Privacy Policy

Effective Date: August 17, 2026
App Name: Taverna
Developer: Taverna
Contact: taverna.devv@gmail.com

This Privacy Policy explains how Taverna (“we”, “us”, “our”) collects, uses, stores, and protects information when you use our mobile application, website, backend services, and related features.

By using Taverna, you agree to the practices described in this Privacy Policy.

1. What Taverna Does

Taverna is a recipe application that allows users to discover recipes, search for recipes, view cooking instructions, save recipes to favorites, manage their profile, and access subscription-based features.

The app may be available on iOS and Android and communicates with our backend services to provide recipe content, account functionality, favorites, and subscription status.

AI-Assisted Content

Some recipe-related content, translations, categorizations, descriptions, comments, or other informational content available through Taverna may be generated, translated, enhanced, or assisted by artificial intelligence technologies.

AI technologies may process recipe-related content and metadata to help create, organize, improve, or localize content available within the app.

We do not use AI technologies to make automated decisions that produce legal or similarly significant effects on users.

2. Information We Collect

We collect only the information needed to provide, secure, and improve the app.

Account Information

When you create an account or log in, we may collect:

• email address;
• user ID;
• account creation date;
• authentication and session data;
• password-related authentication data stored as a password hash.

We do not store your password in plain text.

Profile and Preference Data

We may store:

• selected language;
• subscription status;
• app preferences linked to your account.

Recipe and App Usage Data

When you use the app, we may process:

• recipes you view;
• recipes you add to or remove from favorites;
• search queries used to find recipes, so we can return results;
• selected tags, filters, or categories;
• technical request data required for the app to work.

Favorites are stored per user account so that saved recipes can be restored when you log in.

Search query text is not sent in our analytics or marketing events. We process search queries only as needed to provide search in the app.

Analytics Information

We collect first-party product analytics to understand how the app is used and to improve features, reliability, and Premium conversion.

This may include:

• an anonymous install identifier stored on the device;
• an analytics session identifier;
• app version and platform (iOS, Android, or similar);
• product events such as first open, session start, new account created, recipe opened, favorite added, paywall viewed, attempt to use a Premium-gated feature, and purchase start.

If you are logged in, we may associate these events with your account on our servers. The app does not send your name or email address inside analytics events.

Subscription trial and paid conversion events may be recorded on our backend after we verify subscription status with our subscription provider. We do not accept client-reported “purchase completed” or conversion events as the source of truth.

Marketing Measurement

We may use Meta App Events to measure marketing performance.

On iOS, we request permission through Apple’s App Tracking Transparency prompt before collecting the advertising identifier (IDFA).

• If you allow tracking, we may collect the advertising identifier and related measurement data for Meta.
• If you decline or restrict tracking, we do not collect the advertising identifier. Limited Meta events that do not use IDFA may still be sent.

Meta search measurement does not include the text of your search query.

Subscription and Purchase Information

If you purchase a subscription, payment is processed by Apple App Store or Google Play, depending on your device and platform.

We do not collect or store your full payment card details.

We may receive or store limited subscription-related information from Apple App Store, Google Play, or subscription management providers, such as:

• subscription status;
• product or plan identifier;
• purchase or transaction identifier;
• start date and end date;
• renewal or expiration status.

Technical Information

We may collect technical information needed to operate and protect the app, including:

• device type;
• operating system;
• app version;
• language settings;
• IP address;
• backend request logs;
• error logs.

This information is used for security, debugging, fraud prevention, service reliability, and app improvement.

Admin Data

For authorized admin users, we may process:

• admin email;
• authentication and session data;
• role information;
• actions performed in the admin panel.

Admin functionality is used to manage recipes, ingredients, tags, legal pages, images, and other app content.

3. How We Use Information

We use collected information to:

• create and manage user accounts;
• authenticate users;
• provide recipe discovery, search, recipe details, and favorites;
• save user preferences;
• determine subscription access;
• process subscription status;
• understand product usage and improve the app;
• measure marketing performance, including whether advertising led to installs or in-app actions, where permitted;
• provide customer support;
• secure the app and backend services;
• detect errors, abuse, fraud, or unauthorized access;
• maintain and improve app functionality;
• operate the admin panel.

4. Legal Basis for Processing

Where applicable, we process personal data based on:

• performance of a contract, to provide the app and account features;
• legitimate interests, to secure, maintain, and improve the service, and to understand product usage;
• consent, where required for optional features, communications, or tracking (including App Tracking Transparency on iOS);
• legal obligations, where we must comply with applicable law, platform rules, or lawful requests.

5. How We Store and Protect Information

Taverna uses backend services, database storage, and file storage to operate the app.

We use reasonable technical and organizational measures to protect information, including:

• password hashing;
• token-based authentication;
• role-based access control for admin functionality;
• protected admin routes;
• backend access controls;
• secure token storage where supported;
• restricted access to database and storage systems.

No system is completely secure, and we cannot guarantee absolute security.

6. Third-Party Services

We may use third-party providers to operate the app, including:

• Apple App Store for iOS subscriptions and payments;
• Google Play for Android subscriptions and payments;
• subscription management providers (including RevenueCat);
• Meta Platforms for App Events and marketing measurement;
• database and file storage providers;
• hosting and infrastructure providers;
• error logging and monitoring tools.

These providers may process information according to their own privacy policies and terms.

You can learn more about Meta’s data practices in Meta’s privacy policy.

7. Payments

Payments are handled by Apple App Store or Google Play.

We do not receive your full card number, bank account details, or full payment credentials.

Subscription cancellation, renewal, refund handling, and billing management may depend on the platform where you purchased the subscription.

You are responsible for managing your subscription through Apple App Store or Google Play.

8. Data Retention

We keep personal data only as long as necessary to provide the app, comply with legal obligations, resolve disputes, enforce agreements, maintain security, and prevent fraud.

Account data is retained while your account is active.

Favorites and profile preferences are retained while your account exists.

Subscription records may be retained as needed for entitlement validation, accounting, fraud prevention, and legal compliance.

Analytics events are retained as needed to measure product usage and marketing performance, and may be aggregated or anonymized over time.

When you request deletion of your account, we will delete or anonymize personal data unless we are required or permitted to retain certain information by law, security needs, fraud prevention, accounting, platform obligations, or dispute resolution. Analytics records linked to your account may be deleted or detached from your user ID.

9. Your Rights

Depending on your location, you may have rights to:

• access your personal data;
• correct inaccurate personal data;
• delete your account or personal data;
• object to certain processing;
• restrict certain processing;
• request data portability;
• withdraw consent where processing is based on consent, including iOS tracking permission through device settings.

To exercise these rights, contact us at:

taverna.devv@gmail.com

10. Account Deletion

You may delete your account directly within the app or contact us at:
taverna.devv@gmail.com

When you request account deletion, we will delete or anonymize personal data associated with your account unless we are required or permitted to retain certain information for legal compliance, security, fraud prevention, accounting, dispute resolution, or platform-related obligations.

Deleting your Taverna account does not automatically cancel an active subscription purchased through Apple App Store or Google Play.

You must cancel subscriptions through the platform where you purchased them.

11. Children’s Privacy

Taverna is not intended for children under the age required by applicable law to use online services without parental consent.

We do not knowingly collect personal information from children.

If you believe that a child has provided us with personal information, contact us and we will take appropriate steps to delete it.

12. International Data Transfers

Your information may be processed and stored in countries other than your country of residence.

Where required by applicable law, we use appropriate safeguards for international data transfers.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

If we make material changes, we may notify users through the app, website, or other appropriate means.

The “Effective Date” at the top of this page indicates when this Privacy Policy became effective.

14. Contact Us

If you have any questions about this Privacy Policy or your personal data, contact us at:

Taverna
Email: taverna.devv@gmail.com