Who we are

This policy describes how the operator of andfigs.com (“&figs,” “we,” “us”) treats personal information. The service is a recipe notebook on the web and in the iOS app. If you do not agree with this policy, do not use the service.

Information we collect

We collect what you give us and what the product needs to run:

• Account data: email address, password or passkey credentials, Google sign-in identifiers if you use Google, display name, handle, and profile bio.
• Recipe content: titles, methods, ingredients, notes, comments, photos, source links, visibility settings, and related metadata.
• Payments: if you subscribe to a cook or connect payouts, Stripe processes cards and bank details. We receive account status, a customer or Connect identifier, and the price you set. We do not store full card numbers.
• Usage needed to operate the app: session tokens, device and browser type, approximate location from IP, crash and request logs, and pages you open while signed in.
• API keys you create, and the requests those keys make on your account.

How we use it

We use this information to:

• Provide your library, cook mode, profiles, and Discover.
• Authenticate you and keep the session secure.
• Import a recipe, answer in-recipe questions, and generate helper text or images when you ask.
• Process subscriptions and creator payouts through Stripe.
• Prevent abuse, debug failures, and improve the product.
• Send transactional mail such as sign-in or account notices.

We do not sell your personal information.

AI features

Import, rewrite, cover images, and the in-recipe assistant send the text or images you provide (and, for import, the page you asked us to fetch) to our AI providers so they can return a result. Do not submit secrets or other people’s private data to those features. Generated text and images are produced automatically and can be wrong. Cooking still requires your judgment.

Who we share with

We share information with processors that run the service:

• Supabase, for authentication, database, and file storage.
• Stripe, for checkout, subscriptions, and creator payouts.
• xAI, for import, assistant replies, and generated media.
• Google, if you sign in with Google, under Google’s own terms and privacy policy.

Public recipes, public profiles, and comments on public recipes are visible to anyone, including search engines. Private recipes stay in your account unless you share a link or change visibility.

We may disclose information if required by law, to protect the service or other people, or as part of a merger or sale of the project. We will give notice when we reasonably can.

Cookies

We use cookies and similar storage for sign-in, security, and basic preferences. Details are on the Cookie Policy.

How long we keep it

Account and recipe data stay until you delete them or close the account. Backups and logs are kept for a limited time for security and recovery. Stripe keeps payment records as the law requires. You can ask us to delete an account by writing to hello@andfigs.com. Some records (for example a paid invoice) may have to remain.

Your choices

You can:

• Edit your profile and recipes in the app.
• Change a recipe from public to private, or the other way around.
• Revoke API keys and passkeys in Settings.
• Disconnect Google or Stripe from the providers’ own dashboards.
• Request a copy or deletion of your personal information at hello@andfigs.com.

Depending on where you live, you may have rights to access, correct, delete, or export personal information, or to object to certain processing. We will honor those requests as the law requires. We do not sell or share personal information for cross-context advertising.

Children

The service is not directed at children under 13, and we do not knowingly collect their information. If you believe a child created an account, contact us and we will delete it. Paid features require you to be old enough to form a contract where you live, usually 18.

International users

The service is operated from the United States. If you use it from elsewhere, your information is processed in the U.S. and in the countries where our processors run. Those places may have different data-protection rules than your own.

Changes

We will update this page when the policy changes and revise the date above. Continued use after a change means you accept the new policy. If a change is material, we will try to give extra notice.

Contact

Privacy questions: hello@andfigs.com. See also the Terms of Service.