Privacy Policy

Veril Studio ("we," "us," or "our") operates the Cibbbo mobile application and the cibbbo.com website (together, the "Service"). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices and rights you have.

By using Cibbbo, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

1. Information You Provide

Account and profile: email address, password (stored only as a secure hash), display name, username, profile photo, bio, and sign-in identifiers when you use Sign in with Apple or Google. If you hide your email with Apple, we receive Apple’s private relay address instead.

Age: when you sign up you enter your birth month and year. Your phone works out your age group and we store only that group (13–17, 18–20, or 21+), never your birthday. If you are under 21 we also store the month and year you turn 21 (not the day) so age-limited content, such as cocktail recipes, unlocks on its own.

Food preferences and allergies: cuisines you like, dietary preferences, and allergies or restrictions you add so recommendations can be filtered for you. Allergies and diets can reveal health or religious information, so we treat them as sensitive: they are stored privately with your account, used only to filter and label recipes, and are never shown to other users, used for advertising, sold, or shared. Ask Cubo never receives your allergy list: our servers remove recipes that conflict with it before Cubo sees them, and check recipes Cubo writes for you. If one uses a conflicting ingredient, only that ingredient’s name is sent to our AI provider so Cubo can suggest a swap.

Content you create: recipes, recipe photos, reviews, cookbooks, inventory items in My Fridge and My Shelf, shopping lists, likes, saves, and drafts.

Messages to Ask Cubo: text you type and, when you use voice, what you say (see Section 4).

Bug reports and support: descriptions you write, screenshots you choose to attach, and basic device information that helps us reproduce the problem.

Verification requests (optional): your legal or professional name, other names you go by, links, audience size, why you want a badge, and, if you choose, a photo of a government ID. Only Cibbbo staff see it, and only to confirm who you are. We delete the ID photo 30 days after we approve or decline the request, or 1 day after you withdraw it.

Waitlist and marketing email: the email address you submit on our website waitlist or when you enable the newsletter toggle at signup. Marketing email requires your explicit consent and you can unsubscribe at any time.

2. Information Collected Automatically

Device and usage data: app version, device model and OS version, crash logs, and diagnostics needed to operate, debug, and secure the Service.

Push notification tokens so we can deliver notifications you enable.

Activity on Cibbbo: recipes you open, how long you view them and how far you scroll, Cook It sessions you start, and profiles you visit. Creators see totals for their profile and recipes. They can also see the name and photo of signed-in people who viewed them, unless you turn off Show me in viewer lists in Settings → Privacy Choices. Your visits still count toward totals either way.

Local caches: recipe images and some app data are cached on your device to make the app faster and work offline. You can clear these caches in Settings → Cache Management.

3. Camera, Photos & AI Scans

Camera and photo library access is requested only when you scan your fridge or pantry, attach photos to recipes or bug reports, or set a profile photo. You can revoke these permissions in your device settings at any time.

Scan data includes the photos you capture or upload, AI detection results (ingredient names, bounding boxes, confidence scores), and corrections you make during review.

Scan photos are sent to our AI provider only after you agree on the AI & your data screen, and only to detect ingredients for that scan. You can withdraw that permission in Settings → Privacy Choices; scans and Ask Cubo then ask again before sending anything.

Help improve Cibbbo’s scanner is off unless you turn it on. When it is off, scan photos are deleted from our servers within 24 hours and your corrections are not used for training. When it is on, we keep your scan photos and corrections to improve detection, and Cibbbo staff may review saved photos, so avoid photographing people. Turning it off later deletes your saved scan photos within 24 hours and stops your past corrections from being used.

4. Microphone, Voice & Speech Recognition

Microphone access is requested only when you talk to Ask Cubo. During a voice session, your audio is streamed to our AI provider (OpenAI) in real time to understand and respond to you. Audio is not recorded in the background.

Speech recognition (dictation) is processed by your device platform (Apple) under its own terms when you dictate a message instead of typing.

Transcripts of Ask Cubo conversations may be stored with your account so the assistant has context and you can review past chats.

Cubo memory: Ask Cubo saves short notes about lasting preferences it learns while you chat (for example your diet, household, favorite cuisines, kitchen equipment, or cooking skill) so later answers fit you. You can read and clear these notes anytime in Settings → Privacy Choices.

Thumbs up and down: when you rate a Cubo reply, we store the rating and a short excerpt of that reply with your account and use them only to tailor your own future answers. Ratings are not used to train AI models and are deleted when you close your account.

5. Contacts

Finding friends is optional and only runs with your permission. To check which contacts already use Cibbbo, emails and phone numbers from your address book are converted to one-way cryptographic hashes on your device; only those hashes are sent to our servers for matching. Your raw address book is never uploaded or stored by us.

Invites are sent from your own device through the system share sheet — we do not message your contacts on your behalf. For each invite we store only a one-way hash of the contact’s email or phone number so we can connect you when they join, never their name. Invites that are not used are deleted after 180 days.

You can revoke contacts access in your device settings at any time.

6. Location

With your permission, we use your approximate location while you use the app to find grocery stores near you and to pre-fill your grocery delivery address. Motion activity may be used alongside location so store results stay accurate.

When you ask Cubo for store deals, only your city or ZIP code (never your exact location) is included in the web search our AI provider runs.

We do not track your location in the background, and you can revoke location access in your device settings at any time.

7. Face ID & On-Device Security

If you enable it, Face ID (or your device passcode) can protect saved sign-in data on your device. Biometric data is processed entirely on your device by Apple and is never sent to or stored by us.

8. How We Use Information

Provide core features: recipe discovery and search, inventory tracking, AI-powered fridge and pantry scanning, Ask Cubo, shopping lists, cook timers and Live Activities, and social features like profiles, follows, and reviews.

Personalize your experience, including allergy-aware recipe recommendations and suggestions from your inventory.

Match ingredient names against the USDA FoodData Central database (a public U.S. government dataset) to standardize food names and nutrition information.

Improve AI detection quality using a human-in-the-loop learning pipeline when you opt in under AI Scan Preferences (see the AI Policy).

Operate the Service: authenticate you, deliver notifications you enable, process subscriptions, respond to support and bug reports, enforce our Terms and Community Guidelines, prevent abuse, and comply with legal obligations.

9. Service Providers

We use a small number of processors to run Cibbbo. They may process your data only to deliver Cibbbo features on our behalf:

Supabase — authentication, database, file storage, and serverless functions (our backend).

OpenAI — AI inference for fridge/pantry scans and Ask Cubo chat and voice. Under our API agreements, OpenAI does not use this data to train its own models.

Apple and Google — sign-in, app distribution, push notification delivery, and on-device speech recognition.

Expo — push notification delivery infrastructure.

Klaviyo — marketing email for the waitlist and newsletter (only with your consent).

Stripe — payment processing if and when web billing launches; Stripe will receive payment details directly and we never see your full card number.

USDA FoodData Central — a public data source we query for food and nutrition data; queries are not tied to your identity by the USDA.

Google Maps Platform — finds nearby grocery stores and turns your location into an address when you use grocery features or ask Cubo for stores. Google receives the location or place you search for.

YouTube Data API — reads a video’s title and description when you import a recipe from a YouTube link.

Open Food Facts — a public product database we look up to match packaged foods from scans; no personal information is sent.

Resend — sends account and waitlist emails, such as your create-password link.

Webflow — hosts cibbbo.com, including public recipes from verified creators shown there.

Cloudflare — bot protection on cibbbo.com forms.

Google Analytics — measures visits to cibbbo.com (the website only, not the app). See the Cookie Notice.

10. How Information Is Shared

We do not sell your personal information, and we do not share it with third parties for their own advertising.

Content you publish (public recipes, reviews, your profile name, username, photo, bio, follower counts) is visible to other users according to your visibility settings. Public recipes from verified creators may also be shown on cibbbo.com with the creator’s username and photo; making a recipe private or deleting it removes it from the website.

When you share a recipe, profile, or invite link, the link includes an ID for your account so the person who opens it can see who shared it. The preview page those links open sets no cookies and loads no analytics or advertising tools.

We do not sell personal information or share it for cross-context behavioral advertising, and we use sensitive information (such as allergies, precise location and ID photos) only to provide the features you ask for. On cibbbo.com, optional analytics and advertising cookies load only after you agree in the cookie banner; change your choice anytime from Your Privacy Choices in the footer (see the Cookie Notice).

We may disclose information if required by law, to protect the rights and safety of users or the public, or as part of a merger, acquisition, or sale of assets (in which case this policy continues to apply to your data).

11. Subscriptions & Payments

Cibbbo Plus purchases made in the iOS app are billed by Apple through your App Store account. Apple handles your payment details; we receive only what we need to grant your subscription (plan, status, and renewal dates).

We keep records of your plan, trial usage, and subscription events to operate billing and entitlements.

12. Notifications & Email

Push notifications (including social notifications that show the sender’s name and photo, cook timer alerts, and Live Activities) are sent only if you enable them, and can be turned off in Settings or your device settings.

Marketing email is sent only with your consent and every message includes an unsubscribe link. Transactional email (such as password resets and verification codes) is sent as needed to operate your account.

13. Data Retention

Account, profile, inventory, and content data are kept while your account is active.

Scan photos are deleted within 24 hours unless you keep them or turn on Help improve Cibbbo’s scanner. Scan results (the ingredient list) stay with your inventory.

Verification ID photos are deleted 30 days after a decision, or 1 day after you withdraw the request. Unused friend invites are deleted after 180 days.

When you close your account (Settings → Close my account), we delete your profile, recipes (including copies on cibbbo.com), photos, scans, Ask Cubo conversations, inventory, and other account data. You choose whether to stay on the newsletter: by default we also ask Klaviyo to delete your email from our newsletter and waitlist, or you can keep receiving the newsletter and unsubscribe later from any email. Backups roll off within a short window. We keep a record that the request was completed, identified only by a one-way hash, for 24 months.

Aggregated, de-identified signals (such as correction statistics from opted-in users) may be retained to improve detection quality; they no longer identify you.

14. Security

We use row-level security, authenticated access, and private storage buckets for sensitive data such as scan images. Profile photos are stored in a public-read bucket scoped to your user folder so they can be displayed in the app.

No method of transmission or storage is 100% secure. We work to protect your data but cannot guarantee absolute security.

15. Your Rights & Choices

Access and portability: you can request a copy of the personal data we hold about you.

Correction: edit your profile, preferences, and allergies in the app, or contact us for anything you cannot change yourself.

Deletion: close your account in Settings → Close my account, or email us to request deletion.

Permissions: camera, photos, microphone, speech recognition, contacts, location, and notifications are each optional and can be revoked in your device settings.

AI training: opt out of contributing corrections to model improvement, and control scan photo retention, in Settings → AI Scan Preferences.

Marketing: unsubscribe from marketing email via the link in any message.

Settings → Privacy Choices: turn Cibbbo AI on or off, choose whether to help improve the scanner, and hide yourself from viewer lists.

Depending on where you live (for example California, other U.S. states, the EU/EEA, or the UK), you may have additional rights, including the right to know, correct, delete, restrict or object to processing, data portability, non-discrimination for exercising your rights, and the right to lodge a complaint with your local supervisory authority. We honor these requests regardless of where you live where reasonably practicable.

How to make a request: email contact@veril.studio from the email on your account (that is how we verify it is you). An authorized agent may ask on your behalf with your signed permission. We confirm within 10 business days and respond within 45 days, and tell you if we need up to 45 more. If we deny a request, we explain why and how to appeal.

16. Children

Cibbbo is not directed to children under 13, and you must be at least 13 years old to create an account. We ask for a birth month and year at sign-up; if the answer is under 13, the account is deleted right away. We do not knowingly collect personal information from children under 13; if we learn we have, we will delete it. If you believe a child under 13 has an account, contact us.

17. Changes & Contact

We may update this Privacy Policy from time to time. We will update the "Last updated" date above, and for material changes we will provide notice in the app or by email. Continued use after changes means you accept the updated policy.

Questions or requests: contact@veril.studio.