Privacy Policy
We collect the minimum we need to make Garnish work — and we explain everything below in plain language.
Last updated: May 2, 2026 · Effective: May 2, 2026
1. Introduction
Welcome to Garnish ("Garnish," "we," "us," or "our"). This Privacy Policy explains how we collect, use, share, and protect personal information when you use our website at cookgarnish.com, our mobile and web applications, and any related services (collectively, the "Service").
By using the Service, you agree to the practices described in this policy. If you don't agree, please don't use the Service.
2. Information we collect
Information you give us
- Account information: name, email address, and password (stored as a hash) when you create an account or join the waitlist.
- Profile preferences: dietary preferences, allergens, favorite recipes, saved meal plans, and shopping lists you create.
- User-generated content: photos, ratings, notes, or comments you upload to recipes.
- Communications: messages you send us through support channels, surveys, or social media.
Information we collect automatically
- Usage data: recipes viewed, searches performed, features used, time spent, and interaction patterns.
- Device & technical data: device type, operating system, browser, IP address, language, time zone, and crash logs.
- Cookies & similar technologies: see Section 5.
Information from third parties
- Sign-in providers: if you sign in with Google, Apple, or another provider, we receive your name, email, and a unique identifier from that provider.
- Amazon Fresh: if you connect your Amazon account to enable one-tap grocery delivery, we receive limited cart and order metadata necessary to facilitate your purchase. We do not receive your Amazon password or full payment details.
3. How we use information
We use personal information to:
- Provide, operate, and maintain the Service (including recipe recommendations, meal planning, and shopping lists).
- Personalize your experience based on your dietary preferences and saved recipes.
- Facilitate Amazon Fresh grocery cart creation when you choose to use that feature.
- Send transactional emails (account confirmations, password resets, order receipts).
- Send marketing emails about new features and recipes — only if you opt in. You can unsubscribe at any time.
- Analyze usage to improve the Service, fix bugs, and develop new features.
- Detect, prevent, and address fraud, security incidents, and abuse.
- Comply with legal obligations and enforce our Terms.
4. Sharing & third parties
We share personal information only in the following limited circumstances:
Service providers
We use trusted vendors to operate the Service. They process data only on our instructions and under contractual confidentiality obligations.
| Provider | Purpose | Data categories |
|---|---|---|
| Supabase | Database, authentication, file storage | Account, profile, content |
| Kit (ConvertKit) | Waitlist & email marketing | Email address, name |
| Vercel | Web hosting | IP address, request logs |
| Amazon | Grocery cart & checkout (when used) | Cart contents, order ID |
| Google Analytics | Aggregate usage analytics | Pseudonymous device & usage data |
| Meta (Facebook/Instagram) Pixel | Ad measurement & retargeting | Page views, conversion events, hashed identifiers |
| TikTok Pixel | Ad measurement & retargeting | Page views, conversion events, hashed identifiers |
| Reddit Pixel | Ad measurement & retargeting | Page views, conversion events, hashed identifiers |
The advertising pixels above only load if you accept advertising cookies via our cookie banner. You can change your choice at any time using the Cookie preferences link in our footer.
Legal & safety
We may disclose information if required by law, subpoena, or valid government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
Business transfers
If Garnish is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction. We will notify you and provide choices if applicable law requires it.
With your consent
We will share information for any other purpose with your consent.
5. Cookies & tracking
We use cookies and similar technologies for the following purposes:
- Strictly necessary: sign-in sessions, security, and core functionality. These cannot be disabled.
- Functional: remember your preferences (e.g., theme, dietary filters, cookie consent choice).
- Analytics: aggregate usage statistics to improve the Service (Google Analytics).
- Advertising: measure ad performance, build retargeting audiences, and reach new users on Meta (Facebook/Instagram), TikTok, and Reddit.
The first time you visit, we show a cookie banner with two equally prominent options: Accept all or Reject all. Analytics and advertising cookies only load if you choose Accept. You can change your choice anytime via the Cookie preferences link in our footer. You can also block or delete cookies through your browser settings.
6. Data retention
We retain personal information only as long as needed to provide the Service and for the purposes described in this policy. Specifically:
- Account data: while your account is active and for up to 90 days after deletion (for backup and recovery).
- Waitlist email: until you unsubscribe.
- Server logs: typically up to 90 days.
- Records we are legally required to keep (e.g., tax or fraud prevention records): for the period required by applicable law.
7. Your rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you.
- Correct inaccurate or incomplete information.
- Delete your information ("right to be forgotten").
- Port your information to another service.
- Object to or restrict certain processing.
- Withdraw consent where we rely on consent to process your information.
- Lodge a complaint with a data protection authority.
To exercise any of these rights, email us at privacy@cookgarnish.com. We will respond within the timeframe required by applicable law (typically 30–45 days). We will not discriminate against you for exercising your rights.
8. California residents (CCPA/CPRA)
If you are a California resident, you have the rights described above plus the right to know what categories of personal information we collect and disclose. In the past 12 months, we have collected the categories of information described in Section 2 for the purposes described in Section 3.
We do not sell or share personal information for cross-context behavioral advertising as those terms are defined under the CPRA. We do not knowingly collect or sell the personal information of minors under 16.
You may designate an authorized agent to make a request on your behalf. To submit a request, email privacy@cookgarnish.com. We will verify your identity before fulfilling the request.
9. EU / UK residents (GDPR)
If you are in the European Economic Area, United Kingdom, or Switzerland, the data controller for your personal information is Garnish. Our legal bases for processing are:
- Contract: to provide the Service you signed up for.
- Consent: for marketing emails and non-essential cookies (you can withdraw at any time).
- Legitimate interests: to operate, secure, and improve the Service, in a way that doesn't override your rights.
- Legal obligation: to comply with applicable law.
You have the right to lodge a complaint with your local data protection authority.
10. Children's privacy
Garnish is not directed to children under 13 (or under 16 in the EU/UK), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact privacy@cookgarnish.com and we will delete it.
11. International data transfers
Garnish is operated from the United States. If you access the Service from outside the US, your information will be transferred to and processed in the US and other jurisdictions where our service providers operate. Where required, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses to protect your data.
12. Security
We use industry-standard technical and organizational measures to protect personal information, including encryption in transit (TLS), encryption at rest, hashed passwords, access controls, and regular security reviews. No system is 100% secure — if you believe your account has been compromised, contact us immediately.
13. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through the Service and update the "Last updated" date at the top. Continued use after the effective date means you accept the updated policy.
14. Contact us
Questions, requests, or complaints? We'd love to hear from you.
- Email: privacy@cookgarnish.com
- General: hello@cookgarnish.com
- Web: cookgarnish.com