Privacy Policy

This Privacy Policy explains how New Age Culinary LLC (“New Age Culinary,” “OnHand,” “we,” “us,” or “our”) collects, uses, shares, stores, and protects information when you use OnHand: Cook What You Have, the OnHand mobile application, the OnHand website located at https://www.cookonhand.app, and any related services, features, recipe generation tools, subscriptions, community recipe features, and support services we provide (collectively, the “Service”).

This Privacy Policy describes our practices. It is not itself a request for consent. Where consent or permission is required, such as for microphone, camera, or notification access, we request it through the applicable device or in-app permission flow.

1. Contact Information

The Service is owned and operated by:

New Age Culinary LLC

Brendan Combs

1 Maple Lake Rd, Bloomingdale NJ 07403

United States

Email: support@cookonhand.app

If you have questions about this Privacy Policy, your information, or your privacy rights, contact us at support@cookonhand.app.

2. Summary

OnHand helps users create personalized, AI-generated recipes based on ingredients, cooking tools, preferences, restrictions, serving needs, meal type, style, and time limits. Users may save recipes locally, browse public recipes, provide feedback, and intentionally submit eligible user-created recipes and photos to the OnHand community for review.

OnHand does not currently require an account and does not request a name, email address, or phone number during ordinary app use. The Service may collect information you submit to app features, technical and usage information, anonymous device or installation identifiers, subscription information, feedback, community submissions, photos, and analytics events.

We do not sell personal information, show third-party advertising in the app, or share information for cross-app or cross-website behavioral advertising.

3. Information We Collect

A. Information You Provide in the App

Depending on which features you use, you may provide:

• onboarding answers;

• ingredients and ingredient amounts;

• restrictions, including dietary or allergy-related restrictions;

• cooking tools or appliances;

• meal type, recipe style, and preferences;

• serving count and time limit;

• selected recipe concepts;

• feedback text;

• recipes submitted to the community;

• meal photos; and

• other information you choose to enter.

Ingredients, restrictions, saved recipes, and related information may be stored locally. Relevant information is also transmitted to our backend and AI providers when needed to perform a feature you request.

Do not enter sensitive personal information that is not necessary to use the Service.

B. AI and Recipe-Generation Information

OnHand uses AI services to clean, validate, categorize, compare, and organize food and restriction information; identify possible duplicate foods; compare foods against restrictions; generate recipe ideas; search for and process recipe sources; and generate recipes.

Depending on the feature, information sent for processing may include your full ingredient list, restrictions, cooking tools, meal type, style, serving needs, time limit, selected recipe concept, source-recipe information, and other relevant generation context.

Third-party recipe-source information may include URLs, titles, snippets, ingredients, instructions, serving information, ratings or other metadata from the source where available, and structured information extracted from recipe pages.

At present, OnHand does not provide nutrition facts or calorie estimates.

C. Information Stored Locally on Your Device

The app stores certain information locally so its features can operate and remain available between launches. Depending on your use, this may include:

• ingredients and category assignments;

• restrictions;

• saved and user-created recipes;

• locally cached recipe photos;

• pending community-submission information;

• onboarding answers and progress;

• tutorial and feedback-prompt status;

• created-recipe count;

• subscription-access history; and

• app preferences and migration information.

Local information generally remains until you remove it through the app, the app replaces it during normal operation, or you delete the app. Some information submitted to our servers is separate from local data and is not deleted merely because you delete the app.

D. Community Recipe Submissions and Recipe Snapshots

When you intentionally use Add to Community, we collect a recipe snapshot and meal photo for review.

A snapshot may include:

• snapshot ID;

• anonymous device or installation ID;

• app-build information;

• creation timestamp;

• recipe ID;

• meal type, style, servings, time limit, ingredients, restrictions, and cooking tools used for generation;

• selected recipe concept;

• recipe-source and pantry information;

• prompts, responses, processing results, and error information from recipe-generation stages;

• the final generated recipe; and

• the path or identifier of the uploaded photo.

The full review snapshot is used internally and is not itself displayed publicly.

Community submissions are reviewed before publication. If approved, the resulting recipe, its source information, and the submitted photo may be added to the public recipe database and displayed to other users. The internal pending snapshot is then removed, while the approved public recipe and photo remain available.

If a submission is rejected, the pending snapshot and associated submitted photo are deleted as part of the review process.

E. Photos and Camera Access

When submitting an eligible recipe to the community, you may select an existing meal photo through Apple’s system photo picker or take a new photo using the camera.

Apple’s system photo picker can allow you to select a photo without giving OnHand unrestricted access to your entire photo library. Camera permission is requested only when you choose to take a photo.

Before upload, OnHand may resize and compress the selected image. The resulting image is uploaded to our storage provider and associated with the community submission. Approved photos may be displayed publicly with community recipes.

Do not upload photos containing people, faces, private information, sensitive information, or content you do not own or have permission to submit.

F. Feedback and App Store Ratings

When you submit feedback through an OnHand feedback form, we collect:

• the feedback text;

• an anonymous device or installation ID;

• the number of recipes created at that time;

• a feedback-source type; and

• a server-generated submission timestamp.

Feedback submissions do not include a recipe snapshot, recipe ID, or full recipe content.

OnHand may separately display Apple’s native App Store rating prompt or open the App Store rating interface. Ratings or reviews submitted through Apple are handled by Apple under Apple’s own terms and privacy practices. OnHand does not receive the private contents of Apple’s rating interface through its feedback database.

G. Microphone, Audio, and Transcription

OnHand allows you to speak ingredient information. Microphone permission is requested when you first attempt to use that feature.

When used, the app temporarily records audio and sends it through our Supabase backend to OpenRouter and participating AI model providers for transcription and ingredient extraction. The extracted ingredient information is returned to the app for your review.

OnHand does not intentionally store the raw recording or resulting transcript in its application database. The app deletes its temporary local audio file after processing succeeds or fails.

OpenRouter and the applicable model providers may process or retain requests, audio, transcripts, outputs, and technical information according to their configurations, agreements, security requirements, and privacy practices. Different providers may have different retention and model-improvement practices.

Do not use the microphone feature to provide sensitive, confidential, or unrelated personal information.

H. Anonymous Identifiers and Device Information

OnHand generates a persistent random installation identifier and stores it on the device. This identifier may be included with feedback and community submissions so we can operate those features, investigate problems, prevent abuse, and associate related submissions with the same installation.

The identifier does not contain your name, email address, or phone number, but it can distinguish your installation from others and may therefore be considered personal information under applicable law.

Mixpanel, Adapty, Apple, Supabase, and other service providers may process their own app-instance, device, transaction, or event identifiers together with technical information such as IP address, device model, operating system, language, app version, and timestamps.

I. Analytics and Usage Information

We use Mixpanel, Adapty, Apple tools, Supabase logs, and related systems to understand app usage, manage subscriptions, and improve reliability.

Analytics may include:

• app launches, sessions, and product interactions;

• onboarding screen progress;

• selected onboarding answers;

• button taps;

• paywall views and selected subscription options;

• displayed price and product identifiers;

• purchase and restore attempts, outcomes, and error information;

• recipe-creation events;

• community-submission and feedback actions;

• app version and build;

• device model and operating-system information;

• coarse location inferred from IP address;

• anonymous or app-instance identifiers; and

• timestamps and other technical event properties.

We do not intentionally send full ingredient lists, full restriction lists, complete generated recipes, or uploaded meal photos to Mixpanel as custom analytics properties.

J. Subscription and Purchase Information

Payments are processed by Apple. We do not receive or store your full payment-card information.

Apple, StoreKit, App Store Connect, and Adapty may process information including:

• subscription product ID and displayed price;

• trial eligibility and trial status;

• purchase, expiration, renewal, cancellation, and restoration status;

• transaction and app-instance identifiers;

• entitlement status;

• purchase and restore events; and

• related device, usage, and technical information.

We use this information to provide and restore subscription access, determine whether subscription-gated features are available, schedule an eligible local trial reminder, troubleshoot purchases, and analyze subscription performance.

K. Notifications

OnHand requests notification permission on the final pre-paywall onboarding screen. If permission is granted and an eligible free trial is started, the app may schedule a local notification approximately one day before the trial ends.

This reminder is scheduled on the device. OnHand does not currently operate a remote push-notification service or use notifications for advertising.

You can change notification permission at any time in iOS Settings.

L. Support Communications

If you contact us at support@cookonhand.app, we may collect your email address and any information you choose to include in your message. We use this information to respond to your request, provide support, investigate issues, improve the Service, and maintain business records.

M. Website Information

The OnHand website is primarily used to provide app information, App Store links, legal pages, and support contact information. We do not currently use separate website analytics, advertising pixels, email signup forms, or contact forms.

Our website provider, hosting provider, domain provider, or other technical service providers may process basic technical information such as IP address, browser type, device type, pages visited, timestamps, and security logs to host, secure, and deliver the website.

4. How We Use Information

We may use information for the following purposes:

• to provide, operate, and maintain the Service;

• to generate personalized recipes;

• to process ingredients, restrictions, tools, preferences, serving needs, and time limits;

• to record, transmit, transcribe, and process spoken ingredient information;

• to save recipes locally on your device;

• to process community recipe submissions;

• to review, approve, reject, edit, remove, and publish community recipes;

• to display approved recipes and photos in the app;

• to process feedback and understand recipe quality and user experience;

• to process onboarding responses and progress;

• to request notification permission and schedule an eligible local trial-ending reminder;

• to provide subscriptions, free trials, purchase restoration, and entitlement access;

• to analyze onboarding, paywall performance, app sessions, and app usage;

• to improve recipe quality, app design, user experience, and app performance;

• to troubleshoot bugs, crashes, errors, and technical issues;

• to detect, prevent, and respond to abuse, misuse, fraud, security issues, or excessive usage;

• to respond to support requests;

• to comply with legal obligations;

• to enforce our Terms of Service; and

• to protect the rights, safety, and security of OnHand, our users, and others.

5. How We Share Information

We may share information with the following categories of recipients:

A. Service Providers

We may disclose information to service providers that process information on our behalf or help us operate, deliver, analyze, secure, and support the Service. The information disclosed depends on which features you use and may include app inputs, technical information, anonymous identifiers, subscription information, analytics events, audio, photos, feedback, recipe-generation information, and community submissions.

These providers may include:

• Supabase for database hosting, file storage, backend functions, and related infrastructure;

• Serper for recipe-source search;

• OpenRouter and participating AI model providers, including OpenAI and Google models, for transcription, ingredient processing, restriction processing, recipe generation, and related AI features;

• Mixpanel for product analytics;

• Adapty for subscription management, entitlement processing, subscription analytics, and remote onboarding and paywall configuration;

• Apple for App Store distribution, In-App Purchase, purchase restoration, App Store ratings, system camera and photo-picker features, and local notifications;

• Google’s favicon service for retrieving icons associated with recipe-source websites; and

• website-hosting, support, security, communications, and other technical infrastructure providers.

These providers may process information according to our instructions, our agreements with them, their applicable terms and privacy policies, and legal requirements.

B. Public Community Recipe Features

When you intentionally submit a recipe through Add to Community and it is approved, we may publicly display the approved recipe, its source information, and the submitted photo.

We do not publicly display the full internal review snapshot, anonymous device identifier, complete generation prompts, feedback submissions, or unpublished restriction and ingredient data merely because a recipe was approved.

C. Legal, Safety, and Compliance

We may disclose information if we believe it is reasonably necessary to:

• comply with law, legal process, or government requests;

• enforce our Terms of Service;

• detect, prevent, or address fraud, abuse, security, or technical issues;

• protect the rights, property, safety, or security of OnHand, users, or others; or

• defend against legal claims.

D. Business Transfers

If New Age Culinary LLC is involved in a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar transaction, information may be transferred as part of that transaction, subject to appropriate protections where required by law.

6. Third-Party Services

The Service relies on third-party services, software development kits, APIs, AI models, and infrastructure providers. These providers may process information according to their own terms, privacy policies, security practices, and our agreements with them.

Third-party services used by OnHand may include:

• Apple, including the App Store, StoreKit, In-App Purchase, App Store Connect, purchase restoration, App Store ratings, system camera and photo-picker features, and local notifications;

• Supabase for database hosting, file storage, backend functions, API requests, audio transmission, community submissions, feedback storage, and related infrastructure;

• Serper for searching for recipe sources;

• OpenRouter for routing audio, transcripts, ingredient information, restrictions, recipe inputs, prompts, and related requests to participating AI model providers;

• OpenAI models for speech-to-text transcription and other AI processing used by applicable features;

• Google AI models for ingredient processing, restriction processing, recipe generation, and other AI-related processing;

• Mixpanel for product analytics, including app usage, onboarding, paywall, purchase, and feature-interaction events;

• Adapty for subscription management, entitlement processing, purchase and subscription analytics, and remote onboarding and paywall configuration;

• Google’s favicon service for retrieving icons associated with recipe-source websites; and

• website-hosting, support, security, communications, and other technical infrastructure providers.

When the app requests a source-site icon from Google’s favicon service, Google may receive the requested domain name together with technical request information such as an IP address, device or network information, and a timestamp.

AI model providers may have different practices concerning request retention, logging, security monitoring, abuse prevention, and use of inputs or outputs. Their handling of information is governed by their applicable terms, privacy policies, provider settings, and our agreements with them.

We encourage you to review the privacy policies of the third-party services that process information in connection with the Service.

7. Payments

All subscription payments are processed by Apple through Apple In-App Purchase. We do not collect or store your full payment card information.

Apple may collect and process payment, billing, tax, transaction, refund, and subscription information according to Apple’s own terms and privacy policy. Adapty may help us manage subscription entitlements and related subscription analytics.

Refunds and cancellations are handled through Apple.

8. Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this Policy, including providing the Service, reviewing submissions, operating community features, responding to requests, improving and securing the Service, maintaining business records, and complying with legal obligations.

Retention depends on the information involved:

• Local app data generally remains until you remove it, delete the app, or the app removes or replaces it during normal operation.

• Temporary local microphone recordings are deleted after processing succeeds or fails.

• Pending community snapshots and photos are retained while awaiting review.

• If a community submission is rejected, its pending snapshot and associated photo are deleted through the review process.

• If a submission is approved, the pending snapshot is removed, while the approved public recipe and photo may remain until removed by us or in response to a valid request.

• Feedback may be retained for product improvement, support, safety, historical analysis, and business-record purposes.

• Analytics and subscription information is retained according to our provider configurations, contractual requirements, and legitimate operational needs.

• Support communications may be retained as ordinary support and business records.

• Service providers may retain logs, requests, outputs, transaction records, or security information according to their own agreements and legal obligations.

When you submit a valid deletion request, we will delete or de-identify information where reasonably possible and legally required.

9. Your Choices and Privacy Rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of certain personal information. You may also have the right to withdraw consent where processing is based on consent.

To make a privacy request, contact us at support@cookonhand.app.

Because OnHand does not currently require accounts, we may need information from you to help identify the data connected to your request, such as details about your recipe submission, approximate submission date, support email, or other identifying context.

If you request deletion of a community submission, approved recipe, uploaded photo, feedback, or support communication, we will work with you to delete it where reasonably possible and legally required.

Deleting the app may remove local data from your device, but it does not automatically delete information already submitted to our servers or cancel an active Apple subscription.

10. App Permissions

OnHand may request:

• Microphone: Requested when you use the voice ingredient feature. Audio is sent through our backend and AI providers for transcription and ingredient extraction.

• Camera: Requested when you choose to take a new meal photo for a community submission.

• Photo Picker: Used when you select an existing photo. Apple’s system picker may allow selection without granting unrestricted photo-library access.

• Notifications: Requested near the end of onboarding and used to schedule an eligible local free-trial reminder.

Permissions can be changed through iOS Settings. Disabling a permission may prevent the related feature from operating.

OnHand does not intentionally request access to contacts, calendars, HealthKit, precise location, or unrelated device files.

11. Location Information

OnHand does not intentionally collect precise location information.

However, our service providers, including analytics, infrastructure, subscription, app distribution, website hosting, or security providers, may infer approximate location such as country, region, or city from IP address or other technical information. This may be used for analytics, security, fraud prevention, localization, tax, compliance, or service operation.

12. Tracking, Advertising, and Sale of Data

We do not:

• show third-party advertisements in the app;

• sell personal information;

• share personal information for cross-context behavioral advertising; or

• use collected information to track users across apps or websites owned by other companies for advertising or advertising measurement.

We do not currently display Apple’s App Tracking Transparency prompt because the app is not intended to engage in tracking as Apple defines that term.

We use analytics and subscription-management providers for product analytics, app operation, and subscription management. This use is not intended for third-party advertising or cross-app tracking.

If these practices change, we will update this Policy and request any legally required permission.

13. Children’s Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

If you are under 13, do not use the Service or submit personal information to us. If a parent or guardian believes that a child under 13 has provided personal information to OnHand, please contact us at support@cookonhand.app, and we will take reasonable steps to delete the information where required by law.

If you are under the age of majority in your jurisdiction, you should use the Service only with permission and supervision from a parent or legal guardian.

14. International Users

The Service may be available in multiple countries and regions through the App Store. We are based in the United States, and information may be processed in the United States and other countries where our service providers operate.

These countries may have data protection laws that differ from the laws in your country. Where required by law, we use appropriate safeguards for international transfers of personal information.

15. Legal Bases for Processing for Users in the EEA, UK, or Similar Regions

If you are located in a region that requires a legal basis for processing personal information, we may process information based on one or more of the following legal bases:

• Contract: to provide the Service, subscriptions, recipe generation, community submissions, and support.

• Legitimate interests: to improve the Service, analyze usage, prevent abuse, debug issues, protect security, and operate our business.

• Consent: where you grant app permissions, submit optional information, upload photos, or where consent is otherwise required.

• Legal obligations: to comply with applicable law, legal process, tax, accounting, consumer protection, or regulatory requirements.

16. U.S. State Privacy Rights and California Privacy Notice

Depending on your state of residence, you may have rights under applicable U.S. state privacy laws. These rights may include the right to request access to personal information, deletion of personal information, correction of personal information, portability of personal information, and information about certain data sharing practices.

We do not sell personal information and do not share personal information for cross-context behavioral advertising as those terms are commonly used under U.S. state privacy laws.

To exercise privacy rights, contact us at support@cookonhand.app. We may need to verify your request before responding.

California Privacy Notice

This California Privacy Notice applies to California residents and supplements the rest of this Privacy Policy. To the extent the California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies to us, California residents may have the rights described below.

Categories of Personal Information We Collect

Depending on how you use the Service, we may collect the following categories of personal information:

• identifiers, such as anonymous device or installation identifiers, transaction identifiers, support email addresses if you contact us, and identifiers used by our service providers;

• internet, electronic network, device, and usage information, such as app sessions, button taps, paywall views, recipe creation actions, device model, operating system, approximate location inferred from IP address, timestamps, and analytics events;

• commercial information, such as subscription status, product ID, trial status, renewal status, cancellation status, entitlement status, and related purchase or subscription events;

• audio, visual, or similar information, including temporary voice recordings and transcripts when the voice ingredient feature is used and meal photos submitted for community review;

• user-generated content and app inputs, including ingredients, restrictions, preferences, onboarding answers, recipe concepts, generated recipes, community submissions, uploaded photos, and feedback; and

• inferences or app-related preferences, such as recipe preferences, onboarding choices, usage patterns, and product interaction signals.

We do not intentionally collect sensitive personal information for the purpose of inferring characteristics about you. However, information you choose to provide, such as dietary restrictions, allergy-related restrictions, health-related food needs, religious food restrictions, or uploaded photos, may be sensitive depending on the context. You should avoid submitting sensitive information unless it is necessary for your use of the Service.

Sources of Personal Information

We collect personal information from you, from your device, from your use of the Service, and from service providers that help us operate the Service, including app distribution, subscription management, analytics, database, storage, AI, search, audio transcription, and infrastructure providers.

Purposes for Collection, Use, and Disclosure

We collect, use, and disclose personal information for the purposes described in this Privacy Policy, including to provide, operate, maintain, personalize, analyze, improve, secure, and support the Service; generate recipes; process subscriptions; restore purchases; review community submissions; respond to support requests; detect abuse or technical issues; comply with legal obligations; and enforce our Terms of Service.

Categories of Third Parties We Disclose Information To

We may disclose personal information to service providers and third-party platforms that help us operate the Service, including database and storage providers, AI providers, audio transcription providers, recipe source search providers, analytics providers, subscription management providers, Apple services, website hosting providers, security providers, and other technical infrastructure providers.

We may also disclose information if required for legal, safety, compliance, business transfer, or rights-protection purposes, as described in this Privacy Policy.

California Privacy Rights

To the extent required by applicable California law, California residents may have the right to request that we:

• disclose the categories of personal information we collected about them;

• disclose the specific pieces of personal information we collected about them;

• delete personal information we collected from them, subject to legal exceptions;

• correct inaccurate personal information;

• provide information about how we collect, use, disclose, sell, or share personal information;

• opt out of the sale or sharing of personal information, if applicable;

• limit the use or disclosure of sensitive personal information, if applicable; and

• not discriminate against them for exercising their privacy rights.

No Sale or Sharing of Personal Information

We do not sell personal information for money. We also do not share personal information with third parties for cross-context behavioral advertising. If our practices change in the future in a way that constitutes a “sale” or “sharing” of personal information under California law, we will update this Privacy Policy and provide any required opt-out rights.

How to Submit a California Privacy Request

California residents may submit privacy requests by contacting us at:

support@cookonhand.app

We may need to verify your request before responding. Verification may require information reasonably necessary to confirm that you are the person associated with the request, such as details about your recipe submission, approximate submission date, support email, anonymous device or installation identifier if available, or other identifying context. We will use verification information only for that purpose.

We will confirm receipt of applicable requests within 10 business days and respond within 45 calendar days. If reasonably necessary, we may extend the response period by an additional 45 calendar days and will notify you of the extension. For applicable opt-out or limitation requests, we will comply as soon as reasonably possible and within the time required by law.

Authorized Agents

You may use an authorized agent to submit a request on your behalf where permitted by law. We may require proof that the agent is authorized to act for you and may also require you to verify your identity directly with us.

17. Security

We use reasonable administrative, technical, and organizational measures designed to protect information. However, no method of transmission, storage, or processing is completely secure. We cannot guarantee absolute security.

You should avoid submitting sensitive personal information, private information, photos of people, or information you do not want processed by the Service.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make changes, we may notify you by posting the updated Privacy Policy in the app, on our website, or by other reasonable means.

The updated Privacy Policy will become effective on the date shown at the top. If we make material changes, we will provide notice where required by law. The version posted in the app or on our website will be the current version.

19. Contact

If you have questions, requests, or concerns about this Privacy Policy or your information, contact us at:

New Age Culinary LLC

Brendan Combs

1 Maple Lake Rd, Bloomingdale NJ 07403

United States

Email: support@cookonhand.app