Privacy Policy

Who we are

Broth is operated by MELANCIA METAFISICA UNIPESSOAL LDA, a company registered in Portugal (NIF 519312279). For data protection matters, contact us at privacy@getbroth.app.

What we collect

We collect the minimum data needed to provide the service:

• Account information: Email address and name provided during sign-up (via Clerk authentication), or information from your Google account if you use Google sign-in.
• Recipe data: URLs you submit and the extracted recipe content stored in your personal cookbook, including ingredients, steps, images, notes, tags, and ratings.
• Meal planning data: Meal plans, shopping lists, and cooking session history.
• Usage data: Analytics events (page views, feature usage) via PostHog (EU-hosted) and Google Analytics.
• Device data: Device type, operating system, app version, unique device identifiers, and IP address.
• Error and performance data: Crash reports and performance metrics via Sentry to diagnose bugs and improve stability.
• AI usage data: We log AI processing requests tied to your account (endpoint, model used, token counts) for cost management and rate limiting.
• Waitlist: If you join the waitlist, we store your email address, signup source, and marketing attribution data (UTM parameters).
• Beta application: If you apply for the beta via our application form (hosted by Tally), we collect your name, email, phone type, cooking habits, and responses to open-ended questions.
• Beta feedback: If you submit in-app feedback during the beta, we collect your survey responses including satisfaction scores, feature preferences, and any comments you provide.

We do not collect: location data, contacts, photos (beyond recipe images you explicitly share), health data, financial data, or any special category data under GDPR.

How we use your data

• To provide and improve the Broth service.
• To process recipe content using AI (extracting ingredients, steps, and timings from URLs and social media posts you share with us).
• To generate cooking timelines and ingredient substitution suggestions.
• To send you transactional and product update emails.
• To analyze usage patterns and fix bugs.
• To deliver local notifications on your device for cooking timers and reminders (with your permission).
• To evaluate beta applications and communicate with applicants.

We do not sell your data. We do not share your data with third parties for advertising purposes. We do not use your data for behavioural advertising.

AI features and automated processing

Broth uses AI (via Anthropic's Claude) to extract recipe content, generate cooking timelines, and suggest ingredient substitutions. These features operate solely on content and sources chosen by you in order to extract and organise recipe information. AI processing is performed at your direction when you submit a URL or request a substitution.

No personal data (name, email, account details) is included in AI requests — only recipe content (URLs, ingredient lists, cooking steps). The use of AI features does not involve automated decision-making or profiling that produces legal or similarly significant effects on you.

Legal basis for processing

Under GDPR, we process your data based on:

• Contract performance: Account data, recipe data, and meal planning data are necessary to provide the service you signed up for.
• Consent: Waitlist signup, beta application form, marketing emails, and push notifications are based on your explicit consent. You can withdraw consent at any time.
• Legitimate interest: Analytics and error tracking to improve the service and fix bugs, and to protect against fraud and abuse.

Email communications

When you join the waitlist or apply for the beta, you will receive a series of emails about Broth (product updates, feature highlights, and beta status). Every email includes an unsubscribe link. You can opt out at any time by clicking unsubscribe or emailing privacy@getbroth.app.

Third-party services

We use the following services to operate Broth:

• Clerk — Authentication. Processes your email and login credentials. Privacy Policy
• Convex — Database. Stores your recipes, meal plans, and account data (US-hosted). Privacy Policy
• PostHog (EU) — Analytics. Collects usage events (feature usage, page views). No session recordings are collected. Privacy Policy
• Google Analytics — Web analytics. Collects page view and traffic data. Privacy Policy
• Anthropic — AI processing. Recipe URLs and content are sent to Claude for extraction and analysis. No personal data is included in AI requests. Privacy Policy
• Resend — Email delivery. Processes your email address to send transactional and marketing emails. Privacy Policy
• Sentry — Error tracking. Collects crash reports and performance data. Privacy Policy
• Expo — App framework and local notifications. Cooking timer alerts and reminders are scheduled locally on your device. No push notification tokens are sent to external servers. Privacy Policy
• Tally — Form hosting. Processes beta application form submissions. Privacy Policy
• RevenueCat — Subscription management. Processes payment and subscription data via Apple App Store and Google Play. Privacy Policy

International data transfers

Your data is stored on Convex (US-hosted) and Clerk (US-hosted). Analytics data is processed by PostHog in the EU and Google Analytics (US-hosted). AI processing is performed by Anthropic (US-hosted). All connections use HTTPS encryption in transit.

Where data is transferred outside the European Economic Area (EEA), we rely on appropriate safeguards including the EU-US Data Privacy Framework and Standard Contractual Clauses (SCCs) as adopted by the European Commission. Each third-party provider listed above maintains their own data protection commitments as described in their privacy policies.

Cookies

The Broth website (getbroth.app) uses cookies for:

• Essential cookies: Authentication session management (Clerk). These are necessary for the service to function.
• Analytics cookies: Google Analytics and PostHog use cookies to understand how visitors use the website. You can opt out of analytics cookies via the cookie consent banner.

The Broth mobile app does not use cookies.

Data retention

• Account data: Retained while your account is active. Deleted within 30 days of account deletion request.
• Recipe and meal data: Retained while your account is active. Deleted with your account.
• Waitlist data: Retained until you unsubscribe or request deletion.
• Beta application data: Retained for the duration of the beta program and deleted within 90 days of program completion.
• Analytics data: Anonymized and retained for up to 12 months.
• Error and crash data: Retained for up to 90 days.

Children's privacy

Broth is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe a child under 16 has provided us with personal data, please contact us at privacy@getbroth.app and we will delete it promptly.

Your rights

Under GDPR, you have the right to:

• Access a copy of your personal data.
• Rectify inaccurate data.
• Request deletion of your data.
• Restrict or object to certain processing.
• Data portability (receive your data in a structured format).
• Withdraw consent at any time.
• Lodge a complaint with the Portuguese data protection authority (CNPD — cnpd.pt).

To exercise these rights, email privacy@getbroth.app. We will respond within 30 days.

California privacy rights

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights regarding your personal information. We do not sell personal information. We do not share personal information for cross-context behavioural advertising. You may request access to or deletion of your data by emailing privacy@getbroth.app.

Changes

We may update this policy. Significant changes will be communicated via email or in-app notification. The "Last updated" date at the top of this page will be revised accordingly.

Contact

MELANCIA METAFISICA UNIPESSOAL LDA
NIF 519312279
Portugal

Email: privacy@getbroth.app