Sahten is built and maintained by the Sahten team. This policy explains what data we collect, why we collect it, who we share it with, how long we keep it, and the rights you have over it.
Sahten is a recipe management app for Android and iOS. The data controller is the Sahten team, reachable at the contact email above.
Account data (only if you sign in with Google): your Google email, display name, profile photo URL, and an internal user ID we use to recognise you across devices.
AI usage data: the messages and ingredient lists you send to the AI Chef, plus counters tracking how many AI requests you have used.
Subscription data: your internal user ID, the product purchased, the platform (Apple or Google), and renewal or expiry dates.
Device security data: anonymous attestation tokens from your device's app-integrity service to confirm the request comes from a genuine app install.
On-device data: your recipes, meal plans, notes, photos, shopping list, theme, language, and AI chat history are stored on your device.
Cloud backup (Pro only): if you subscribe to Pro, the text of your recipes and meal plans (titles, ingredients, instructions, notes, ratings) is also backed up to our cloud and kept in sync across your devices. Your photos, shopping list, and AI chat history are not uploaded - they stay on your device.
We use account data to recognise you across devices and to enforce the AI usage limits of your plan. We use AI usage data to generate replies, build recipes, and prevent abuse. We use subscription data to unlock Pro features. For Pro subscribers, we store recipes and meal plans to back them up and keep them in sync across your devices. We use device security tokens to block bots and tampering. We do not sell your data, and we do not use it for advertising.
We share data with a small set of service providers needed to run the app: a cloud backend and authentication provider that hosts your account and, for Pro subscribers, your synced recipes and meal plans, an AI provider that generates Chef replies and recipes (see §5), a subscription receipt-validation provider that confirms your Pro entitlement, and the Apple App Store / Google Play, which process payments. Because you sign in with Google, your Google identity is shared with Google as part of that flow. We do not share your data with advertisers, data brokers, or any other third party for marketing. Each provider acts under its own privacy policy.
When you chat with the AI Chef or generate a recipe, the text of your message and your selected language are sent through our backend to Google's Gemini API. Google retains prompts for up to 55 days for abuse monitoring, then deletes them. Because we use the paid Gemini API tier, Google does not use your prompts to train its models. AI replies can be inaccurate, incomplete, or unsuitable for your dietary needs - always verify ingredients and instructions before cooking, and consult a doctor for any allergy, medical, or dietary condition.
Account profile and AI usage counters: kept while your account exists, deleted within 30 days of account deletion.
Subscription records: kept for the lifetime of your account plus the period required by tax and accounting law (typically 7 years for purchase records).
Gemini prompts: held by Google for up to 55 days, then deleted.
On-device data (recipes, photos, shopping list, AI chat history): stays on your device until you delete it in-app or uninstall the app.
Cloud-synced recipes and meal plans (Pro): kept while your account exists; removed when you delete them in-app or within 30 days of account deletion.
Our cloud backend is hosted in the United States. If you use the app from outside the United States, your data is transferred to and processed there. Our hosting and AI providers rely on the EU-US Data Privacy Framework and the Standard Contractual Clauses to safeguard these transfers.
Wherever you live, you can ask us to access, correct, delete, or export the data we hold about you, or to restrict or object to its processing. EU and UK users have these rights under the GDPR/UK GDPR. California residents have the right to know, delete, correct, limit use of sensitive personal information, and opt out under the CCPA/CPRA. We do not sell or share your personal information for cross-context behavioural advertising. To exercise any right, email us; we respond within 30 days.
You can delete your account and all the data tied to it directly inside the app: Profile -> Delete account. This permanently removes your account profile, AI usage history, subscription records, and any recipes and meal plans backed up to our cloud. If you cannot reach the in-app option, send a deletion request to the contact email above and we will process it within 30 days. Some records may be retained where law requires (for example, tax-related purchase records).
Sahten is not directed to children under 13 (or under 16 in the EU and UK), and we do not knowingly collect data from them. If you believe a child has used the app and provided data, contact us so we can remove it.
Camera and photo library access is requested only when you tap to add or change a recipe or profile photo. The image stays on your device unless you choose to share it. You can revoke either permission at any time in your device settings.
All traffic between the app and our backend is encrypted (HTTPS), and every request is verified with device app-integrity attestation before it is served. No system is perfectly secure - if you become aware of a vulnerability, please report it to the contact email above.
If we make material changes we will show an in-app notice before the new version takes effect, and update the effective date at the top of this page. Continued use after the effective date means you accept the updated policy.
For privacy questions, data requests, or to exercise any right described above, email the Sahten team at support@sahten.app. We aim to reply within 7 days and resolve formal requests within 30 days.