ReciKey™
Privacy Policy
Last updated: November 12, 2026. Effective: November 12, 2026.
The short version
- We don't sell your personal information, and we don't show ads.
- Your recipes, stories, photos and recordings belong to you.
- ReciKey asks your permission before sending your photos, recordings or recipe text to third-party AI services for you. We name those services below.
- Your recipes are never used to train AI, by us or, under our settings with our AI providers, by them.
- We never create a copy of anyone's voice.
- You can export your data or delete your account at any time.
1. Who we are
Son of a Good Man LLC ("we" or "us"), a California limited liability company, provides the ReciKey app, the www.sonofagoodman.com/recikey website and related services (the "Services"). Our address is 435 E. Market St., Long Beach, California 90805, USA. ReciKey is currently offered in the United States. This Policy doesn't cover our other products.
2. What we collect
Account. Name, email address, password (stored only as a hash), optional profile photo. If you sign in with Apple or Google, we receive a unique ID, your email or Apple private relay address, and your name if shared.
Profile, if you add it. Birthday, city, state and country, heritage, cooking preferences, and diet preferences.
Your content. Recipes, notes, family stories, comments, photos, scanned recipe cards, audio and video recordings, pantry items, receipt photos and shopping lists.
Family tree details you add. Names, relationships, photos, birth year or birthday, city, whether someone is living, year of death, maiden name, family history, heritage, allergies, diet, and private or shared notes.
How you use ReciKey. Recipes you've cooked, favorites, recent searches (saved to your account so you can reuse them), connections, follows, and your language setting.
Device and technical data. Device type, operating system, app version, language, push notification token, IP address, time of last visit, and error reports.
Purchases. Apple processes payment, and we never receive your card details. RevenueCat tells us your plan, its status and renewal dates.
Support. What you send us when you ask for help.
Permissions. We ask only when you use the feature.
| Permission | Used for |
|---|---|
| Camera | Recipe photos, card and pantry scans, video recipes |
| Microphone | Voice and video recipes |
| Photo Library | Choosing photos you add |
| Notifications | Timers, family activity, answers to your asks |
| Contact picker | Choosing one person to message. That choice is never sent to our servers, and we can't read your address book. |
We don't collect precise location. We don't use Face ID, Touch ID or other biometric sign-in.
3. Information about other people
ReciKey is about family, so you may add details about people who don't use it, including children and people who have died.
When you add someone, you confirm that you have the right to do so, and that for a child you are their parent or guardian or have that person's permission. You agree to honor reasonable requests to remove someone's information.
If someone added you. Write to support@sonofagoodman.com. We'll work in good faith to remove or limit the information, including when you're a parent asking for your child or a close relative or estate representative asking for someone who has died.
Recipe links. A ReciKey user can send you a link to share a recipe without creating an account. If you use it, we collect what you send (a recording, card photos, a written recipe or a story), your name if you give it, your confirmation that you're 13 or older and consent to sharing it, and technical data such as your IP address to prevent abuse. It goes to the person who sent the link and becomes part of their content. It may be transcribed and written up using the AI services below, including automatically if that person has turned this on. To have something removed, ask that person or write to us. Uploads that are never sent are deleted automatically.
4. How we use information
- To provide the Services, keep your account working, and sync your content.
- To run the features you ask for, including AI features.
- To show your content to the people you choose.
- To send account, security, purchase and activity messages, and the optional weekly note you can unsubscribe from.
- To keep the Services safe, including moderation and preventing fraud and abuse.
- To find and fix problems and understand which features are used.
- To meet legal obligations and enforce our Terms.
We don't use automated decisions that have legal or similarly significant effects on you.
5. AI
What goes to AI, and to whom.
| Feature | What is sent | Provider |
|---|---|---|
| Card scan, pantry and receipt photos | Your photos | OpenAI |
| Voice and video recipes | The recording or its words | Deepgram, OpenAI |
| Links and pasted text | The page or text | OpenAI |
| Translation | The recipe | OpenAI |
| AI-made recipe photos | Your recipe's details | OpenAI |
| Automated moderation | Uploaded photos, text published to Discover, comments and family notes | OpenAI |
Your permission. ReciKey asks before sending photos, recordings or text to these services for the first time, one question per kind. Tap Not now and nothing is sent. You can withdraw permission in Settings > Privacy, and we'll ask again. Typed recipes never need AI.
Moderation is different. To keep people safe, we automatically check uploaded photos and content that others will see. It applies whether or not you use AI features, and it is the one AI use that doesn't ask first.
On your phone. On supported iPhones, ReciKey can transcribe a recording on the device. The words still go to OpenAI to be written up as a recipe.
Training. We don't use your content to train AI. Our requests to Deepgram opt out of its model improvement program. Our OpenAI account has data sharing turned off. Providers may keep data briefly for abuse monitoring or legal reasons under their own terms.
Speakers. A transcript may separate different speakers in one recording, so a conversation reads correctly. This doesn't identify who is speaking and doesn't build a voiceprint.
Accuracy. AI can misread a measurement, an ingredient or an allergen. Please check what it writes. AI-made photos are labelled in the app.
6. Who can see what
| Setting | Who can see it |
|---|---|
| Private | You |
| Family | The people you've connected with or share with |
| Discover | Anyone using ReciKey |
On Discover, your display name and photo appear with what you publish, and your state and country appear unless you turn that off. Other people can love, save and comment. If they save your recipe, they keep their own copy, including after you remove yours.
Other ways content is shared. Family plan members, the people you connect with, links and listen codes you create, and your legacy contact. Anyone with a link can use it until it is revoked or expires.
Once something has been shared, recipients may have saved or copied it, and we can't remove copies outside our systems.
7. Service providers
They process data for us to run the Services.
| Provider | Purpose |
|---|---|
| Supabase | Accounts, database, file storage |
| OpenAI | AI features and moderation |
| Deepgram | Speech transcription |
| Cloudflare | Website delivery and analytics, storage of video originals (R2) |
| Mux | Video processing and streaming |
| Backblaze | Encrypted backups |
| RevenueCat | Subscription status |
| Resend | Emails, including invitations you ask us to send |
| Google sign-in, support email, website analytics | |
| Apple | App distribution, Sign in with Apple, push notifications |
| Sentry | Crash reports, linked to your account ID only |
| PostHog | Anonymous usage counts, which you can turn off in Settings > Privacy |
| Expo | Delivering app updates |
| Have I Been Pwned | Checking whether a new password is known to be breached. Only part of a hash of the password is sent. |
| USDA, Open Food Facts | Nutrition and barcode lookups |
These providers' terms limit how they may use your information. For links you import, our servers read the page you asked for.
We don't sell personal information, or share it for cross-context behavioral advertising.
We may disclose information to comply with law or valid legal process, to protect people's safety or rights, or to investigate fraud or abuse. Where allowed, we'll try to tell you first. If the business is sold or reorganized, information may transfer, and the buyer must honor this Policy unless you are told otherwise as the law requires.
8. How long we keep information
| Information | How long |
|---|---|
| Account and content | Until you delete it or your account |
| Recently deleted recipes | 30 days, then removed |
| Exports | Download links last 7 days |
| Backups | Rolling, normally replaced within about 30 days |
| Crash and analytics data | Generally about 90 days |
| Server logs | Generally about 30 days |
| Support messages | As long as needed to help you and meet legal obligations |
| Reports and moderation records | As long as needed for safety and legal reasons, including after an account is deleted |
Deleting your account. Go to Settings > Delete Account. Your account is hidden at once and scheduled for deletion after a 30-day grace period, during which you can keep it by signing in. We then remove your content from our active systems and from our storage, video and subscription providers, and revoke Sign in with Apple. It leaves backups as they expire. Deletion doesn't cancel an App Store subscription, so cancel it in your Apple account settings. Copies others have saved stay with them.
Inactive accounts. If no one signs in for 2 years and an account stores more than the free allowance, we may delete videos above that allowance, oldest first, after email notice at least 60 and 14 days before. Recipes, photos and family tree data aren't deleted this way.
ReciKey isn't a guaranteed permanent archive. Please keep your own copies of what matters most.
9. When someone dies
You can name a legacy contact in Settings. If your account is inactive for the period you choose, we'll warn you by email. If you don't respond, we'll email your contact a private link, valid for 180 days, to your recipes, family cards (without your private notes) and media. Choosing someone is your instruction to share this with them.
A legacy contact can view and save what you've left. They can't sign in as you. We aren't an executor and don't decide disputes between relatives or heirs. A family member or estate representative may ask us to remove content, and we may ask for proof.
We won't create a synthetic version of any person's voice, living or dead.
10. Your rights
Wherever you live, you can see, export and correct your data, delete your account, withdraw AI permission and turn off analytics in the app, or write to us. We'll verify your identity first and won't treat you differently for asking.
California. You may have the right to know what we collect and why, to access, correct and delete it, and to limit use of sensitive personal information. You may use an authorized agent. We don't sell or share personal information as California defines those terms. The categories we collect are in Section 2, their sources are you and your devices, and the purposes and recipients are in Sections 4 and 7.
Health-related details. Allergies and diet are optional. We use them only for the features you add them for, we don't sell them, and you can remove them at any time.
11. Children
ReciKey is for people 13 or older, or the minimum age where you live if higher. We don't knowingly let younger children create accounts, and we delete such accounts when we learn of them. Parents and guardians can add details about their children, and can ask us to remove them.
12. Voice
Recordings are stored and played back as your content, and transcribed when you ask. We don't create voiceprints, don't use voice to identify anyone, and don't use voice data for sign-in.
13. Security
We use encryption in transit, encryption provided by our storage vendors, hashed passwords, database access rules, time-limited links for private media, and your device's Keychain for sign-in tokens. Recipes on your phone are stored for offline use and protected by your device's security, so please use a passcode. Photos published to Discover are public. No system is perfectly secure. If a breach affects you, we'll notify you as the law requires.
14. Cookies and tracking
The app has no advertising SDK, doesn't use Apple's advertising identifier, and doesn't track you across other companies' apps or sites. Our website, which is separate from the app, uses cookies and Google Analytics and Cloudflare Web Analytics to measure visits. These aren't connected to your ReciKey account, and we don't use them for advertising. We don't respond to Do Not Track signals, as there is no common standard.
15. Changes
We'll change the date above when we update this Policy, and give notice in the app or by email for material changes. We won't use information already collected in a materially different way, such as for AI training, without asking you first.
16. Contact
Son of a Good Man LLC, 435 E. Market St., Long Beach, California 90805, USA. support@sonofagoodman.com. If you need this Policy in another format, let us know.