Privacy Policy

1.1 Account Information. When you create an account, we collect your email address and a password. Passwords are stored only in hashed form (bcrypt); we cannot read your password. We do not require your legal name, physical address, phone number, or date of birth to create an account. We also record the date and time you accepted our Terms of Service and the version of the Terms you accepted. If you choose to, you may also tell us how you heard about CAVTAR and enter a sign-up code (for example, one shared by a community group); both are optional and are used only to understand which of our outreach is working.

1.2 Kitchen and Preference Information. You may provide information about your kitchen and cooking preferences, including: ingredients and pantry items; kitchen equipment and appliances; preferred language and measurement units; serving sizes; cuisine, style, and mood selections; and free-text notes, including items or categories you wish to avoid.

1.3 Avoidance Preferences; Sensitive Information You Choose to Provide. The Service’s avoidance field requests food preferences only (its prompts use examples such as “no pork, no cilantro, no mushrooms”) and does not request health information. Free-text fields may nonetheless, at your option, include information such as allergies or dietary restrictions. Whatever you enter is treated as a strict constraint for generating the recipes and content you request, and is used only for that purpose, as described in this Policy. Providing such information is optional; please do not include health information beyond what is needed for recipe generation. If you choose to enter it, you consent to our using it solely to generate the recipes and content you request.

1.4 Usage and Interaction Information. We collect the content of your interactions with the Service, such as recipes generated for you, guided cooking sessions, questions you ask and the answers provided, and feedback you submit. We also maintain usage counters (for example, the number of recipe generations or guided sessions used in a day or week) to administer plan allowances and free-trial limits.

1.5 Payment Information. If you purchase a subscription, payment is processed by our third-party payment processor, Stripe, Inc. We do not collect or store full payment card numbers; we receive limited information from the processor such as subscription status, plan, and partial card details (e.g., last four digits) for account administration.

1.6 Technical Information. Like most online services, our servers automatically receive basic technical information when you use the Service, such as IP address, browser type and language setting, device type, and timestamps, which we use for security, debugging, and operating the Service. Our hosting provider maintains standard server logs on our behalf.

1.7 What We Do Not Collect. We do not collect precise geolocation, contacts, photographs, or biometric information, and we do not use third-party advertising trackers.

3.1 To generate recipes and related content, the Service transmits relevant information you provide — such as your ingredient list, equipment, preferences, avoidance list, serving size, selected language, and questions — to our artificial-intelligence model provider, Anthropic, PBC, which processes it to produce the requested content and returns the result to us.

3.2 We do not send your email address, password, or payment information to the model provider as part of recipe generation. Content transmitted for generation is limited to what is needed to produce your recipes and answers.

3.3 Our use of the model provider is subject to its commercial terms. Under those terms, Anthropic does not use the content we send it to train its models, and it deletes the inputs and outputs we send and receive within thirty (30) days, except where it must retain them longer to enforce its usage policy or to comply with law. Anthropic’s current policies are published at https://privacy.claude.com.

3.4 Content generated by artificial intelligence may be inaccurate. Please see our Terms of Service, including its food-safety and allergen disclaimers, before relying on generated content.

8.1 Access, Correction, and Deletion. You may access and update your pantry, preferences, and account information within the Service. You may request a copy of your personal information, correction of inaccuracies, or deletion of your account and associated personal information by contacting us at support@cavtar.com. We will verify your request using your account email and respond within thirty (30) days.

8.2 U.S. State Privacy Rights. Depending on your state of residence, you may have rights to know, access, correct, delete, and obtain a portable copy of your personal information, and the right not to receive discriminatory treatment for exercising those rights. We do not sell personal information or share it for cross-context behavioral advertising, so no opt-out of sale or sharing is required. You may exercise your rights, or appeal a decision, by contacting support@cavtar.com.

8.3 Where the Service Is Offered. The Service is operated from the United States and is directed to users in the United States and Canada. It is not directed to users in the European Economic Area, the United Kingdom, or other jurisdictions whose data-protection laws would impose additional requirements. If you use the Service from outside the United States, including from Canada, you understand that your information will be transferred to, stored, and processed in the United States by us and by the service providers named in Section 4, and that while it is there it may be accessible to U.S. courts, law enforcement, and government authorities under U.S. law.

8.4 Communications. We send transactional emails related to your account — for example, payment receipts, advance reminders of upcoming renewals for annual subscriptions (including cancellation instructions), trial-related notices, payment-failure notices, and security notices. These are sent by us directly or through our payment processor. If we ever send marketing communications, you will be able to opt out.

8.5 Canadian Users. If you are in Canada, we handle your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws, including Quebec’s Act respecting the protection of personal information in the private sector. You may withdraw your consent to our collection and use of your personal information at any time, subject to legal or contractual restrictions and reasonable notice, by deleting your account or contacting us; because the Service cannot operate without your account information, withdrawing consent means we will no longer be able to provide the Service to you. You have the right to access your personal information, to have it corrected, and to be told how it is used and to whom it is disclosed. The person responsible for the protection of personal information at CAVTAR is the Sole Member of Health Clear Strategies, LLC, who can be reached at support@cavtar.com or at the postal address in Section 11. If you are not satisfied with our response to a privacy concern, you may contact the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d’accès à l’information du Québec. A French version of this Privacy Policy is available at https://cavtar.com/fr/privacy/.