Cuistory privacy policy
- No ads, no trackers, no selling or sharing of data.
- Each household only sees its own recipes and lists.
- You can use Jupi Studio's Cuistory server, or install Cuistory on your own server.
Two ways to use Cuistory
With Jupi Studio's server: your data is stored on this server, run by Jupi Studio, which is responsible for it under this policy. Hosting: to be completed.
With your own server (self-hosted): the app only connects to the address you enter. Jupi Studio receives none of your data; the administrator of that server is responsible for it.
Data processed (Jupi Studio server)
| Data | Why | Retention |
|---|---|---|
| Account: email, name, password (hashed) | Sign you in, recover your password | While the account exists |
| Two-factor authentication (if enabled) | Secure sign-in | While enabled |
| Recipes, photos, meal plan, shopping list, pantry, ratings | Run the app for your household | Until the household deletes them |
| First names of household members | Suggest meals based on tastes | Until deleted |
| Per-device sign-in tokens | Keep you signed in | 180 days of inactivity |
| Security log (sign-ins, IP address) | Detect fraudulent access | 1 year |
| Household activity (items added to the list, meal plan…) | Notify other members | 90 days |
| Web notification subscription (if accepted) | Send household notifications | Until turned off |
Sharing
A recipe is only visible outside your household if you share it: a public link (readable by anyone with the link, can be turned off) or community recipes (visible to households on the same server). When you import a recipe from a link, the server downloads that page to extract the recipe.
On your phone
The Android app uses: Internet (server connection), notifications (household activity, if you accept), exact alarms (cooking timers), vibration, the camera (recipe photos, only when you ask). It contains no ads, no analytics and no advertising ID.
Your rights (GDPR)
Access, rectification, export (Settings › Export), deletion of your account and household data, objection: contact@jupistudio.com. You can also lodge a complaint with the French data protection authority, the CNIL (cnil.fr).
Security
Hashed passwords, HTTPS, optional two-factor authentication, lockout after repeated failures, photos stored under random names.