Privacy Policy
Last Updated: December 18, 2025
Without a Word, LLC (“Without a Word,” “Company,” “we,” “us,” or “our”) operates the Without a Word application
and related services (collectively, the “Service”). This Privacy Policy explains how we collect, use, disclose,
and safeguard your information when you use the Service.
By accessing or using the Service, you acknowledge that you have read and understand this Privacy Policy and
agree to our collection and use of information as described herein.
1. Information We Collect
1.1 Information You Provide
Account Information
- Email address (required)
- Username (optional)
- Password (securely hashed; not readable by us)
- Profile picture (optional)
User Content
- Recipes you import or create
- Ingredients and instructions
- Recipe images
- Tags, notes, and emotional notes
- Collections you create
Preferences
- Dietary preferences
- Cooking skill level
- Preferred cooking time
- Default servings
- Language and audio preferences
Meal Planning Data
- Weekly meal plans
- Day-specific notes, moods, or energy indicators
Shopping Lists
- Shopping list items
- Prices and store information
- Zone assignments
- Recurring items and templates
1.2 Information Collected Automatically
Usage Data
- Pages and features accessed
- Time spent using the Service
- Actions taken within the Service
- Error and crash diagnostics
Device and Log Information
- Device type, operating system, browser type
- Screen resolution
- IP address and access timestamps
- Referring URLs
1.3 Information from Third Parties
Recipe Imports
When you import recipes from third-party websites, we access publicly available information from those pages,
such as recipe titles, ingredients, instructions, images, and source attribution.
Barcode Scanning
When you scan product barcodes, we query the Open Food Facts database. We do not retain barcode scan history
beyond what is necessary to add items to your shopping lists.
2. How We Use Your Information
2.1 Providing the Service
- Create and manage user accounts
- Store and display User Content
- Generate meal plans and shopping lists
- Synchronize data across devices
2.2 Improving the Service
- Analyze feature usage
- Diagnose and fix bugs
- Develop new features
- Optimize performance and reliability
2.3 Personalization
- Tailor content and recommendations
- Remember user preferences and settings
2.4 Communications
- Send essential service and account notifications
- Respond to inquiries and provide customer support
2.5 Security and Compliance
- Protect against unauthorized access
- Detect fraud and abuse
- Enforce our Terms of Service
3. Data Storage and Security
3.1 Storage Provider
We use Supabase as our primary cloud database and authentication provider. Supabase employs industry-standard
security practices, including encryption and access controls.
3.2 Data Location
Your data is primarily stored and processed in data centers located in the United States.
3.3 Data Retention
We retain personal data for as long as your account remains active. Upon account deletion:
- User Content is deleted within 30 days
- Backups are purged within 90 days
- Aggregated or anonymized analytics may be retained
3.4 Security Measures
- Encryption in transit using HTTPS/TLS
- Encryption at rest for sensitive data
- Secure password hashing
- Role-based and row-level access controls
4. How We Share Information
4.1 No Sale of Personal Data
We do not sell, rent, or trade your personal information.
4.2 Service Providers
| Provider | Purpose | Data Shared |
|---|---|---|
| Supabase | Authentication and data storage | User account and content data |
| AI Services | Recipe parsing | Recipe URLs and text, not linked to user identity |
| Open Food Facts | Barcode lookup | Product barcode values only |
4.3 Legal Obligations
We may disclose information where required by law or to protect the rights, safety, or property of the Company,
our users, or others.
4.4 Business Transfers
In the event of a merger, acquisition, or asset sale, personal data may be transferred as part of that transaction,
subject to applicable law.
5. Your Rights and Choices
5.1 Access and Updates
You may access and update your account information, preferences, and User Content through the Service settings.
5.2 Deletion
You may delete individual items or your entire account at any time through account settings.
Account deletion is permanent and cannot be undone.
5.3 Data Export
Certain data may be exported directly through the Service. For a complete data export request,
contact privacy@withoutaword.app.
5.4 Opt-Out Options
- Opt out of non-essential emails using unsubscribe links
- Request analytics opt-out by contacting us
6. Children’s Privacy
The Service is not intended for children under the age of 13. We do not knowingly collect personal information
from children under 13. If such information is discovered, we will delete it promptly.
7. International Data Transfers
If you access the Service from outside the United States, your information may be transferred to and processed
in the United States. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.
8. California Privacy Rights
California residents have rights under applicable privacy laws, including rights to access, delete, and
receive information about personal data practices. Requests may be submitted to privacy@withoutaword.app.
9. European Privacy Rights
Users in the European Economic Area have rights under the GDPR, including access, rectification, erasure,
restriction, portability, objection, and withdrawal of consent.
Legal bases for processing include contract performance, legitimate interests, and consent where applicable.
10. Cookies and Tracking
We use essential, functional, and limited analytics cookies to operate and improve the Service.
You may control cookies through your browser settings.
11. Third-Party Links
The Service may contain links to third-party websites. We are not responsible for their privacy practices
and encourage you to review their policies.
12. Changes to This Privacy Policy
We may update this Privacy Policy periodically. Material changes will be reflected by an updated “Last Updated”
date and, where appropriate, additional notice.
13. Contact Information
Privacy inquiries may be directed to:
Email: privacy@withoutaword.app
Data Protection Officer: dpo@withoutaword.app
Without a Word, LLC
United States
Your privacy matters to us. We are committed to protecting your personal information and being transparent
about our data practices.