Recipe & Notes

Privacy Policy

Colt Platform Ltd · Last updated: 2026-10-15

Overview

Recipe & Notes is a local-first app made by Colt Platform Ltd, a company registered in England and Wales (company number 17520257) with its registered office at 5 Brayford Square, London E1 0SG. Your recipes, notes, lists, and other supported content are kept on your device for offline access. Supabase provides account authentication and per-user cloud synchronization.

Data we collect

The table below summarizes the data paths implemented by this version of the app. The full external policy describes applicable rights, retention, and provider terms.

Account Information

Account cloud

Email address and basic profile details supplied by the sign-in provider are processed to authenticate and operate the Supabase account.

Shared with: Supabase

Recipes

Device + account

Recipes created or imported by the user, including title, ingredients, steps, tags, and cover images. Kept on your device; when you are signed in, also synced to your account.

Shared with: Supabase (when you are signed in)

Notes & Shopping Lists

Device + account

User-created notes with items, quantities, costs, and pinned state. Kept on your device; when you are signed in, also synced to your account.

Shared with: Supabase (when you are signed in)

Saved Links

Device + account

URLs bookmarked by the user along with automatically fetched preview metadata (title, description, image). Kept on your device; when you are signed in, also synced to your account.

Shared with: Source website (URL is fetched to extract metadata when you save or preview a link) · Supabase (when you are signed in)

Search History

Session only

Search queries submitted within the app are processed locally for relevance ranking. They are not persisted beyond the session.

Consent-Based Analytics

Account cloud

Usage events sent to PostHog only when the user explicitly consents. Events are designed to exclude recipe, note, URL, and message content.

Shared with: PostHog

Cloud Sync Data

Account cloud

Supported content is synchronized to the signed-in user's Supabase account for cross-device access and recovery.

Shared with: Supabase

Analytics

We use PostHog for usage analytics only if you give consent during onboarding or in Settings → Privacy. Analytics events are designed to exclude recipe, note, URL, and message content. You can withdraw consent at any time. Configured Sentry crash reporting is separate from this analytics setting.

Third-party services

We integrate with the following services when you use optional features:

Supabase — account authentication and per-user cloud sync. You can delete a signed-in cloud account from Settings.

PostHog and Sentry — consent-based usage analytics and configured release crash reporting, respectively.

Source websites and fetch providers — URL imports may contact the source site, the app fetch service, Microlink, and a feature-flagged ScraperAPI fallback.

AI providers — AI features send the user messages, recipe context, source URL, or bounded recipe-page text needed to answer or structure an import.

Termly — hosts our full policy documents.

GDPR · UK GDPR · CCPA

If you are located in the European Economic Area, the United Kingdom, or California you have enhanced privacy rights. See the Data Rights screen for a full description of those rights and how to exercise them in-app.

We do not use the app to sell your content. Account, cloud-sync, analytics, crash-reporting, URL-import, and AI data may be processed by the services listed above. See the full policy for the current legal terms and contact route.

Children's privacy

The intended age audience and children’s-privacy terms are set out in the current app-store listing and full external policy.

Contact

For any privacy questions or to exercise your rights, contact us at .