FoodRef Privacy Policy

FoodRef ("we," "us") operates the website foodref.ai and the FoodRef browser extension. This page explains what data we collect, how we use it, and the choices you have.

We've tried to write this in plain language. If anything is unclear, email us at cheferee@foodref.ai.

What we collect from the website

When you visit foodref.ai, our hosting provider (Vercel) and our database provider (Supabase) automatically receive standard web request information: your IP address, browser type, the page you requested, and the time of the request. This is the same information any website receives. We use it to operate the site, debug problems, and prevent abuse.

When you use the recipe scanner at foodref.ai/scan, we send the recipe text you paste to Anthropic's API to generate a diet scorecard. We also store the recipe text and the resulting scorecard in our database so the recipe has a permanent shareable URL. We store a hashed version of your IP address (not the IP itself) for the sole purpose of rate-limiting the scanner to prevent abuse. The hashed IP cannot be reversed to identify you.

We do not use third-party analytics, advertising trackers, or social media pixels on foodref.ai.

What we collect from the browser extension

The FoodRef browser extension sends the text you select on a webpage to foodref.ai's lookup API so we can return a diet scorecard. This is the only information sent. We do not read other content on the pages you visit, the URLs of those pages, your browsing history, or any personal information from the page.

The extension stores recently looked-up text and its scorecard locally on your device (in Chrome's local extension storage) for 24 hours so repeat lookups are instant and don't require another API call. This data never leaves your computer. You can clear it at any time by removing the extension or by clearing your browser's extension storage.

We do not collect or store any user accounts, login information, or identifying data through the extension. We do not use analytics or telemetry in the extension.

How we use what we collect

We use the data described above to:

• Operate and improve the FoodRef website and extension
• Generate diet scorecards in response to your requests
• Prevent abuse of our APIs (via hashed-IP rate limiting on the website scanner)
• Debug technical problems

We do not sell your data. We do not share your data with advertisers or marketing partners.

Third parties that process data on our behalf

To run FoodRef, we use the following service providers:

• Vercel hosts the website and runs our serverless API routes.
• Supabase stores recipes, scorecards, and the hashed IPs used for rate limiting.
• Anthropic processes recipe text and selection text to generate diet scorecards.

These providers process data only as needed to provide their services to us and are bound by their own privacy practices. We don't grant them rights to use your data for their own purposes.

Affiliate links

Some pages on foodref.ai contain affiliate links to retailers such as Amazon. If you click an affiliate link and make a purchase, the retailer may pay us a commission. The retailer, not us, sees your purchase information. Affiliate links are clearly placed and do not require you to click them to use FoodRef.

Data retention

Recipes scanned via foodref.ai/scan are retained indefinitely so their shareable URLs continue to work. If you want a recipe you scanned removed, email us with the URL and we'll delete it.

Hashed IPs used for rate limiting are retained for up to 24 hours and then deleted.

Locally cached lookups in the browser extension are retained for 24 hours on your device, then automatically discarded.

Your rights

You can stop using the website or uninstall the extension at any time. Uninstalling the extension immediately deletes all locally cached data on your device.

If you live in a jurisdiction that grants you specific data rights (such as the EU under GDPR, the UK under UK GDPR, or California under CCPA), you may have the right to request access to, correction of, or deletion of personal data we hold about you. Because we don't link recipe scans to user accounts and store only hashed IPs briefly, the data we hold about any individual is minimal. To make a request, email cheferee@foodref.ai.

Children's privacy

FoodRef is not directed to children under 13 (or under 16 in the EU/UK). We don't knowingly collect data from children. If you believe a child has used FoodRef, please contact us and we'll delete any data associated with the request.

Changes to this policy

If we change this policy, we'll update the "Last updated" date at the top and, if the change is material, post a notice on the homepage for at least 30 days. Continued use of FoodRef after a change means you accept the updated policy.

Contact

Questions about this policy or about your data: cheferee@foodref.ai.