Privacy Policy
Last Updated: February 22, 2026
Effective Date: February 22, 2026
Introduction
Son of a Good Man LLC ("Company," "we," "our," or "us"), a limited liability company organized under the laws of California and located in Pasadena, California, respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the ReciKey mobile application, the recikey.sonofagoodman.com website, and any related services (collectively, the “Services”).
Other Son of a Good Man LLC products (such as Shelfmark) maintain their own separate privacy policies.
This policy works together with our Terms of Service.
By using the Services, you agree to the practices described in this Privacy Policy.
1. Information We Collect
1.1 Information You Provide
When you create an account or use the Services, you may provide:
• Account information: name, email address, password (stored hashed, never in plaintext), and optional profile photo
• Recipe content: recipe text, ingredient lists, cooking instructions, recipe titles, and family attribution
• Media content: photos of recipes or handwritten cards, audio recordings of recipe interviews, and cooking videos
• Family-tree information: names, relationships, birthdays (optional), and photos of family members added to your tree
• Family stories and notes: memories, narrative text, and personal context attached to recipes
• Communications: support requests, feedback, and other correspondence
1.2 Information We Collect Automatically
When you use the Services, we automatically collect:
• Device data: device type, operating system and version, browser type, screen size, and language settings
• Usage data: features used, screens viewed, in-app actions, session length, and errors encountered
• Log data: access timestamps and IP address (used only to derive approximate country or region and not stored long-term as a precise identifier)
• Crash and performance data: stack traces, app version at crash, and anonymized device identifiers collected through Sentry
1.3 Information from Third-Party Login Providers
If you sign in using Google or Apple, we receive limited profile information from the provider, including:
• Name (if shared)
• Email address (or Apple relay email if you use “Hide My Email”)
• Unique provider ID
We do not receive your password from these providers.
We do not access your contacts, calendar, or other data unless you specifically grant permission.
1.4 Permissions and Sensor Data (Mobile Apps)
ReciKey requests the following permissions only when required for a specific feature:
• Camera — Photographing recipes and recipe cards; recording recipe videos
• Microphone — Recording voice notes and Interview Mode audio
• Photo Library — Selecting existing photos and saving recipe images
• Push Notifications — Cooking timer alerts and family activity notifications
• Biometric Authentication (Face ID / Touch ID / Fingerprint) — Optional quick re-login on your device
• Background Audio (iOS) — Continuing voice playback while the app is backgrounded
Denying these permissions will only disable the related feature. The remainder of the app will continue functioning normally.
1.5 Push Notification Tokens
If you enable notifications, your device’s push notification token may be stored in your account so notifications can be delivered properly.
You may disable notifications at any time through your device settings.
1.6 Subscription and Payment Information
When you purchase a paid subscription:
• Apple App Store or Google Play processes the payment directly
• We never receive your full credit card or banking information
• RevenueCat provides subscription status, renewal, and cancellation information so we can manage access levels
• Promotional code redemptions may be recorded
2. How We Use Your Information
We use your information for the following purposes:
• Providing and operating the Services
• AI transcription, OCR, and recipe structuring
• Sending account and security communications
• Sending push notifications (if enabled)
• Improving the Services and fixing issues
• Preventing fraud and security incidents
• Complying with legal obligations
• Defending legal claims
We do not sell or share personal information for cross-context behavioral advertising under California law.
We do not use automated decision-making that produces legal or similarly significant effects on users.
3. How We Share Information
We share information only in the limited circumstances described below.
We do not sell personal information to advertisers or data brokers.
3.1 Service Providers
We use third-party service providers to operate the Services, including:
• Supabase, Inc. — Authentication, database, and file storage
• OpenAI, OP CO LLC — Speech transcription, OCR, and recipe structuring
• RevenueCat, Inc. — Subscription management
• Sentry — Crash reporting and performance monitoring
• PostHog Inc. — Product analytics
• Apple Inc. — App Store distribution and Sign in with Apple
• Google LLC — Google Play distribution and Sign in with Google
• Cloudflare, Inc. — Content delivery and DDoS protection
Each provider is contractually required to protect your information and process it only according to our instructions.
3.2 AI Processing Disclosure
When you use AI-powered features such as transcription, OCR, or recipe structuring, the relevant content may be securely sent to OpenAI’s API for processing.
According to OpenAI’s API policies, submitted content is not used to train public AI models and is retained only briefly for abuse monitoring.
Your original files and generated outputs remain stored in your ReciKey account unless deleted by you.
You may avoid AI processing entirely by manually entering recipes instead of using AI features.
3.3 Legal Requirements
We may disclose information if necessary to:
• Comply with laws or legal requests
• Enforce our Terms of Service or this Privacy Policy
• Detect or prevent fraud, abuse, or security issues
• Protect the safety, rights, or property of users or the public
3.4 Family Sharing
If you share recipes with family members through ReciKey, recipients may receive associated photos, stories, audio, and contributor names.
Copies saved by recipients may remain accessible even if original sharing access is later removed.
3.5 Business Transfers
If Son of a Good Man LLC is involved in a merger, acquisition, financing event, or asset sale, user information may transfer as part of that transaction.
Users will be notified of material ownership or privacy changes where required by law.
4. Data Retention
We retain personal information only as long as reasonably necessary.
• Account Information — While active; deleted within 30 days of account deletion
• Recipe Content and Media — While active; deleted within 30 days of account deletion
• Subscription Records — 7 years for accounting and tax compliance
• Crash and Analytics Data — 90 days before anonymization
• Server Access Logs — 30 days
• Backups — Up to 30 days after deletion
• Support Communications — 3 years from last interaction
5. Your Privacy Rights
5.1 Rights Available to All Users
You may:
• Access and export your data
• Correct inaccurate information
• Delete your account and associated data
• Withdraw consent for optional features
5.2 California Residents (CCPA / CPRA)
California residents may:
• Request access to collected information
• Request correction of inaccurate information
• Request deletion of personal information
• Limit use of sensitive personal information
• Opt out of any sale or sharing of personal information
We do not sell or share personal information for cross-context behavioral advertising.
Requests may be submitted to:
5.3 GDPR / UK GDPR Rights
Residents of the European Economic Area, United Kingdom, and Switzerland may additionally:
• Restrict certain processing activities
• Object to processing based on legitimate interest
• Request data portability
• Withdraw consent at any time
• Lodge complaints with supervisory authorities
6. International Data Transfers
Our Services and providers primarily operate in the United States.
By using the Services, you understand that information may be processed in the United States and other countries where privacy laws may differ from those in your jurisdiction.
Where required, we rely on Standard Contractual Clauses approved by relevant authorities.
7. Children’s Privacy
The Services are not directed toward children under 13 years of age.
We do not knowingly collect personal information from children under 13.
If such information is discovered, it will be deleted promptly.
Parents or guardians who believe a child has provided information may contact:
8. Security
We implement safeguards designed to protect your information, including:
• Encryption in transit (TLS 1.2 or higher)
• Encryption at rest
• Hashed passwords
• Database Row-Level Security (RLS)
• Internal access controls and audit logging
However, no system can guarantee absolute security.
9. Cookies and Similar Technologies
The website uses limited cookies and similar technologies for:
• Authentication
• Session management
• Product analytics
We do not use cookies for cross-site advertising or behavioral tracking.
10. Third-Party Links
The Services may contain links to third-party websites or services.
We are not responsible for the privacy practices of those third parties.
Users should review third-party privacy policies independently.
11. Changes to This Privacy Policy
We may update this Privacy Policy periodically.
When material changes occur:
• The “Last Updated” date will be revised
• Advance notice may be provided through the app, website, or email
Continued use of the Services after updates constitutes acceptance of the revised policy.
12. Trademark
ReciKey™ and the ReciKey logo are trademarks of Son of a Good Man LLC.
All other trademarks, logos, and product names referenced in the Services belong to their respective owners.
13. Contact Us
If you have questions regarding this Privacy Policy or wish to exercise your privacy rights, please contact:
Son of a Good Man LLC
Long Beach, California, USA
Email: support@sonofagoodman.com
To request account deletion, visit:
https://www.sonofagoodman.com/request-account-deletion