Privacy policy

Who we are

Coena (“Coena”, “we”, “us”) runs the Coena app at app.coena.app and this website at coena.app. Questions about privacy go to privacy@coena.app.

What we collect

Things you give us

• Your account: your name, email address and password (stored only as a scrypt hash), or the basic profile from Google if you sign in with Google.
• Your kitchen: recipes and their photos, binders, notes, ratings, cook logs, meal plans, shopping lists, pantry items, the stores you choose, and your household's preferences such as size, dietary preferences and allergies.
• Your conversations with the planner, kept in your kitchen so you can come back to them, until you delete them.
• Messages you send us.

Things we collect to run the service

• Who in a kitchen added or changed something, and when.
• Counters for daily allowances (for example, how many AI photos a kitchen made today).
• Notification settings: your time zone, quiet hours and the push subscription your browser gives us if you turn notifications on.
• Connections you make: Claude connector grants and API tokens (tokens stored only as hashes).
• Technical logs kept by our hosting providers, such as IP addresses, browser type and errors, for security and troubleshooting.

Things we don't do

• No advertising, no selling or renting personal information, and no “sharing” for cross-context behavioral advertising.
• No analytics or tracking scripts in the app or on this site. This site sets no cookies. The app keeps your sign-in token in your browser's local storage, not in a cookie.

How we use it

• To provide Coena: store and sync your kitchen, search and scale recipes, build shopping lists, match your pantry, price your list and send the reminders you ask for.
• To run AI features you use (see below).
• To keep Coena secure, prevent abuse and enforce daily allowances.
• To answer you, and to tell you about important changes to Coena or these terms.
• To bill paid plans.

Where the GDPR or a similar law applies, we rely on our contract with you to provide the service, on our legitimate interest in keeping it secure, and on your consent for optional things like push notifications, which you can withdraw anytime.

AI features

When you use the planner, import a recipe from a photo or text, or Coena needs help reading a messy web page, we send the relevant content to Anthropic (Claude): your question with the recipes, pantry items, plans and preferences it needs, the page, text or photo being imported, or a receipt photo you ask it to read. Recipe photos are generated by Cloudflare Workers AI from a recipe's title, ingredients and course. Under their commercial terms, these providers don't use this content to train their models.

You can turn AI features off in Settings. While they're off, Coena doesn't send anything you do to an AI provider.

If you connect Claude to Coena yourself, what Claude reads through the connector is handled by Anthropic under the terms of your own Claude account.

Affiliate links

A few store links are affiliate links (Amazon Associates, and Walmart through Impact) — see the affiliate disclosure. Coena doesn't share your personal information with these programs. When you follow such a link, the store knows you came from Coena and handles your visit under its own privacy policy. You can turn affiliate links off in Settings.

Who we share it with

• The people in your kitchen see what's in it, and their names appear on things they add.
• Apps you connect (Claude, your own scripts with an API token) can reach your kitchen until you disconnect them.
• Service providers who process data for us under contract: Convex (database, files and sign-in), Cloudflare (hosting, AI photos, connector sign-in), Anthropic (AI), Kroger, Walmart and Open Food Facts (price lookups and barcode scans, which include product searches, barcode numbers, store locations and ZIP codes but nothing that identifies you), Resend (email) and Stripe (payments). Stripe handles card details; we never see your card number.
• When the law requires it, or to protect people's safety or Coena's rights. We'll tell you about a request for your data unless we're legally prohibited.
• If Coena is sold or merged, your data would move to the new owner under this policy, and we'd tell you first.

Where your data is processed

Our providers process data in the United States and other countries where they operate. When data leaves the European Economic Area, the United Kingdom or Switzerland, we rely on the providers' standard contractual clauses or equivalent safeguards.

How long we keep it

• Your account and kitchen are kept while you use Coena.
• Recipes you delete stay in the trash until you empty it; then they're deleted.
• When you delete your account, your personal details, sessions, tokens and connections are deleted. If you were the last person in your kitchen, its recipes, plans, lists, pantry and photos are deleted too; otherwise the kitchen stays with its other members.
• Deleted data can remain in our providers' backups for a limited time before it's overwritten.
• Billing records are kept as long as tax law requires.

Your choices and rights

• Export: Settings → Import & export downloads every recipe as JSON.
• Correct: edit anything in the app, including your name and email.
• Delete: delete recipes, plans and lists anytime, or your whole account in Settings → Account.
• Disconnect: revoke Claude and API tokens in Settings; turn off notifications and email kinds in Settings → Notifications.
• Depending on where you live (for example under the GDPR or California's CCPA), you may also have the right to access, port, restrict or object to processing, and to complain to your data protection authority. Email privacy@coena.app; we answer within 30 days and won't treat you differently for asking.

Children

Coena is for adults: you need to be 18 or older to create an account. It isn't directed to children, and we don't knowingly collect their personal information. If you believe a child has given us personal information, contact us and we'll delete it.

Security

How we protect your data is described on the security page. No system is perfectly secure; if something goes wrong that affects you, we'll tell you promptly.

Changes

If we change this policy in a way that matters, we'll tell you in the app or by email before it takes effect. The version and date at the top always show which policy applies.

Contact

privacy@coena.app