Privacy Policy — Kettle

Last updated: 5 August 2026

This policy covers kettlerecipes.com, a web application built and operated by Saahil Padwal, Koki Yang, Alyssa Ho and Eleanor Yue. Contact: kettl3recipes@gmail.com.

Kettle is a website you use in a browser. There is no Kettle mobile app.

1. What we collect

Account information.Your email address. If you sign in with a password, authentication is handled by our provider Supabase — your password is stored by Supabase in hashed form and Kettle never sees or stores it.

Your pantry. The ingredients you add, and the quantities you set.

Allergies and diets. The allergens you tell us to avoid and the diets you select. This is sensitive information about you and it is the reason Kettle can filter recipes at all. We use it for that and nothing else.

Photos of your fridge, pantry or spice cabinet. Only when you use the scan feature and only the images you choose to submit.

Recipe and list activity. Which recipes you save, which recipes you remove, and what is on your grocery list.

Subscription status. Whether you are on a paid plan, which one, and when it renews or ends.

Basic technical data. Our hosting provider records standard server logs (IP address, timestamp, requested page, user agent) for security and troubleshooting.

2. What we do NOT collect

• We do not collect your card number, expiry date or security code. Payment is handled entirely by Stripe on Stripe’s own pages. We receive only a confirmation that a subscription started, changed or ended.
• We do not collect your name, address, phone number, date of birth, or location.
• We do not run advertising, ad networks, or third-party advertising trackers.
• We do not log what you eat. Kettle has no meal diary and no nutrient-intake history.
• We do not sell your information to anyone, for any price, ever.

3. What happens to your photos

This is the part people care about most, so it is specific:

1. You take or choose a photo in the scan screen.
2. The image is sent to our server, and from there to Anthropic’s API, which identifies visible food items and returns a list of ingredient names.
3. The ingredient names come back to you so you can accept or reject them.
4. Kettle does not save the image. It is not written to our database and it is not written to file storage. It exists only for the duration of that request.
5. Anthropic’s handling of API inputs is governed by their own terms. We do not permit our data to be used for model training.

If you are not comfortable with an image leaving your device, do not use the scan feature — you can type ingredients into your pantry instead, and every other part of Kettle works the same way.

4. Why we hold what we hold

• Email address: to create your account, sign you in, and contact you about your account or a material change to these policies.
• Allergies and diets: to remove unsafe recipes before you see them.
• Pantry, saved recipes, grocery lists: to give you the feature you asked for.
• Subscription status: to know which plan you are on.
• Server logs: to keep the service up and to investigate abuse.

We do not use any of it for profiling, scoring, or automated decisions that have a legal effect on you.

5. Who else touches your data

We use these companies to run Kettle. Each one only receives what it needs.

• Supabase— database, authentication and file storage. Holds your account, pantry, allergies, diets, saved recipes and lists.
• Anthropic— AI ingredient identification. Receives the photos you submit to the scan feature, at the moment you submit them.
• Stripe— payment processing. Receives your payment details directly from you and gives us back a subscription status. We never see the card.
• Vercel— web hosting. Serves the site and keeps short-lived server logs.

Recipe text comes from TheMealDB, photographs from Pexels, and nutrition data from USDA FoodData Central. Those are sources we read from, not places your data goes.

We will also disclose information if we are legally required to, or to protect someone’s safety. If Kettle is ever acquired or merged, your information may transfer as part of that, and we will email you before it happens.

6. How long we keep it

• Account data, pantry, allergies, diets, saved recipes, lists: until you delete your account, and then removed within 30 days.
• Photos: not retained. See section 3.
• Server logs: retained by our host on their standard schedule, currently about 30 days.
• Records we must keep for tax or accounting reasons (that a subscription payment happened, and when): kept as long as the law requires.

7. Your choices and your rights

You can, at any time:

• See what we hold about you.
• Correct anything wrong.
• Delete your account and everything attached to it.
• Get a copy of your data in a portable format.
• Withdraw consent for the scan feature simply by not using it.
• Object to, or ask us to restrict, a particular use.

Email kettl3recipes@gmail.com from the address on your account and we will do it within 30 days. We will not charge you for it and we will not treat you differently for asking.

If you are in California, the CCPA/CPRA gives you these rights explicitly, including the right not to be discriminated against for exercising them. We do not sell or share personal information as those terms are defined there. If you are in the EU, UK, or another place with equivalent law, the same rights apply and you may also complain to your local data protection authority.

8. Security

Access to your data is enforced at the database level with row-level security, so one account’s rows are not readable by another account. Traffic is encrypted in transit. Secrets are held in server-side environment variables and never shipped to the browser.

We are a small team and we are not going to pretend we are unbreakable. If we discover a breach affecting your personal information, we will email you and any regulator that requires it, without undue delay.

9. Children

Kettle is not for anyone under 13. We do not knowingly collect information from children under 13. If you believe a child under 13 has an account, email kettl3recipes@gmail.com and we will delete it.

10. Where your data lives

Our providers operate in the United States and your data is processed there. If you use Kettle from outside the US, you are agreeing to that transfer.

11. Changes

If we change this policy in a way that matters, we will email the address on your account at least fourteen days before it takes effect and update the date at the top.

12. Contact

kettl3recipes@gmail.com

Terms of Service