Privacy Policy
Our commitment to privacy
This Privacy Policy outlines the commitment of San Soro Studio Inc. ("we," "us," or "our") to protect your personal information in connection with the Noosh mobile application, related services, and our website (together, the "Service").
Noosh is offered as a freemium service (free features with optional paid upgrades). The app is provided as is; any further warranty disclaimers may be set out in our Terms of Service.
In this Privacy Policy, "you" refers to any individual about whom we collect personal information.
This Privacy Policy applies to our website and our Apps. It applies to users located in all countries in which we do business.
We are incorporated in Canada and strive to comply with applicable privacy laws, including Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), where it applies, and the privacy laws of other countries in which we operate, as relevant to our activities.
Our Privacy Policy
Our Privacy Policy sets out how we look after personal information. It explains the kinds of personal information that we collect, and why we collect it. It also describes how we hold, use, and disclose personal information.
By registering as a user for or using the Service, or by providing personal information to us (including through a registration process), you agree to the terms of this Privacy Policy. If you do not agree to this Privacy Policy, please do not use the Service.
When you agree to the terms of this Privacy Policy, you consent to the collection, use, storage, and disclosure of your personal information as described here, subject to applicable law.
The personal information that we collect
We collect personal information to provide and improve our products and services, including marketing of our products and services where permitted. We also collect information where we are required to do so by law.
We do not knowingly collect information from or direct our content specifically to children under the age of 13. If you are under 13 years of age, please do not provide your personal information to us.
The types of personal information we collect depend on the circumstances. They may include:
- Your name and contact details, including email address
- Identification details, such as date of birth, if you choose to provide them
- Information regarding your use of or interest in our products and services
- How you make payments to us in any transaction, such as payment details. This could include payment card or wallet information as processed by payment providers
- Your transaction history with us
- Records of communications and dealings with you, such as emails, in-app messages, and support conversations
- Information regarding your use of the Service
- Authentication data, including your username and password when you log in via the Service, account identifiers such as a user ID, and tokens or identifiers used to keep you signed in securely
- Profile information if you set up an account with us, including any information you add to your profile through the Service, such as photos and information about yourself
- Information you voluntarily provide about yourself, such as food preferences, dietary information, pantry items, recipes, meal plans, grocery lists, and related cooking or kitchen preferences
- Advertising or communications preferences, such as your preferences for receiving marketing materials from us
- Information we may collect as part of a survey, feedback request, or competition
- Information that you provide for verification purposes or in connection with a complaint
- Other information that you provide to us during the course of using the Service
We may collect information about people who are our suppliers and business partners, or who work for them, where needed to do business with that party.
You have no obligation to provide information to us, but if you do not provide certain information, you may not be able to use parts of the Service.
Artificial intelligence
Noosh uses artificial intelligence (AI) technologies to enhance your experience and provide certain features (for example, recipe-related suggestions or automated functionality). AI components may process information you provide or generate in the app to deliver personalized content, recommendations, or automated features. AI processing is performed in accordance with this Privacy Policy and applicable law. If you have questions about AI features or how your data is processed, contact us at admin@sansorostudio.com.
Online services and usage data
When you use the Service, we may automatically collect information about you and how you use it. We may also collect information that your browser sends when you visit our website or when you access the Service through a mobile device.
Such information may include:
- Credentials you create to access the Service
- Which functions and features you use and how you use them
- Which pages you visit on our website
- Device information, such as device model and identifiers, operating system, and mobile network information where available
- Server log information, such as how you used the service, IP address, browser type and language, dates and times of access, and referring URL
- Information that may uniquely identify your browser or account
- Recipes you save, pantry data, grocery lists, AI-assisted recipe interactions, and similar content you create in the Service
Location. We do not collect precise or coarse GPS or device location from the Noosh mobile app. We do not track your real-world location through the Application. When you use our website or our servers receive network requests, we may still process IP addresses; those can be used to infer a very general geographic area (for example, region or country) for security, analytics, or compliance—not for continuous location tracking.
If you visit our website, we may collect information such as pages visited, links clicked, text entered, and referring URL, browser, device, operating system, and IP address. We may use publicly available sources to approximate general geographic region based on IP address.
We may use IP addresses for internal traffic monitoring, security, capacity management, and administration of the Service. We may analyze usage in aggregate or statistical form so that individuals are not identified.
We may use cookies, pixels, local storage, databases, and server logs to collect and store information, remember preferences, and understand usage. You can control cookies through your browser settings; if you disable cookies, some features may not work properly.
Tracking technologies. We may use beacons, tags, and scripts to collect information and to improve and analyze the Service. These may include session or persistent cookies. If we use email marketing, messages may include pixels that help us understand whether an email was opened.
Our Service may contain links to other websites. We are not responsible for the privacy practices or content of other websites. Please read the privacy policy of any site you visit.
We do not alter our website's data collection and use practices in response to Do Not Track signals from your browser, where such signals exist.
Sensitive information
Sensitive information can include information about your health, racial or ethnic origin, religious beliefs, and similar categories depending on applicable law.
Usually we do not collect sensitive information. If we need to do so, we will only collect it with your consent where required, where it is reasonably necessary for us to provide the Service, or where otherwise permitted or required by law. If you provide sensitive information, we will treat that as consent to collect it for the purpose you provided it, unless you tell us otherwise.
Use of personal information
We may use the information you provide to contact you from time to time with important information about the Service, required notices, and marketing or promotions where the law allows and you have not opted out where opt-out is required.
We may use and disclose your personal information for purposes including:
- Providing and operating the Service
- Implementing transactions you participate in
- Identifying you and helping you use the Service
- Administering accounts, subscriptions, and purchases
- Contacting you by email, push notification, or other electronic means about updates, security, support, and information related to the Service
- Responding to inquiries and providing customer support
- Monitoring for fraud, abuse, and violations of our terms
- Processing payments
- Improving the Service, conducting research, and understanding usage trends
- Personalizing content, including recipe and meal suggestions, where you use features that rely on your preferences or inputs
- Security and integrity of the Service
- Complying with legal obligations, resolving disputes, and enforcing agreements
- Surveys, contests, or promotions, where you choose to participate
- Marketing our products, where permitted, including special offers
- Maintaining accurate records
- Other purposes required or authorized by law, or with your consent
We will not sell your personal information to advertisers or other third parties in the ordinary sense of selling data for money. We may use service providers who process data on our behalf under contract.
We may de-identify or aggregate information so that it can no longer reasonably be related to you, and we may use and disclose de-identified or aggregated information for business purposes, including to improve the Service and in promotional materials.
Disclosure of personal information
We may transmit aggregated, anonymized data to external services to help us improve the Application and our operations. We may share personal information in situations such as:
- With service providers who assist us (for example hosting, analytics, customer support tools, email delivery, and payment processing), subject to appropriate safeguards
- With our affiliates, where applicable, who are also bound by commitments consistent with this policy
- With business partners to offer products, services, or promotions you have chosen to engage with
- When you share information in public or social areas of the Service, where that information may be visible to others
- To government agencies, regulators, or law enforcement when required or permitted by law
- To professional advisors, insurers, or others who assist in operating our business, under confidentiality obligations
- In connection with a subpoena, court order, or other lawful request
- To a successor in interest if we sell or transfer assets or business operations, subject to applicable law
- With your consent, for other purposes you approve
We may disclose information when we believe in good faith that disclosure is necessary to protect our rights, your safety or the safety of others, investigate fraud, or respond to a government request, in addition to disclosures required by law (such as a subpoena or similar legal process).
We may share information with trusted service providers who work on our behalf, who do not use the information for their own independent purposes beyond assisting us, and who are bound to handle information consistently with this Privacy Policy.
Cross-border processing
We operate in Canada and other countries. We and our service providers may process and store personal information in Canada, the United States, and other countries. Those countries may have different data protection rules than your own.
Where we transfer personal information across borders, we take steps that we consider appropriate in the circumstances to protect your information in line with this Privacy Policy and applicable law, including contractual measures with service providers where relevant.
By using the Service or providing personal information, you acknowledge that your information may be processed in countries other than where you live.
Security and storage
We may store information in electronic and, in some cases, paper formats. We take reasonable steps designed to protect personal information against unauthorized access, loss, or misuse. No method of transmission over the Internet or electronic storage is completely secure; we cannot guarantee absolute security.
Security is shared: use up-to-date software, strong unique passwords, do not share your account, and contact us if you notice suspicious activity.
We retain personal information for as long as you use the Application and for a reasonable time afterward, and otherwise only as long as needed for the purposes described in this policy or as required by law.
Service providers and third-party SDKs
Third-party service providers may process personal information on our behalf. Categories of providers may include cloud hosting, authentication, analytics, crash reporting, subscriptions and payments, and AI or machine-learning infrastructure where you use AI features. Their processing is governed by their own policies and our agreements with them.
The Application uses third-party services that have their own privacy policies. These include:
- Google Analytics for Firebase (Firebase / Google)
- Firebase Crashlytics (Firebase / Google)
- Sentry
- Mixpanel
- RevenueCat
Payments. If we offer paid features, payment information is typically collected directly by payment processors. We do not store full payment card numbers on our servers; processing is subject to the processor's privacy policy.
Email marketing. Where we send promotional emails, you may opt out using the unsubscribe link in those emails or by contacting us at admin@sansorostudio.com.
Opt-out
You can stop collection of information through the mobile app by uninstalling the Application, using the standard uninstall process on your device or through the app marketplace you used to install it. Uninstalling may not delete data we already hold; you may request deletion as described below.
Minors
The Service is not directed to anyone under the age of 13, and we do not knowingly collect personally identifiable information from children under 13. If we learn that a child under 13 has provided personal information, we will delete it from our servers promptly. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at admin@sansorostudio.com so we can take appropriate action.
Access to and correction of personal information
You may request access to or correction of personal information we hold about you, subject to legal exceptions. Contact us at admin@sansorostudio.com. We may need to verify your identity. We will respond within a reasonable time; in many cases within approximately 30 days, depending on complexity and applicable law.
We take reasonable steps to keep personal information accurate, complete, and up to date. You may also be able to update certain information directly in the app.
If we refuse access or correction where permitted by law, we will explain why and tell you how to complain, where applicable.
Deletion
Where the Service offers account or data deletion features, you may use them to delete certain information associated with your account. You cannot delete information that belongs to another user's account.
You may request deletion of personal information we hold by contacting admin@sansorostudio.com. We will take reasonable steps to honor your request, subject to legal or technical requirements to retain certain data (for example security, fraud prevention, or compliance).
European and UK residents
If you are in the European Economic Area, Switzerland, or the United Kingdom, you may have rights under the GDPR or UK GDPR, including to access, rectify, erase, restrict processing, object, or request portability of certain data, and to withdraw consent where processing is based on consent.
We process personal information as necessary to provide the Service, perform our contract with you, comply with law, or pursue legitimate interests that are not overridden by your rights.
To exercise these rights, contact admin@sansorostudio.com. You may also lodge a complaint with your local supervisory authority.
The data controller for personal information described in this policy is San Soro Studio Inc.
California residents
This section supplements our Privacy Policy for California residents under the California Consumer Privacy Act (CCPA), as amended.
You may have the right to request access to categories and specific pieces of personal information we collect, use, and disclose, and to request deletion of personal information, subject to exceptions. You may have the right to opt out of certain types of sharing that qualify as "sale" or "sharing" under California law. We do not sell personal information for money. To submit a request, email admin@sansorostudio.com. We may verify your identity before responding.
Virginia (United States) residents
If you are a Virginia resident, you may have rights to confirm processing, access, correct, delete, obtain a portable copy of personal data you provided, and opt out of targeted advertising as defined under Virginia law. We do not sell personal data as defined under Virginia law. To make a request, email admin@sansorostudio.com. We may verify your identity before responding.
General
Other agreements. Your use of the Service is also governed by our Terms of Service. Please review them carefully.
Business transfers. We may transfer information, including personal information, in connection with a merger, acquisition, reorganization, or sale of assets.
Links. Our Service may link to third-party sites. We are not responsible for their content or privacy practices.
Further information and complaints
For questions or complaints about our use of personal information, contact us at admin@sansorostudio.com. We will investigate and respond within a reasonable time.
If you are in Canada and are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada (OPC). Information is available at https://www.priv.gc.ca/en/contact-the-opc/.
Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version on this page and update the effective date. Material changes may be communicated through the Service or by email where appropriate. Please review this Privacy Policy regularly. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy, unless applicable law requires a different process.