Privacy Policy

Axxa Media, LLC ("we," "us," or "our") is dedicated to protecting the privacy, culinary heritage, and personal information of everyone who uses TasteScribe AI. This Privacy Policy details how we collect, process, store, share, and protect your information when you interact with the TasteScribe AI mobile application and associated online services.

Data Controller:
Axxa Media, LLC
Mailing Address: 5005 W. Laurel St, Suite 100, Tampa, Florida 33607 (Attn: Legal Department) [Registered Agent Office placeholder: pending formal counsel filing]
Designated Privacy Officer: [email protected]

We collect information necessary to provide, personalize, and improve TasteScribe AI. The categories of data we process include:

1. Authentication & Account Information: To provide account registration, secure sign-in, identity verification, and account management functionality, we may use third-party authentication and identity management service providers. These providers may process account identifiers, contact information (such as email address), authentication-related data (including session tokens, credential metadata, or third-party sign-in tokens such as Apple ID or Google Sign-In), and technical information necessary to provide and secure the Services. Our use of these providers is subject to applicable privacy laws and our data protection practices. Axxa Media does not store raw user passwords on our application servers.

1. Uploaded Photographs & Manuscript Imagery: Photographs of handwritten recipe cards, printed cookbook pages, culinary manuscripts, and dishes captured via camera or camera roll. These images are transmitted securely to our backend server for optical character recognition (OCR) and recipe structuring.

1. Culinary Content & Profile Data: Personal Recipe Vault entries, ingredient lists, step-by-step directions, prep times, personal notes, pantry inventory supply counts, grocery cart items, dietary preference selections, and public recipes shared to Recipe Hub.

1. AI Inquiries & Telemetry: Prompts submitted to "Ask TasteScribe AI," ingredient substitution queries, and nutritional estimation requests. Artificial intelligence processing is performed via secure backend application services utilizing external enterprise artificial intelligence service providers. Under commercial enterprise terms, customer prompts, queries, and uploaded imagery are processed statelessly and are not used to train or refine foundation models.

1. Purchase & Subscription Data: Entitlement tokens, subscription renewal dates, and transaction identifiers verified via subscription management services. We NEVER collect, receive, or store your credit card or payment account numbers.

1. Mobile Advertising & Tracking Identifiers (Free Tier Only): In our ad-supported Free tier, third-party advertising services collect mobile advertising identifiers (IDFA on iOS, GAID on Android), IP address (for coarse geographic location), and ad performance metrics. Consent is collected via a certified Consent Management Platform (CMP). Advertising tracking is completely disabled for Premium subscribers.

1. Device & Operational Diagnostics: Device model, operating system version, app version, language preference, crash telemetry, and network status to ensure stability and diagnose errors.

We process your data under the following legal bases pursuant to the General Data Protection Regulation (GDPR) and applicable privacy laws:

• Performance of Contract: Creating your account, synchronizing your Recipe Vault, processing OCR scans, and fulfilling in-app purchases.
• Legitimate Interests: Detecting fraudulent activity, optimizing app speed, maintaining backend security, and analyzing aggregate feature popularity.
• Explicit Consent: Serving advertisements via third-party advertising partners (where applicable in EEA/UK/US), sending push notifications for cooking timers or pantry reminders, and processing camera image uploads.
• Legal Compliance: Complying with statutory accounting, tax, DMCA, and legal recordkeeping mandates.

We partner with trusted third-party service providers who process data strictly under confidentiality agreements and data protection terms:

• Authentication & Identity Management: Third-party authentication and identity management service providers (user identity verification, session security, and access controls).
• In-App Subscription Management: Third-party subscription management services (receipt validation, purchase verification, and in-app entitlement management).
• Artificial Intelligence Infrastructure: Google LLC (Google Cloud) as enterprise artificial intelligence infrastructure subprocessor, alongside potential alternative enterprise AI service providers. Automated analysis, multimodal recognition, and generative AI features are processed statelessly under commercial agreements prohibiting foundation model training retention. Axxa Media does not operate exclusively with any single AI provider and may transition or augment AI service providers over time to enhance reliability and capability.
• Mobile Advertising & Consent (Free Tier): Google LLC (advertising mediation and consent management framework).
• App Distribution & Billing: Apple Inc. (iOS App Store) & Google LLC (Google Play Store).
• Cloud Infrastructure & Web Hosting: Third-party cloud infrastructure and web hosting service providers for website delivery, network security, and content distribution.

Data Retention:
We retain personal culinary data only for as long as your account remains active. If you initiate account deletion, your account profile, personal Recipe Vault, uploaded images, and associated logs are permanently purged from our active cloud systems within thirty (30) calendar days. Residual backup snapshots are overwritten in accordance with standard disaster-recovery cycles.

Security Safeguards:
All network communications are encrypted in transit using industry-standard TLS 1.3 / HTTPS. On-device local caching utilizes encrypted storage mechanisms (including platform-native secure keychains and encrypted local application data storage). Server access is restricted through zero-trust access controls, multi-factor authentication, and continuous security audits.

Security Incident Support:
For account security support, credential vulnerabilities, or unauthorized access reports, contact Account Support & Security at [email protected].

Depending on your place of residence, you enjoy statutory rights regarding your personal information:

• Right to Access & Portability: You may request a copy of the personal information we hold about you in a structured, machine-readable format.
• Right to Rectification: You may correct inaccurate or incomplete profile or culinary data directly in the app or by contacting us.
• Right to Erasure / Deletion: You may demand the complete deletion of your account and data. Visit our dedicated Account & Data Deletion Page for self-service and verified request workflows.
• Right to Restrict or Object: You may object to data processing grounded in legitimate interests.
• Right to Opt-Out of Sale / Sharing (CCPA/CPRA): We do not "sell" your personal data for monetary compensation. However, ad-supported data sharing under California law can be opted out of via the in-app "Privacy Options" menu or device-level tracking toggles.

To exercise any of these rights, email us at [email protected]. We will respond within statutory timeframes (30 days for GDPR, 45 days for CCPA).

TasteScribe AI is not directed to children under 13 years of age. We do not knowingly solicit or collect personally identifiable information from children under 13. If we learn that personal data of a child under 13 has been collected without verified parental consent, we will take immediate measures to purge the data from our systems. Parents or guardians may contact us at [email protected] with any concerns.

TasteScribe AI operations and servers are located in the United States. If you access the Service from the European Economic Area, United Kingdom, Switzerland, or other regions with data transfer laws, your data will be transferred to and processed in the United States. We implement Standard Contractual Clauses (SCCs) approved by the European Commission to guarantee equivalent data protection standards.

We may revise this Privacy Policy periodically to reflect technological, legal, or operational developments. Material changes will be communicated via in-app notification or prominent banner notice.

For privacy-related questions or data subject access requests:
Axxa Media, LLC
Attn: Data Privacy Officer
Email: [email protected]
Physical Notice Address: 5005 W. Laurel St, Suite 100, Tampa, Florida 33607 (Attn: Legal Department) [Registered Agent Office placeholder: pending formal counsel filing]