Privacy Policy

Effective date: March 26, 2026

Introduction

This Privacy Policy describes how San Soro Studio Inc. ("we," "us," or "our") handles information in connection with the Noosh mobile application and our website (together, the "Service").

Noosh is a recipe manager app. It does not require you to create an account — there is no sign-up, no username, and no password. Because there are no user accounts, we do not collect your name, email address, or any contact information.

We are incorporated in Canada and strive to comply with applicable privacy laws, including Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and the privacy laws of other countries in which we operate.

By using the Service, you agree to the terms of this Privacy Policy. If you do not agree, please do not use the Service.

Data we collect

Because Noosh has no user accounts, the data described below is either stored entirely on your device, synced through your own Apple iCloud account, or associated only with an anonymous device-level identifier — never with your name or email.

Photos and user content

When you add photos to recipes, the app may access your camera or photo library. Recipes, ingredient lists, cooking notes, and any photos you create are stored locally on your device. If you enable iCloud sync, this content is optionally synced to your personal iCloud account via Apple CloudKit. Noosh does not store this content on its own servers.

Analytics

We collect anonymous usage events to understand how the app is used and to improve it. This includes information such as which features and screens you interact with, recipe-related actions, search queries in the Explore tab, onboarding steps completed, and paywall interactions. This data is linked to an anonymous device-level identifier — not to your name or email address. We use PostHog for this purpose.

Purchase history and subscription status

If you subscribe to Noosh Premium, your subscription status and purchase history are managed by RevenueCat and linked to an anonymous customer identifier. Noosh does not collect or store your payment card details; all payment processing is handled directly by Apple.

Crash reports

When the app crashes, we automatically collect a crash report containing a stack trace, device model, operating system version, and app version. This data is used solely to identify and fix bugs. It is not linked to your identity. We use Firebase Crashlytics (by Google) for this purpose.

AI processing

When you use AI-powered features — such as recipe generation, importing a recipe from a URL, or image analysis — the relevant content (recipe text, a URL, or an image) is sent to third-party AI services to process your request. This data is used solely to fulfill your request in the moment and is not stored by Noosh.

URL content extraction

When you import a recipe from a web or video URL, that URL is sent to a third-party service to extract the recipe content. This data is used solely to fulfill your import request.

Device identifier

An anonymous, device-level identifier is used by our analytics and subscription management services. This identifier cannot be used to identify you personally and is not linked to your name or email address.

What we do not collect

To be explicit, Noosh does not collect:

The app does not track you across other apps or websites.

How we use your data

The data described above is used only for the following purposes:

We do not sell your data to advertisers or any third party.

Third-party services

The app uses the following third-party services. Each is governed by its own privacy policy, linked below.

Data retention

Your content (recipes, photos, notes) is stored locally on your device and, if iCloud sync is enabled, in your own iCloud account. You control it entirely and can delete it at any time from within the app or through your device settings.

Analytics data is retained by PostHog in accordance with their data retention policy.

Crash report data is retained by Firebase Crashlytics in accordance with Google's data retention policy.

Subscription and purchase data is retained by RevenueCat and by Apple as required for subscription management and applicable law.

We do not maintain our own database of user records. If you uninstall the app, your local data is removed from your device. Any data held by third-party services is subject to their respective retention policies.

Children's privacy

The Service is not directed to anyone under the age of 13, and we do not knowingly collect personally identifiable information from children under 13. If you are a parent or guardian and believe your child has provided personal information through the Service, please contact us at admin@sansorostudio.com and we will take appropriate action.

Cross-border processing

We are based in Canada. The third-party services we use may process data in the United States or other countries. Those countries may have different data protection rules than your own. By using the Service, you acknowledge that data may be processed outside your country of residence.

Security

We take reasonable steps to protect information against unauthorized access, loss, or misuse. No method of transmission over the internet or electronic storage is completely secure; we cannot guarantee absolute security. Your device security also matters — keep your software up to date and use a strong device passcode.

Your rights

Because Noosh does not maintain user accounts or a central database of personal information, most data associated with you exists either on your own device or is held anonymously by third-party services. You can delete your recipes and content directly within the app at any time.

Depending on where you live, you may have additional rights over personal data, including rights to access, correct, delete, or port data, and to withdraw consent or object to certain processing. To make a request or ask a question, contact us at admin@sansorostudio.com. We will respond within a reasonable time, typically within 30 days.

European and UK residents (GDPR / UK GDPR)

If you are in the European Economic Area, Switzerland, or the United Kingdom, you may have rights under the GDPR or UK GDPR to access, rectify, erase, restrict processing of, or receive a portable copy of your personal data, and to object to certain processing or withdraw consent. To exercise these rights, contact admin@sansorostudio.com. You may also lodge a complaint with your local supervisory authority. The data controller is San Soro Studio Inc.

California residents (CCPA)

If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA) to request access to categories and specific pieces of personal information we hold, and to request deletion, subject to legal exceptions. We do not sell personal information. To submit a request, email admin@sansorostudio.com.

Virginia residents

If you are a Virginia resident, you may have rights to confirm processing, access, correct, delete, or obtain a portable copy of personal data, and to opt out of targeted advertising as defined under Virginia law. We do not sell personal data as defined under Virginia law. To make a request, email admin@sansorostudio.com.

Business transfers

If San Soro Studio Inc. is involved in a merger, acquisition, or sale of assets, information held under this Privacy Policy may be transferred as part of that transaction.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the effective date at the top. Material changes may be communicated through the app or by other appropriate means. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

Contact

For questions, concerns, or data-related requests, contact us at admin@sansorostudio.com.

If you are in Canada and are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.