Privacy Policy
Ruchy · Effective [DATE] · Operated by [GlowArts / your legal name], India.
This policy explains what personal data Ruchy ("we", "us") collects, why, who we share it with, and the rights you have under India's Digital Personal Data Protection Act, 2023 (DPDP). By using the app you agree to this policy.
1. Who we are
Ruchy is a recipe app that lets you save recipes from links, photos, and text, organise them, and cook them. The data controller ("Data Fiduciary" under DPDP) is [GlowArts / legal entity], contactable at hello@ruchy.app.
2. You do not create an account with personal details
Ruchy does not require your name, email, or phone number to work. On first launch the app creates an anonymous device identity (a random ID) so your recipes can back up to the cloud and sync across your own devices. We do not know who you are from this ID.
3. What we collect and why
| Data | Why | Where it lives |
|---|---|---|
| Anonymous device ID | Sync and back up your own data | Device + our cloud (Supabase) |
| Display name (optional, if you enter one) | To greet you in the app | Device + cloud |
| Diet & allergy preferences (e.g. vegetarian, nut allergy) | To suggest recipes you can safely eat and flag imports that clash | Device + cloud, and sent to our AI provider (see §4) |
| Recipes you save; meal plans; grocery & pantry lists; your food/nutrition log | The core features of the app | Device + cloud |
| Links, text, and photos you import to create a recipe | To read them into a structured recipe | Sent to our AI provider (see §4); the resulting recipe is stored |
| Photos you take of your own cooked dishes | To illustrate your saved recipe | Device only — these are not uploaded |
Sensitive data. Diet and allergy information can reveal health details. We collect it only to make recipe suggestions safe for you, we ask for it optionally, and you can clear it at any time in Settings.
4. AI processing and cross-border transfer
To turn a link, photo, or text into a recipe — and to filter recipe searches by your diet — the relevant content is sent to our AI provider, Anthropic (Claude), which processes it on servers outside India (in the United States). Before any content is sent for AI processing for the first time, the app shows you a consent screen describing exactly what is shared, and you must agree. We do not send your name or device ID to the AI provider with this content.
5. What we do NOT do
- We do not show advertising.
- We do not track you across other apps or websites, and we do not sell your data.
- We do not use third-party analytics or advertising SDKs in the app.
- We do not put any personal data on the recipe cards you share — a shared card shows only the recipe, the original creator's handle, the Ruchy mark, and a short link.
- We do not take payment in the app; it is free.
6. How long we keep it
We keep your data until you delete it. Deleting a recipe removes it (a short recovery window applies via the in-app bin). Deleting your account (see §8) removes your synced data from our cloud.
7. Who we share with (processors)
- Anthropic — AI recipe extraction and search (see §4).
- Supabase — cloud database that stores your synced data.
- Apple / Google — the app stores that distribute the app.
These providers process data on our behalf under their own security terms. We do not share your data with anyone for their own marketing.
8. Your rights under DPDP, and deleting your data
You have the right to access, correct, and erase your personal data, to withdraw consent, and to grievance redressal.
- Delete everything: in the app go to You → Account & data → Delete account & data. This wipes your data from this device and from our cloud, and signs out the anonymous identity.
- Without the app installed: email hello@ruchy.app from any address and we will delete your synced data — see our Support page.
- Export: You → Account & data → Export my recipes downloads a copy.
- Correct / withdraw consent: edit or clear your details in Settings, or email us.
9. Grievance Officer (required by DPDP)
If you have a complaint about how your data is handled, contact our Grievance Officer:
- Name: [Grievance Officer name]
- Email: [grievance@ruchy.app]
- We will acknowledge and respond within the timelines required by law.
10. Children
Ruchy is intended for users aged [18] and over. Under DPDP, processing a child's data requires verifiable parental consent; we do not knowingly collect data from children. If you believe a child has used the app, contact us and we will delete the data.
11. Security
We protect data in transit with HTTPS and restrict who can read your cloud data to your own account. No system is perfectly secure, but we design to keep your data private by default.
12. Changes
We may update this policy; we will change the effective date above and, for material changes, notify you in the app.