is not intended for children under 16. We do not knowingly collect personal information from children under 16. If we become aware that a child under 16 has provided us with personal data, we will take steps to delete such information promptly.

11. Changes to This Policy

We may update this policy as needed. Material changes will be communicated via email or a notice on the Service. The “Last Updated” date at the top of this page reflects the most recent revision. Continued use of the site after changes implies your acceptance.

12. Contact Us

If you have any questions or concerns about our Privacy Policy, please contact us at [email protected].