Privacy Policy
Last updated: 29 April 2026
This Privacy Policy describes how Abrar Albaqsumi ("we", "us", or "our"), the operator of Toss: Recipe Book (the "App"), collects, uses, and protects your information when you use the App. By using Toss, you agree to the practices described here.
If you have questions, contact us at support@tossrecipebook.com.
1. Information We Collect
1.1 Account information
When you create an account, we collect:
- Required: email address and password (or your Apple ID / Google ID if you sign in with those services)
- Required: display name
- Optional: birthdate (year and month) — to help us understand who uses the App
- Optional: gender — to help us understand who uses the App
You may skip the optional fields entirely. They do not affect any feature of the App.
1.2 Content you create
Recipes you save, meal plans, shopping lists, photos you attach to recipes, ingredient substitutions, and other cookbook content. In version 1.0 of the App this content is stored locally on your device and is not transmitted to our servers. In future versions, we may offer optional cloud sync to allow your data to follow you across devices — when that feature launches, you will be notified and asked for consent.
1.3 AI-generated content inputs
When you use AI features (such as importing a recipe from text, generating recipe ideas, or translating a recipe), the text or URL you provide is sent to our AI provider, Anthropic PBC, for processing. We do not send your name, email, or other identifying information with these requests. Anthropic does not retain your inputs for model training. See Anthropic's privacy policy for details.
1.4 Usage analytics
We use Firebase Analytics (provided by Google) to understand how the App is used in aggregate. This includes:
- Sessions, screens viewed, and feature usage (e.g., "user opened the AI generator")
- App version, device model, operating system version, country, and language
- Anonymous user identifier generated by Firebase (not linked to your name or email)
We do not use Firebase Analytics to track you across other apps or websites.
1.5 Crash and error reports
We use Firebase Crashlytics to collect anonymous crash and error reports. This includes the error stack trace, app version, OS version, and device model. No personal content (recipes, photos, account data) is included in crash reports.
1.6 Voice input
If you enable voice commands in cooking mode, your voice is processed on your device only using Apple's Speech framework. Your voice is never sent to our servers or to any third party.
1.7 Camera and photo library
If you choose to attach photos to a recipe, the App accesses your camera or photo library only when you ask it to. Photos remain on your device.
2. How We Use Your Information
- To create and maintain your account
- To allow you to sign in across sessions
- To send password reset emails when you request them
- To provide AI-powered features (recipe import, generation, translation)
- To understand which features are popular so we can improve the App
- To diagnose and fix bugs and crashes
- To communicate with you about your account or important service updates
3. Subscriptions and Payments
Subscriptions to Toss are processed by Apple through the App Store. We never see or store your payment card details. Apple shares with us only your subscription status (active, expired, refunded). See Apple's Privacy Policy for how Apple handles payment data.
4. Third-Party Services We Use
We rely on the following third parties to operate the App:
- Firebase (Google LLC) — authentication, analytics, crash reporting. Firebase Privacy
- Google Sign-In (Google LLC) — optional sign-in method. Google Privacy Policy
- Sign in with Apple (Apple Inc.) — optional sign-in method. Apple Privacy Policy
- Anthropic PBC — AI features (recipe import, generation, translation). Anthropic Privacy Policy
- Apple App Store — distribution and subscription processing.
5. Data Retention
Your account data is retained as long as your account is active. Crash reports are retained by Firebase for 90 days. Analytics events are retained by Firebase for up to 14 months. AI inputs are not retained by Anthropic for training purposes.
6. Your Rights — Account Deletion and Data Access
You may delete your account at any time directly from the App: Settings → Account → Delete Account. Account deletion is permanent and immediately removes:
- Your Firebase Auth user record (email, password hash, name, optional birthdate, optional gender)
- Your local recipes, meal plans, shopping lists, and any other locally stored content
Anonymous analytics events previously collected cannot be retroactively deleted because they are not linked to your identity.
You may also email support@tossrecipebook.com to request:
- A copy of the personal information we hold about you
- Correction of inaccurate information
- Deletion of your account and associated data
We will respond within 30 days.
7. Children's Privacy
Toss: Recipe Book is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact support@tossrecipebook.com and we will promptly delete it.
8. International Users
8.1 European Union (GDPR)
If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the right to access, correct, delete, restrict processing of, and port your personal data. Our legal basis for processing is your consent (when you create an account) and our legitimate interest in operating and improving the App. To exercise your rights, contact support@tossrecipebook.com.
8.2 California (CCPA / CPRA)
California residents have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell your personal information to third parties.
8.3 Kuwait (CITRA)
This App complies with the data protection regulations issued by the Communications and Information Technology Regulatory Authority (CITRA) of Kuwait. Personal data of users is collected, processed, and stored in accordance with Kuwaiti law.
9. Security
We use industry-standard security practices including HTTPS encryption for all network traffic and Firebase's built-in authentication security (passwords are never stored in plain text). However, no system is 100% secure, and we cannot guarantee absolute security of your data.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Significant changes will be communicated through the App or by email.
11. Contact Us
If you have questions or concerns about this Privacy Policy or our handling of your data, please reach out:
- Email: support@tossrecipebook.com
- Operator: Abrar Albaqsumi
- Location: Kuwait City, Kuwait