Email address (required for account creation). Authentication tokens (JWT access + refresh) issued by our server. Recipe data you create (recipe names, ingredients, costs, nutrition values). OAuth2 user identifiers (Google sub claim, Facebook user ID) if you sign in via OAuth2.
We do not use analytics SDKs or telemetry. There are no third-party advertising or tracking services in the app. We do not collect location, contacts, photos, device identifiers, or advertising IDs.
Recipe data persists until you delete your account. Refresh tokens rotate on use and expire per server policy.
Email support@gastrocost.com to request deletion of your account and all associated recipe data. We complete deletion within 30 days of receiving the request.