Privacy Policy

Creel is a recipe notebook: you share a recipe video with the app and get the recipe written out — ingredients, steps and timings. This policy explains what data Creel collects when you use the app (iOS and Android) and the website usecreel.app, why, how long we keep it, and how you stay in control. Questions or requests: write to contato@usecreel.app.

• Account. Your email address (or phone number, if you sign in through WhatsApp), an optional display name and @handle, and a profile picture if you choose one. If you sign in with Google or Apple, we receive only the email and name you authorise. Passwords are never stored in plain text.
• Content you create. The recipes in your notebook, collections, book ratings and comments, the text you type or dictate into “What's in the kitchen?”, menus and shopping lists. Everything is private by default; only what you explicitly publish becomes public.
• Videos. When you share a link (Instagram, TikTok, YouTube), our server downloads the video only for as long as it takes to read the recipe. It is sent to Google's Gemini API for transcription and extraction, deleted on Google's side as soon as that call finishes, and deleted from our servers minutes after processing. What remains is the recipe as text, a few-second clip of each step and one frame of the finished dish, which are part of the recipe in your notebook. The one exception is video a creator uploads through the Studio, which is kept for as long as the recipe exists so the creator can re-trim its clips.
• Purchases. Subscriptions and credit packs bought in the app go through the App Store or Google Play, with RevenueCat processing the receipts. Books and drops bought on the website go through a payment processor (Pix or card). We never see your full card number — we keep only what was bought, when, and a transaction reference.
• Product usage. Events such as app opens, screens viewed, extractions requested and completed, Cook Mode sessions and pages visited on the site, with an approximate country or region. This is measured by our own server, with no third-party SDK. We do not store your IP address or the content of searches — only the length of the text.
• Device. An identifier generated by the app itself (not the IDFA or advertising ID) and, if you allow notifications, a token used to tell you a recipe is ready. Dictated speech is transcribed on your device; only the text reaches us.

To make Creel work: extract recipes, keep your notebook, sync across devices, deliver what you bought and show other users' public collections. To keep the service safe and prevent abuse, such as per-account usage limits. And to understand what is being used and improve the product, in aggregate. We do not sell your data, show ads, or track you across other companies' apps or websites.

Only the services needed to run Creel, each receiving the minimum:

• Google (Gemini API) — receives the video or link to transcribe and extract the recipe; the file is deleted when the call ends.
• Apple, Google Play and RevenueCat — in-app purchases and receipt validation; an anonymous user identifier is attached to your purchase.
• Google and Apple (sign-in) — if you choose to sign in with one of those accounts.
• Meta (WhatsApp) — only to deliver the sign-in code, if you sign in through WhatsApp.
• Fly.io and Vercel — hosting for the server and the website. Data is stored on servers in Canada and the United States, which is an international transfer under Brazil's LGPD, made under those providers' contractual safeguards.
• Payment processors — for purchases on the website.

We may also share data where the law requires it or to protect the rights, safety and integrity of the service.

Your account and notebook stay for as long as the account exists. Videos from links are deleted minutes after processing. Purchase records are kept for as long as tax and accounting rules require. Usage events are kept in aggregate. When you delete your account, we erase recipes, collections, followers, handle, picture, credits and the account itself; only what the law obliges us to keep survives.

You can access, correct, export and delete your data, and withdraw consent, at any time. In the app, most content can be edited or deleted directly. To delete your whole account, or for any other request under Brazil's General Data Protection Law (LGPD, Law 13.709/2018) — confirmation of processing, portability, information about sharing, objection — write to contato@usecreel.app from the account's email address. We answer within 15 days. You may also complain to the Brazilian data protection authority (ANPD) or to your local authority.

Creel is not directed at children under 13 and we do not knowingly collect data from them. If you believe a child has created an account, let us know and we will remove it.

Data travels encrypted (HTTPS) and lives on servers with access restricted to the team. No system is infallible; if an incident affects your data, we will notify you and the authorities as the law requires.

When this policy changes in a meaningful way, we update the date at the top and let you know in the app or by email. The version in force is always the one published at usecreel.app/privacy.

Creel (UseCreel) · contato@usecreel.app