Your kitchen data, handled carefully.

Eatvia Inc. ("Eatvia", "we") provides the recipe-adaptation service at myeatvia.com and is the data controller for the information described here. For any privacy request, write to eatviasupport@gmail.com.

• Account data — email address, name if you give one, and authentication identifiers (including a Google account ID if you sign in with Google). Passwords are stored only as salted hashes by our authentication provider; we never see them.
• Dietary profile — diets, allergies, ingredient dislikes, spice tolerance and portion defaults. Some of this may reveal health information, so we treat it as sensitive and use it only to adapt recipes for you.
• Recipe and pantry content — recipe URLs or text you submit, the adapted results, saved recipes, ratings and feedback, pantry items with quantities and expiry dates, meal plans and shopping lists.
• Support messages — your name, email, topic and the content of anything you send through the contact or help form.
• Billing data — subscription plan, status, trial and renewal dates, and a customer identifier from our payment processor. Card numbers are entered directly with the processor and never reach Eatvia's servers.
• Usage and device data — pages viewed, features used, approximate location derived from IP, browser and device type, and error diagnostics.

To run the service you asked for (performance of our contract): adapting recipes, storing your profile and pantry, generating plans and lists, taking payment and providing support. With your consent, where consent is required, for sensitive dietary and health-related preferences and for analytics cookies. For our legitimate interests in keeping the service secure, debugging faults, preventing abuse and improving substitution quality. And to meet legal obligations such as tax and accounting records.

We do not sell your personal data, and we do not use your allergy or health information for advertising or profiling unrelated to cooking.

Recipe adaptation is performed by third-party large-language-model providers acting as our processors. The request we send contains the recipe and the parts of your profile and pantry needed for the adaptation; it does not include your name, email or payment details. Our providers are contractually barred from using this content to train their models.

Only service providers that help us operate Eatvia: our cloud hosting, database and authentication platform; our payment processor; our transactional email provider (for onboarding, support and account emails); our analytics provider; and our AI model providers. Each processes data on our instructions only. We may also disclose data where legally required, or to a successor entity in a merger or acquisition, in which case this policy continues to apply.

Our providers may process data in the United States and the European Union. Where data leaves your region we rely on appropriate safeguards such as the European Commission's standard contractual clauses.

Account, profile, pantry and recipe data are kept for as long as your account is active. If you delete your account we remove this data within 30 days, except records we must retain (for example invoices, typically for seven years) and anonymised aggregate statistics that cannot identify you. Support messages are kept for two years; server logs for up to 90 days.

Depending on where you live, you can request access to your data, correction, deletion, a portable copy, restriction of processing, or object to processing based on legitimate interests. You can withdraw consent at any time — for example by clearing your dietary profile or unsubscribing from onboarding emails via the link in any of them. Account emails required to operate your subscription will still be sent.

Email eatviasupport@gmail.com and we will respond within 30 days. If you are in the EEA or UK you may also complain to your local data protection authority.

Data is encrypted in transit and at rest. Access to production data is restricted to the small number of staff who need it, and row-level security rules mean one account cannot read another's recipes, pantry or profile. No system is perfect; if a breach affects you we will notify you and the relevant regulator as required by law.

We use strictly necessary cookies to keep you signed in, and analytics to understand which features are used. Analytics data is aggregated and never joined to your allergy profile. You can block cookies in your browser, though sign-in will not work without the necessary ones.

Eatvia is not intended for children under 16, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will remove it.

We will update this page and the date above when this policy changes, and email you before any material change takes effect. See also our Terms of Service.