This Privacy Policy explains how the Poppy mobile application ("Poppy," "the App," "we," "us," or "our") collects, uses, discloses, and safeguards information when you use the App. By using Poppy, you agree to the collection and use of information as described in this policy.
Information not listed in this table, including your saved recipes, pantry list, cooking history, and photo library, is stored locally on your device only and is not transmitted to Poppy or any third party.
| Information | Disclosed to | Purpose | Retention |
|---|---|---|---|
| Text you enter describing what you'd like to cook, quiz responses, a summary of your pantry contents, and your saved food profile, including any allergies, dietary restrictions, or wellness preferences you provide | Anthropic | To generate recipe suggestions and instructions | The content of requests and responses is not retained on Poppy's servers. A per-device request count is kept to enforce usage limits, and a separate technical log (feature used, approximate request/response size, success or failure) is retained for reliability and cost monitoring. Neither log includes the content of your request or the response. |
| Photographs you choose to submit, such as a receipt, the contents of your refrigerator, or a photo of a finished dish | Anthropic | To process receipt scans, refrigerator scans, or cooking check-ins, only when you actively use one of these features | Not retained on Poppy's servers |
| Shared pantry, shopping list, meal plan, and each participant's food profile, collected only if you create or join a shared household | Poppy's backend | To synchronize a shared kitchen across household members and ensure recipe suggestions account for every member's dietary restrictions | Retained while the household exists; removed when a member leaves or the household is deleted |
| An anonymous device session identifier | Poppy's backend | To authenticate your device between sessions without requiring an account | Stored in your device's Keychain; revoked upon reinstallation of the App |
| Your email address and an internal user ID, collected only if you choose to sign in with Google or Apple | Poppy's backend | So your Cookbook and history survive reinstalling the App. Signing in does not enable any additional syncing of your pantry, cookbook, photos, or profile, which remain on your device either way | Retained while your account exists; deleted when you delete your account in the App's Settings |
Poppy uses the following third-party service providers to operate the App. We do not sell or share your information with data brokers or advertising networks.
Each permission below is optional. The App requests it only at the point you use the corresponding feature, never at first launch.
Information stored on Poppy's backend is transmitted using industry-standard encryption in transit and is protected by access controls restricting it to the App's own authenticated services. No method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.
Poppy is intended for a general audience and is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected such information, we will take steps to delete it.
Poppy's backend infrastructure is hosted in the United States. If you use the App from outside the United States, information you provide may be transferred to, stored, and processed in the United States, which may have data protection laws different from those of your country of residence.
We may update this Privacy Policy from time to time to reflect changes in the App or applicable law. The effective date at the top of this page indicates when it was last revised. Material changes will be reflected on this page.