Ingredia
Back to sign in

Privacy Policy

Last updated: August 24, 2026

Ingredia (“we,” “us,” or “our”) operates the Ingredia mobile and web application (the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

1. Information We Collect

Account Information

When you create an account we collect your email address, display name, and — if you sign in via Google or Apple — your name and profile photo as provided by the identity provider. We store a securely hashed version of your password if you sign up with email and password; we never store plain-text passwords.

Profile & Dietary Preferences

You may optionally provide dietary preferences, allergies, household size, cooking skill level, a bio, and a profile photo. These are used solely to personalize your recipe recommendations and meal plans.

Usage Data

We collect information about how you interact with the Service, including recipes you swipe on, save, or like; meal plans you create; and grocery lists you generate. This data helps us improve recommendations and the overall experience.

Grocery & Store Data

If you connect your Kroger account, we access your Kroger loyalty account solely to look up product pricing at your preferred store and, with your explicit permission, add items to your Kroger cart. We store your Kroger OAuth tokens securely on our servers; they are never exposed to the browser.

2. How We Use Your Information

  • To create and manage your account, verify your email, and process password resets.
  • To personalize recipe recommendations and meal plans based on your preferences.
  • To generate grocery lists and look up real store prices via the Kroger API.
  • To send transactional emails (verification links, password resets). We do not send marketing emails.
  • To improve the Service, fix bugs, and analyze aggregate usage trends.

3. Third-Party Services

We use the following third-party services to operate Ingredia:

  • Google Sign-In — to authenticate your identity via OAuth 2.0. We receive your email, name, and profile photo. See Google's Privacy Policy.
  • Apple Sign-In — to authenticate your identity. We receive your email (or Apple's private relay address) and optionally your name. See Apple's Privacy Policy.
  • Kroger API — to look up product prices and add items to your Kroger cart. We access only the data you authorize. See Kroger's Privacy Policy.
  • Email delivery — we use a transactional email API to send verification and password-reset emails. These emails contain only the minimum information needed (your email address and a secure, single-use link).

4. Data Sharing

We do not sell, rent, or trade your personal information. We share data only with the third-party services listed above and only to the extent needed to operate the Service. We may disclose information if required by law.

5. Data Retention

We retain your account data for as long as your account is active. Verification and password-reset tokens are single-use and expire within 24 hours and 1 hour, respectively. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law.

6. Account Deletion

You can request deletion of your account and all associated data by contacting us at the email below. Upon receiving your request, we will permanently delete your account, profile, meal plans, grocery lists, and any connected third-party tokens within 30 days.

7. Data Security

We use industry-standard practices to protect your data, including encrypted storage, HTTPS-only transport, hashed passwords (bcrypt), and server-side token management. No method of electronic storage is 100% secure, but we take reasonable measures to protect your information.

8. Children's Privacy

Ingredia is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date. Your continued use of the Service after changes constitutes acceptance.

10. Contact Us

If you have any questions about this Privacy Policy or your data, please contact us at: [email protected]