Nana
Nana legal

Privacy Policy

This Privacy Policy explains how Nana collects, uses, stores, and shares personal information in connection with Nana's app, website, and related services.

Last updated: February 6, 2026

1. Scope and Controller

Nana is provided by 11259164 Canada Inc. ("Nana," "we," "us," or "our"). This policy applies to personal information processed when you use Nana's mobile app, share extension, website, and related services.

2. Categories of Data We Collect

Account and authentication data

Supabase user ID, session/auth tokens, optional email, and identity-provider account attributes if you sign in with Apple or Google.

User content

Recipe names, ingredients, steps, notes, source URLs, recipe images, cookbook details, and related metadata.

Import artifacts and history

Submitted URLs, extraction IDs, extraction status, and import history records.

Subscription metadata

Entitlement/subscription state and related subscription events through RevenueCat and app store infrastructure.

Analytics and app metadata

App version/build, platform, locale, timezone, usage events, source domain, and in some import analytics events, submitted source URL values.

Support communications

Information you send to support, including your message content and contact details.

3. How Data Is Collected

  • Directly from you: when you add recipes, upload photos, sign in, subscribe, fill onboarding fields, or contact support.
  • Automatically: through app usage telemetry, sync operations, and diagnostic events.
  • From providers you choose: such as Apple or Google identity services when you use those sign-in methods.

Nana may request camera and photo-library access when you choose photo import features. Clipboard URL detection occurs on-device and paste actions are user-triggered.

4. Purposes and Legal Bases

We process personal information to:

  • provide recipe import, storage, sync, and account features;
  • authenticate users and maintain account security;
  • deliver and administer subscription functionality;
  • operate, monitor, troubleshoot, and improve Nana;
  • respond to support requests and user inquiries;
  • comply with legal obligations and enforce terms.

Where required by applicable law, our legal bases include performance of a contract, legitimate interests, compliance with legal obligations, and consent (for certain optional processing).

5. Sharing and Disclosure

We disclose personal information to service providers and processors that help operate Nana, including:

  • Supabase (auth, database sync, storage, realtime),
  • RevenueCat (subscription infrastructure),
  • Mixpanel (analytics),
  • Apple and Google sign-in ecosystems.

We may also disclose personal information where required by law, to protect rights and safety, or in connection with a merger, acquisition, financing, or asset transfer.

Nana does not sell personal information and does not share personal information for cross-context behavioral advertising as those terms are defined under California law.

6. International Transfers

Nana and its providers may process personal information in countries outside your province, state, or country of residence. When required, we use appropriate safeguards for cross-border transfers.

7. Data Retention

We retain personal information for as long as needed to provide Nana, maintain account and subscription functionality, support operations, and satisfy legal, accounting, or security obligations.

Nana stores data both locally on-device (for example, app-group SQLite, image files, and local preferences) and in cloud infrastructure used for sync and storage.

Nana does not currently provide an in-app account deletion flow. Deletion requests can be submitted by email to support.

8. Your Privacy Rights (Global + California)

Depending on where you live, you may have rights to: access, correct, delete, or port your personal information, and to object to or restrict certain processing.

California residents may also request:

  • categories and specific pieces of data we collect,
  • categories of sources and disclosure recipients,
  • deletion or correction of personal information,
  • confirmation that we do not sell personal information.

We will not discriminate against you for exercising applicable privacy rights. To make a request, contact support@nana.recipes. To help verify your request, include the account email and, if available, your Nana user ID.

9. Children's Privacy

Nana is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

10. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated version and revise the "Last updated" date above.

12. Contact

For privacy questions or rights requests, contact: support@nana.recipes.