Privacy Policy

Effective October 9, 2026

This policy explains what Cookwright collects, why, who else ever sees it, and what you can ask us to do about it. It applies to cookwright.app and to the app at /app. Cookwright is operated by Indura Software, LLC, a Wyoming limited liability company. Questions go to hello@indura.us, and a person reads them.

What we collect and why

Our guiding principle is to collect only what we need to run the thing you asked for. Here is all of it.

Nothing, if you do not sign in

Signing in is optional, and the whole planner works without it. Everything you write — recipes, ingredients, what is in your kitchen, your plan, your preferences — stays in your browser's local storage on that device, and we do not have a copy. The arithmetic still runs on our server: the page sends your data in a request, the server works out the totals, macros, shortfalls and costs, and sends the answers back. That data is used to answer the request and is not written to our database. Clearing your browser's storage for this site deletes it, because your browser is the only place it exists.

Identity and access

When you sign in with Google or GitHub, we ask that provider for your email address and basic profile information (from GitHub, your primary verified email address). The email address is your account — it is what your recipes belong to and how we reply if you write to us. We do not share it with anyone, and we do not use it or transfer it for advertising. The provider's handling of the sign-in itself is covered by its own privacy policy.

We store no password, because Cookwright does not have passwords. An account exists only because a sign-in provider vouched for it, and the app refuses password sign-in outright — so there is no password of yours for us to keep, to leak, or to be asked for by anybody.

Your content

With an account, what you write is stored so that it follows you between devices: your recipes, ingredients, what is in stock, your plan, your daily macro targets, your chosen palette, and your preferences — including the foods you love, dislike, or cannot eat. Some of that last part can be health-related. We use it for one thing only, which is checking recipes against what you told us, and never for anything else.

If you read a receipt into your kitchen, we keep what you confirmed from it: the amounts added to your stock, the prices you paid and the pack sizes, recorded on your ingredients, and what each line turned out to be — the receipt's own spelling of an item and the ingredient you matched it to, or that it was not food — so the next receipt from that shop matches itself. We do not keep the photo, the PDF or the pasted text; it is used to answer that one request and then discarded.

Billing information

If you subscribe, payment is processed by Stripe. Card numbers never reach us. We send Stripe the plan and a reference to your account; Stripe collects your payment and billing details directly, under Stripe's own privacy policy, and tells us only that a subscription started, changed or ended. What we keep is Stripe's customer and subscription identifiers, your plan, and a log of every change to that plan — the date, what it changed from and to, and who made the change — because "when did this account become paid, and who moved it" has to stay answerable for as long as the account exists.

Assistant conversations

If you use the built-in assistant, your conversation is stored so that a thread continues across your devices, and we keep running totals of usage and cost for the calendar month, because the paid plan includes a monthly ceiling. Conversations are deleted after 30 days.

Technical information

Our host keeps server logs recording requests, IP addresses and timestamps. They exist to find faults and to see whether something is being abused. We also keep rate-limit counters in memory only, which are lost whenever the app restarts.

Once you sign in, a session cookie identifies your requests. It is HttpOnly, marked Secure, and limited to this site. There is also a token in the page that stops another site acting as you. That is the whole of our cookie use: no advertising cookies, no third-party cookies, no tracking pixels, and no analytics service of any kind. The app ships with no analytics vendor configured at all.

When we access or disclose your information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We have never done either. The complete list of who else ever touches it:

Who	What they get, and only when
Our hosting provider	Runs the servers and keeps the logs described above.
Stripe	Your payment details, which you give them directly, if you subscribe.
Anthropic	Your messages and the parts of your kitchen the assistant's tools touch, and any receipt you ask the app to read — only if you use those features. See below.
USDA FoodData Central	The name of a food being looked up. Nothing about you goes with it.
Instacart	The food names and quantities on your shopping list — only when you press the button that sends it.

Beyond that, we access your content only in the narrow cases every service has to admit to: when you ask us to, in order to help you with something; when it is necessary to investigate abuse, a security problem, or a breach of our terms; and when the law genuinely requires it. If we are ever compelled to hand over your information, we will tell you unless we are legally prohibited from doing so.

The nutrition cache

Macros come from USDA FoodData Central. When a food is looked up, the result is cached on our server so that the next person to look up the same food costs nothing. That cache holds food data, not people: entries are keyed by food, never by account. The type-ahead suggestions work the same way — a shared cache of food search terms, not a record of who typed what.

Sending a shopping list to Instacart

Nothing goes to Instacart unless you press the button. When you do, the food names and quantities on your list are sent so that Instacart can build a list, and you are handed a link to it on their site. From that point you are on their service, under their privacy policy and terms. Instacart is a trademark of its owner.

We take part in Instacart's affiliate program, which means we may earn a commission on orders placed from a list you send over. It costs you nothing and does not change what you pay. Attribution runs through Impact, which reports order activity to us in aggregate — it does not tell us who you are or what you bought.

Artificial intelligence

Cookwright has two AI features. Both are part of the paid plan, and both only run when you start them:

• The assistant. When you use it, your messages and the parts of your kitchen its tools read or write are sent to Anthropic's API so that it can answer.
• Reading a receipt. When you add a receipt — a photo, a PDF, or text you paste, such as an order confirmation email — it is sent to Anthropic's API together with the names of your ingredients, so that each line can be read and matched to one of them. What comes back is shown to you to check, and nothing is added to your kitchen until you confirm it. Receipts can carry things besides food, such as a store's address, a partial card number or a loyalty number; crop or leave out anything you would rather not send.

Anthropic processes that data to produce the response and, under its API terms, does not use it to train models. We do not use your content to train anything, and we never will. Nothing else in the app sends anything to a model — if you would rather none of your kitchen left our server this way, use neither feature.

Both can be wrong. Check anything that matters before you cook it, buy it, or add it to your stock.

Your rights with respect to your information

Several US state privacy laws, California's among them, give residents specific rights over their personal information. We apply these to everybody rather than keeping two sets of rules:

• Right to know and correct. You may ask what personal information we hold about you, why we have it, who we have disclosed it to, and ask us to correct anything that is wrong.
• Right to a copy. You may ask for what we hold in a portable form.
• Right to deletion. You may delete your account and everything in it yourself, immediately, from the Settings page — or ask us to do it.
• Right to a timely response. We answer within 45 days, and will tell you if we need longer.
• Non-discrimination. We will not treat you differently, or offer you a worse service, for exercising any of this.

Write to hello@indura.us. We verify a request by checking it against the email address on the account; an authorized agent may act for you if they give us written permission that we can confirm with you. In the past twelve months we have collected the categories described above — identifiers, and your own content — from you and from the sign-in provider you chose, for the purposes described above, and we have disclosed them only to the service providers listed above. We have not sold personal information or shared it for cross-context behavioral advertising, and that includes information about anyone under 16.

How we secure your data

All traffic is encrypted in transit with TLS, and the site tells browsers never to connect any other way. There are no passwords to store, so there is no password database to breach: sign-in is handled by your provider, with whatever second factor you have set up there. Access to the production system is limited to the operator.

No method of transmission or storage is completely secure, and we will not pretend otherwise. If something happens that affects your data, we will tell you what we know and when we knew it.

What happens when you delete your account

At the bottom of the Settings page there is a Delete account button. It asks once, and then it is done: your recipes, ingredients, stock, plan, preferences, targets, assistant conversations, what your receipts' lines were matched to, usage totals, access tokens and the log of plan changes are all destroyed, and the account itself with them. If you have a subscription it is canceled first — and if that cancellation fails for any reason, nothing is deleted and you are told, rather than ending up with a charge and no account.

Nothing is archived, there is no grace period, and we cannot get any of it back for you afterward. Copy out anything you want to keep before you press it. Anything your browser saved before you signed in stays on your device, because that copy was never ours.

If you would rather we did it, or you cannot sign in, email hello@indura.us from the address the account uses — or from any address, if you tell us which account you mean — and we will do it by hand and reply when it is done.

Data retention

• Your account and everything in it: until you delete it, which you can do yourself at any time.
• Assistant conversations: 30 days, and sooner if you clear them or delete the account.
• Receipts: the photo, PDF or text is not kept at all. What each line was matched to is kept until you delete the account.
• Usage and cost totals: per calendar month, for the ceiling.
• Server logs: kept by our host for a short operational period.
• Payment records: held by Stripe under their own retention rules and the law that applies to them. That is the one thing a deletion here cannot reach, because it is not ours to delete.

Location of site and data

Cookwright and the data it holds are housed in the United States. If you are outside the United States, using the service means your information is processed there.

Children's privacy

Cookwright is not intended for individuals under the age of 13, and we do not intentionally collect their personal information. If you believe a child has created an account, write to hello@indura.us and we will delete it.

Changes and questions

We may update this policy as the app changes or as regulation requires. When a change is material, we will say so in the app at least 30 days before it takes effect, and the effective date at the top of this page changes with it. Continuing to use Cookwright after that means the new version applies.

Questions about any of this, and requests under any of the rights above, go to hello@indura.us. Email reaches us fastest; the address below is here because a privacy policy should say where its operator actually is.

Indura Software, LLC
30 N Gould St #39317
Sheridan, WY 82801
USA