Last updated: August 7, 2026
Effective date: August 7, 2026
Spin Light Productions LLC (“we,” “us,” or “our”) operates the Receta Studio application (the “Service”), available as a web application and as native iOS and Android apps. This Privacy Policy explains how we collect, use, store, share, and protect information when you use Receta Studio.
By creating an account or using the Service, you agree to the practices described in this policy. If you do not agree, please do not use the Service.
Privacy and support contact: [email protected]
Company address: 121 Wellington Circle, Williamsburg, VA 23185
We collect account data such as your email address, password (stored only as a bcrypt hash), and display name. We also store preferences including cooking skill level, language or locale (for example en-US, es-419, or es-ES), and unit preference (US, metric, or original).
We store user content you create or save, including recipes (titles, ingredients, instructions, nutrition estimates, photos, and import source attribution), meal plans, grocery lists, pantry items, cookbooks, and favorites. We process images and text you upload or share, including through the iOS Share Extension or Android share target, and URLs you submit for import. We also receive messages you send us for support.
Some older profile fields (for example allergies, diet goals, or dislikes) may still exist in storage from earlier versions. Related personalization features are currently turned off, and those fields are not used to drive recipe generation.
We store usage meters used to enforce free-week and plan limits (for example generations, imports, and pantry scans). We may process technical and diagnostic data such as app version, device information available through the app runtime, error logs, and limited telemetry events. We also generate derived data such as nutrition estimates, translations, ingredient parsing, and food-vocabulary improvements.
When you import a URL, we may read structured recipe data (for example JSON-LD) from public websites. For certain social links we may request public metadata only (for example TikTok or Instagram oEmbed captions, and YouTube video descriptions when a YouTube API key is configured). Full automated scraping of social watch pages is not the default launch behavior.
When you subscribe, Apple and RevenueCat provide payment and subscription status. We do not receive your full payment card number. We do not collect precise location or contacts.
We use this information to create and secure your account and keep you signed in (session tokens last about 90 days, with one active server session per account); to provide recipes, AI generation and import, translation, meal planning, grocery and pantry tools, nutrition estimates, and cookbooks; to send prompts and relevant content (including photos you choose to process) to our AI provider so we can generate, parse, translate, or analyze recipes and pantry images; to enforce plan limits and protect the Service from abuse; to send transactional email only (verification and password-reset codes) through our email provider; to process subscriptions and unlock Pro features; and to improve reliability, diagnose errors, and meet legal obligations.
We do not use your content to train third-party foundation models beyond what is needed to deliver the features you request. We do not send marketing email.
We share information only with providers needed to run the Service.
xAI (Grok) receives prompts, recipe text, and images as needed for generation, import parsing, photo and pantry vision, translation, and related AI tasks.
Fly.io provides application hosting and storage. Primary hosting is in the Ashburn, Virginia (iad) region in the United States.
Resend delivers transactional email (recipient address and message content such as verification codes).
RevenueCat manages subscription status and entitlements. We identify you to RevenueCat with an internal user id, not your email address.
Apple processes In-App Purchases on iOS.
Public recipe sites and platform oEmbed or API endpoints may receive a request when you import a URL.
We do not sell personal information and do not share it with advertisers or data brokers. Google Play Billing is not currently offered. Sign in with Apple or Google is not the live login method; the live method is email and password.
Recipe and related images for your account are stored with your account data. Images are served through time-limited signed URLs (typically on the order of hours). A signed link can work until it expires and is not continuously re-checked against your login. Some imported covers may remain hotlinked from the original site.
Account data is kept while your account remains open. You may delete your account from the Account screen. Deletion clears your session, removes your per-account data directory on our servers, removes your user registry entry, and attempts to remove images used only by your account.
Shared system data is not fully removed. That includes shared nutrition and vocabulary catalogs, seed images, content-addressed nutrition cache, and diagnostic or telemetry logs (including AI usage summaries that may include an internal user id and do not include full recipe bodies).
Deleting your Receta Studio account does not by itself cancel an App Store subscription or delete Apple or RevenueCat billing records. Manage or cancel a subscription in your Apple ID settings.
You can export recipes (JSON) before deletion. Signing out clears the session token stored on your device.
Depending on where you live, you may have rights to access, correct, delete, or export information, or to object to certain processing. Use in-app export and account deletion, or email [email protected]. We respond within the time required by applicable law.
We use measures appropriate to the risk, including password hashing (bcrypt), hashed session tokens, per-account data isolation, rate limiting on authentication, and HTTPS. No method of transmission or storage is completely secure.
The Service is hosted primarily in the United States. If you use it from elsewhere, your information is transferred to and processed in the United States.
The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have, contact us and we will delete it. The app does not include a separate age-gate flow.
We may update this policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the Service after the effective date constitutes acceptance of the updated policy.
Spin Light Productions LLC
121 Wellington Circle
Williamsburg, VA 23185
[email protected]