Privacy policy

Who we are

Zestnutra is operated by BEIT Solutions LLC. Contact beitsolutionsllc@gmail.com for privacy questions, access or deletion requests. This policy applies to the Zestnutra app and its support pages. Updated October 10, 2026.

Your private kitchen

Recipes, recipe photos, pantry inventory and meal calendars that you save privately are stored in the app on your device. They are not automatically uploaded to Community or synchronized across your devices. Device backups may contain app data according to your Apple backup settings. People who can unlock your device may be able to access your private kitchen.

Sign-in and account data

When you choose Google, Apple or an existing email account to sign in, Firebase Authentication processes your sign-in information; Google or Apple also processes it when you use that provider. Firebase stores an account identifier and any name or email you provide, including an Apple relay email if you choose Hide My Email. Our backend receives a Firebase session token to verify your account and stores your account identifier, service role, an account token used for purchase association, and usage counts. We do not receive your Google or Apple password. Email passwords are sent securely to Firebase Authentication. We do not store them or send them to our recipe API or OpenAI.

AI requests and your choice

Only after you allow sending recipe preferences to OpenAI does Zestnutra send the ingredients and pantry quantities you enter, cuisine choices, meal type, diet preferences, calorie range or daily target, household size, cooking-time preference and other recipe preference text through our HostGator backend to OpenAI. We do not include your name, email, account identifier, sign-in token or recipe photos in the OpenAI recipe request. Do not enter medical history, other sensitive personal information or information about another person. You can decline AI sharing and continue using the starter collection and your private kitchen.

AI retention

Recipe requests use the OpenAI API with response storage disabled. This is not a promise of zero retention: OpenAI may retain abuse-monitoring data for up to 30 days under its standard policy, with exceptions for legal or safety requirements and other processing described in its documentation. API data is not used for model training by default; provider policies and account settings apply. Our application does not maintain a history of private recipe prompts on the server. A recipe you explicitly publish is retained as Community content.

Community sharing

Publishing is a separate choice. We store your submitted recipe text, account identifier, post identifier, submission time and moderation status. Approved recipe text and an author identifier are visible to signed-in users; your email and sign-in credentials are not included in a Community post. Photos attached to your private recipes are not uploaded through the current Community feature. Reports, blocks and moderation records are stored to protect users. Pending posts are visible to their author and administrators, and administrators can review reported or removed posts.

Purchases, when offered

Apple processes in-app purchases and payment details. When subscriptions are available, our backend verifies purchase identifiers, associates an entitlement with your account and stores the original transaction identifier and usage allowance. We do not collect your card number. TestFlight purchases use Apple’s sandbox; production purchases use the App Store. Apple retains its own transaction records under its policies.

Service providers and technical information

HostGator hosts our API and stores account, Community and usage records. Firebase and your selected sign-in provider support authentication. OpenAI generates recipe text. Apple handles app distribution, device services and any purchases. Providers may process IP addresses, request metadata and operational or security logs to deliver and secure these services. The Google sign-in SDK also declares processing of account information (including a phone number where available), approximate location, user and device identifiers, other usage data and technical data for sign-in functionality or provider analytics. Firebase Authentication processes unlinked device, operating-system and SDK diagnostic information for provider analytics. These provider activities are separate from advertising tracking; our app does not request access to your contacts or precise location. Data may be processed in countries outside your own. Email support is handled through the support mailbox provider. We retain support correspondence while needed to resolve your request and meet applicable legal obligations; contact us to request its removal. These support pages do not include advertising, analytics scripts or tracking cookies; the host may log visits.

Retention and deletion

We retain account, usage and Community records while needed to provide and protect the service, until you delete your account or applicable legal obligations require retention. Removing a Community post hides it from the feed; its record may remain for moderation until account deletion. In Account settings, choose Delete account and confirm your sign-in identity. A completed deletion removes your Firebase identity, Community posts, related reports and blocks, account records and per-user quota records, and clears recipes and plans on the current device. If deletion fails or you cannot sign in, contact support. Recovery records are kept privately until cleanup is completed and unresolved cases are investigated. Local copies on other devices, downloaded copies held by others, provider logs, backups and legally required records may remain according to their applicable retention or backup lifecycle. We do not promise immediate removal from all backups. Contact us for the status of a specific request. Anonymous overall service usage totals may remain.

Your choices and rights

You may use local features without signing in, decline AI sharing, keep recipes private, remove your Community posts, sign out or request account deletion. Depending on your location, you may have rights to access, correct, export, delete or restrict processing of personal information, object to processing, withdraw consent or complain to your local data protection authority. Email support to exercise these rights; we will verify your identity without requesting your password or API key. Signing out does not erase local recipes; kitchens are stored separately for each account and for guests on this device. Earlier saved data requires an explicit import because its account ownership was not recorded. Account deletion does not cancel an Apple subscription; manage subscriptions separately in your App Store account.

Children, security and updates

Zestnutra is intended for adults, not children under 18. Contact us if you believe a child has provided personal information. We use encrypted network connections and restrict access to service records, but no system is risk-free. We do not sell personal information or use advertising tracking in the app. We will update this policy when practices change and identify the updated date; material changes will be communicated as appropriate.

Zestnutra website

The website stores private recipes, recipe photos, pantry inventory, meal calendars and grocery checklists in browser storage, separated by your signed-in account or guest kitchen. These records do not automatically sync with the iPhone app, other browsers or devices. Clearing browser data removes these records; use Export kitchen to keep a backup. People using an unlocked browser or device may access local records. Account deletion clears the current browser account’s kitchen after the server confirms erasure; other browsers, devices and exported backups must be cleared separately. The website uses Firebase session storage for authentication and the same authenticated HostGator API, quotas, AI consent and Community moderation as the app. Exported kitchen backups may contain personal recipe content and photos; store them privately. Website purchases are not offered; eligible existing Plus access is checked on the server. Contact beitsolutionsllc@gmail.com for help.