Privacy Policy

Last updated October 4, 2026

Spatter is a recipe app run by Jash Bhankharia, a sole proprietor doing business as Spatter in New Jersey, USA ("Spatter", "we"). This policy explains what we collect when you use the Spatter app and spatter.app, why, who helps us run it, and the choices you have. Questions: hello@spatter.app.

The short version: we keep what you put into Spatter so the app works on all your devices. We don't sell it, we don't show ads, and we don't track you across other apps or websites. You can delete your account and everything in it from the app at any time.

What we collect

Your account

Your email address and password. Passwords are stored only as a secure hash by our authentication provider.
Your settings, such as whether you prefer metric or US units.

What you save and do in Spatter

The links you import, and the recipes, favorites and collections in your kitchen.
Your cook log: when you made a dish, your notes, and any photo you choose to add. Photos are stored privately and only you can see them.
Your grocery list.

Technical information

Crash and error reports: the app version, device model and operating system, and what the app was doing when something went wrong. We set our crash reporting not to collect personal information like your IP address or email.
Standard server logs (such as IP address and request times) kept by our hosting providers for security and reliability.

We don't collect your contacts, location, advertising identifiers or browsing history.

How importing a recipe works

When you import a link, our server fetches that page, or for an Instagram post, reads it through Meta's official Instagram APIs. We only read public posts from Instagram professional (creator and business) accounts; we never ask for your Instagram login and can't see your Instagram account.

The text we find (for example the recipe on a web page or an Instagram caption) is sent to Anthropic's Claude AI service, which turns it into a structured recipe. Anthropic processes it only to provide that service to us and, under its commercial terms, doesn't use it to train its models. Only the source's text is sent, not your account details.

Each source is extracted once and shared: if two people import the same link, they see the same recipe. Who saved which recipe is private to each person.

Content from Instagram and other creators

Recipes always credit their creator and link to the original. If a creator deletes an Instagram post or makes it private, Spatter removes that recipe's ingredients, steps and photo; we check for this regularly. Your own cook log and notes stay. Creators can ask us to remove their content at hello@spatter.app.

How we use information

To run Spatter: keep your kitchen in sync across devices, import recipes, and build grocery lists.
To keep it working and secure: fix crashes, prevent abuse, and protect accounts.
To contact you about your account, such as security notices. We don't send marketing email without your permission.

Who we share it with

We don't sell or rent personal information, and we don't share it for advertising. We use these service providers, who process data on our behalf under contracts that limit how they can use it:

Supabase (database, authentication and file storage, hosted in the United States)
Anthropic (turning recipe text into structured recipes)
Meta (reading public Instagram posts you import, through its official APIs)
Sentry (crash and error reports)
Expo (delivering app updates)
Cloudflare (hosting this website and our email)

We may also disclose information if the law requires it, to protect the safety of people or the service, or as part of a sale or reorganization of Spatter (in which case this policy continues to apply).

Where your data is stored

Spatter's data is stored in the United States. If you use Spatter from another country, including India, your information is transferred to and processed in the United States.

How long we keep it

We keep your information while your account exists. When you delete your account, your profile, recipes list, collections, cook log, notes, photos and grocery list are deleted straight away. Copies may remain in encrypted backups for up to 30 days before they're overwritten. Shared recipe text that other people still have saved stays for them, but is no longer linked to you.

Your choices and rights

Delete: in the app, go to Me → Delete account. See how to delete your data for other ways.
Access, correct or export: email us and we'll help within 30 days.
Depending on where you live (for example under India's Digital Personal Data Protection Act or US state privacy laws), you may have further rights, including to withdraw consent or to complain to a regulator. Email us to use them; we won't treat you differently for doing so.

Security

Data is encrypted in transit and at rest, and access controls in our database make sure each person can only read their own information. No system is perfectly secure; if we learn of a breach that affects you, we'll tell you as the law requires.

Children

Spatter isn't meant for children under 13, and we don't knowingly collect their information. If you believe a child has given us information, email us and we'll delete it.

Changes

If we change this policy, we'll update the date above, and for significant changes we'll tell you in the app or by email before they take effect.

Contact

Spatter · New Jersey, USA · hello@spatter.app