1. Who is responsible
The controller responsible for processing your personal data is Artur Ferreira, Switzerland. For any privacy question or to exercise your rights, contact privacy@tevori.app.
2. What data we process
We process the following categories of data:
- Account data: name, email address, and authentication identifiers, handled by our authentication provider (Clerk).
- Household content: inventory items, shopping lists, recipes, and household membership — the data you create by using the product.
- Usage & device data: pages viewed, features used, approximate interactions, browser/device type, and similar technical signals (only if analytics are enabled — see section 5).
- Communications: household invitation emails and messages you send us for support.
3. Why we process it (purposes & legal bases)
- To provide the service and your account — performance of a contract.
- To import a recipe from a URL you submit — performance of a contract.
- To send household invitations you request — performance of a contract.
- To keep the service secure, prevent abuse, and improve it — legitimate interest.
- To understand product usage via privacy-respecting analytics, where enabled — legitimate interest or consent depending on your region.
4. AI processing
When a recipe page does not contain usable structured recipe data, the page content and source URL may be sent through OpenRouter to extract the recipe you requested. We do not send your household inventory with that request. Always review an imported recipe before saving or cooking it.
5. Analytics
Tevori may use PostHog to understand how the product is used so we can improve it. Analytics are only active when explicitly configured for a deployment. Where used, analytics requests are routed through our own domain. We aim to avoid collecting unnecessary personal data and you can object to analytics processing by contacting us.
6. Service providers (processors)
We rely on the following categories of providers, who process data on our behalf under appropriate agreements:
- Authentication & identity (Clerk)
- Application database & backend hosting (Convex)
- Application hosting / delivery (our hosting provider)
- Recipe import processing (OpenRouter)
- Transactional email (Resend)
- Product analytics, where enabled (PostHog)
- Product reference data (Open Food Facts) — used to look up product information; this involves product barcodes/names, not your identity.
7. International transfers
Some providers may process data outside Switzerland or the EU/EEA. Where this happens, we rely on appropriate safeguards (such as adequacy decisions or standard contractual clauses) to protect your data. We prefer EU-region processing where a provider offers it.
8. Retention
We keep your account and household data for as long as your account is active. When you delete your account or specific content, we delete or anonymise the associated personal data within a reasonable period, except where we must retain certain records to comply with legal obligations.
9. Your rights
Subject to applicable law, you have the right to access, rectify, delete, and restrict processing of your personal data, to data portability, and to object to certain processing. You may also withdraw consent at any time without affecting prior processing. To exercise any right, contact privacy@tevori.app. You also have the right to lodge a complaint with your competent data protection authority (in Switzerland, the FDPIC; in the EU, your national authority).
10. Cookies & local storage
We use strictly necessary cookies and local storage to keep you signed in and to remember preferences (for example your theme). Where analytics are enabled, additional identifiers may be set as described above.
11. Changes to this policy
We may update this policy as the product evolves or legal requirements change. Material changes will be reflected by updating the date at the top of this page.