Privacy Policy

Introduction

Son of a Good Man LLC ("Company," "we," "our," or "us"), a limited liability company organized under the laws of the State of California and located in Long Beach, California, respects your privacy and is committed to protecting your personal information.

This Privacy Policy ("Policy") explains how we collect, use, disclose, and safeguard your information when you use the ReciKey mobile application, the recikey.sonofagoodman.com website, and any related services (collectively, the "Services").

Other Son of a Good Man LLC products or applications may be governed by separate privacy policies.

This Policy works together with our Terms of Service. Capitalized terms not defined here have the meanings given in our Terms of Service.

By accessing or using the Services, you acknowledge that you have read and understood this Policy. If you do not agree with our practices, please do not use the Services.

Privacy at a Glance

1. Information We Collect

1.1 Information You Provide

When you create an account or use the Services, you may provide:

• Account information: name, email address, password (stored hashed using industry-standard algorithms, never in plaintext), and optional profile photo.
• Recipe content: recipe text, ingredient lists, cooking instructions, recipe titles, and family attribution.
• Media content: photos of recipes or handwritten cards, audio recordings of recipe interviews, and cooking videos.
• Family tree information: names, relationships, optional birthdays, and photos of family members you add to your tree.
• Family stories and notes: memories, narrative text, and personal context attached to recipes.
• Communications: support requests, feedback, survey responses, and other correspondence.

1.2 Information We Collect Automatically

When you use the Services, we automatically collect:

• Device data: device type, operating system and version, browser type, screen size, and language settings.
• Usage data: features used, screens viewed, in-app actions, session length, and errors encountered.
• Log data: access timestamps and IP address, used only to derive approximate country or region and not retained as a precise identifier beyond the period stated in Section 4.
• Crash and performance data: stack traces, app version at crash, and anonymized device identifiers collected through Sentry and similar monitoring tools.

1.3 Information from Third-Party Login Providers

If you sign in using Google or Apple, we receive limited profile information from the provider, including:

• Name, if shared;
• Email address, or an Apple relay email if you use "Hide My Email";
• A unique provider ID.

We do not receive your password from these providers. We do not access your contacts, calendar, or other data unless you specifically grant permission.

1.4 Permissions and Sensor Data (Mobile Apps)

ReciKey requests the following permissions only when required for a specific feature:

• Camera: photographing recipes and recipe cards; recording recipe videos.
• Microphone: recording voice notes and Interview Mode audio.
• Photo Library: selecting existing photos and saving recipe images.
• Push Notifications: cooking timer alerts and family activity notifications.
• Biometric Authentication (Face ID / Touch ID / Fingerprint): optional quick re-login on your device. Biometric verification occurs entirely on your device; we never receive or store biometric data.
• Background Audio (iOS): continuing voice playback while the app is in the background.

Denying these permissions will only disable the related feature. The remainder of the app will continue to function.

1.5 Push Notification Tokens

If you enable notifications, your device's push notification token may be stored in your account so notifications can be delivered. You may disable notifications at any time through your device settings.

1.6 Subscription and Payment Information

When you purchase a paid subscription:

• Apple App Store or Google Play processes the payment directly. We never receive your full credit card or banking information.
• RevenueCat, Inc. provides subscription status, renewal, and cancellation information so that we can manage access levels.
• Promotional code redemptions may be recorded for accounting purposes.

1.7 Information About Other People You Add

ReciKey allows you to add information about family members and others to your account, including names, relationships, photos, birthdays, and audio recordings.

By adding information about another person, you represent and warrant that:

• You have the authority and, where required, the consent of that individual to add their information to ReciKey;
• For minors, you are the parent or legal guardian, or have obtained consent from a parent or legal guardian;
• You will respond to any reasonable request from that individual to remove their information from your account.

If you believe someone has added your information to ReciKey without your consent, please contact support@sonofagoodman.com. We will work in good faith to address such requests, which may include removing the information from the relevant user's account.

1.8 Ownership of Your Content

You retain ownership of the recipes, photos, videos, audio recordings, family stories, and other content you upload or create within ReciKey ("User Content").

By uploading or submitting User Content to the Services, you grant Son of a Good Man LLC a limited, non-exclusive, revocable license to host, store, reproduce, process, display, and transmit the User Content solely for the purpose of operating, maintaining, improving, and providing the Services to you and those with whom you choose to share content.

We do not claim ownership of your User Content.

Nothing in this Privacy Policy transfers ownership of User Content, trademarks, copyrights, trade dress, or other intellectual property rights to Son of a Good Man LLC except for the limited operational rights expressly described herein.

1.9 Sensitive Information

ReciKey is designed for preserving family recipes, stories, and memories. Users should avoid uploading highly sensitive information that is not necessary for the operation of the Services, including:

• government-issued identification numbers;
• financial account credentials;
• medical records;
• highly confidential legal documents;
• sensitive biometric identifiers.

While we implement safeguards to protect information, no storage platform should be considered a replacement for dedicated secure archival or legal document systems.

2. How We Use Your Information

We use your information for the following purposes:

• Providing, operating, maintaining, and securing the Services;
• AI-powered transcription, OCR, recipe structuring, smart imports, translation, and accessibility features;
• Authenticating users and securing accounts;
• Sending account, transactional, and security communications;
• Sending push notifications, where enabled;
• Improving the reliability, accessibility, usability, and security of the Services;
• Debugging, analytics, and aggregate usage analysis;
• Preventing fraud, abuse, and security incidents;
• Enforcing our Terms of Service;
• Complying with legal obligations and responding to lawful requests;
• Defending against legal claims and protecting our rights, property, and the safety of users.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising as those terms are defined under California law.

We do not use automated decision-making that produces legal or similarly significant effects on users.

2.1 Legal Bases for Processing (EEA, UK, and Switzerland)

If you are located in the European Economic Area, United Kingdom, or Switzerland, our legal bases for processing your personal information are:

• Contract: to provide the Services you have requested, including account creation, recipe storage, AI transcription and structuring, and subscription management.
• Legitimate interests: to improve and secure the Services, prevent fraud and abuse, analyze product usage in aggregated form, and defend legal claims.
• Consent: for optional features such as push notifications, microphone access, and analytics where required by local law.
• Legal obligation: to comply with applicable laws, including tax, accounting, and law enforcement requirements.

You may withdraw consent at any time where processing is based on consent.

3. How We Share Information

We share information only in the limited circumstances described below. We do not sell personal information to advertisers or data brokers.

3.1 Service Providers

We use third-party service providers to operate the Services, including:

• Supabase, Inc., authentication, database, and file storage;
• OpenAI OpCo, LLC, speech transcription, OCR, translation, recipe structuring, and image generation;
• Deepgram, Inc., speech transcription and audio processing;
• RevenueCat, Inc., subscription management;
• Functional Software, Inc. d/b/a Sentry, crash reporting and performance monitoring;
• PostHog Inc., product analytics;
• Mux, Inc., secure video processing, streaming, encoding, and playback analytics;
• Cloudflare, Inc., content delivery and DDoS protection;
• Apple Inc., App Store distribution and Sign in with Apple;
• Google LLC, Google Play distribution, Sign in with Google, and Google Analytics for our marketing website;
• HubSpot, Inc., customer relationship management, support, and feedback handling (where configured).

Each provider is contractually required to protect your information and process it only according to our instructions and applicable law.

A current list of subprocessors is available upon request at support@sonofagoodman.com.

3.2 AI Processing Disclosure

When you use AI-powered features such as transcription, OCR, recipe structuring, smart imports, translation, or AI-assisted organization, the relevant content is securely transmitted to approved AI service providers, including OpenAI and other providers used to support specific app functionality.

Under our current agreements and applicable API terms as of the Effective Date of this Policy:

• Content submitted through API-based AI services is not used to train our own AI systems;
• We do not permit AI providers to use your content for advertising profiling or behavioral targeting;
• AI providers may temporarily retain limited data for abuse monitoring, security, or legal compliance purposes consistent with their policies and agreements with us.

AI-generated outputs may contain inaccuracies, formatting errors, incorrect transcriptions, or incomplete recipe interpretations. Users are responsible for reviewing AI-generated content before relying on it.

Except where necessary for security investigations, abuse prevention, legal compliance, debugging with user permission, or support requests initiated by you, we do not intentionally review the contents of private recipes, recordings, or family stories.

Your original files and AI-generated outputs remain stored in your ReciKey account unless you delete them.

You may avoid AI processing entirely by manually entering recipes instead of using AI-assisted features. Disabling AI features does not affect the core functionality of the Services.

We will provide notice where legally required if future AI features materially change how user content is processed.

3.3 Legal Requirements

We may disclose information if we believe in good faith that it is necessary to:

• Comply with applicable laws, regulations, court orders, subpoenas, or other legal process;
• Enforce our Terms of Service or this Policy;
• Detect, prevent, or address fraud, security, or technical issues;
• Protect the rights, property, or safety of Son of a Good Man LLC, our users, or the public.

We may also preserve or disclose information where we believe doing so is reasonably necessary to:

• prevent imminent harm or threats to safety;
• investigate abuse, harassment, fraud, or illegal activity;
• protect users, minors, or the public;
• comply with emergency legal disclosure requests.

Where legally permitted, we may seek to narrow or challenge requests we believe are overbroad.

Where legally permitted, we will attempt to notify you of legal requests for your information.

3.4 Family Sharing

If you share recipes with family members through ReciKey, recipients may receive associated photos, stories, audio, and contributor names.

Content shared with other users may remain accessible to recipients who previously viewed, exported, downloaded, screen-recorded, or saved copies of the content outside of ReciKey.

Additionally, family members who were previously granted shared access may retain access to shared content unless sharing permissions are revoked or deletion is technically feasible and legally required.

We cannot guarantee removal of copies stored outside our systems.

3.5 Business Transfers

If Son of a Good Man LLC is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our assets, user information may be transferred as part of that transaction.

Any successor entity will be required to honor the commitments in this Privacy Policy unless users are notified otherwise and given rights required by applicable law.

We will notify users of material ownership or privacy changes where required by law.

3.6 Video and Media Streaming

If you upload or stream video or audio content through ReciKey, media files may be processed and delivered using Mux and related infrastructure providers for secure playback, adaptive streaming, encoding, delivery optimization, and performance monitoring.

Playback analytics may include generalized technical information such as:

• buffering events;
• playback quality;
• device type;
• approximate region;
• session timestamps.

We do not use media analytics for advertising profiling or behavioral advertising.

4. Data Retention

We retain personal information only as long as reasonably necessary for the purposes described in this Policy.

• Account Information, retained while your account is active.
• Recipe Content and Media, retained while your account is active.
• Subscription Records, retained for 7 years from the last transaction for tax and accounting compliance.
• Crash and Analytics Data, retained for 90 days unless anonymized sooner.
• Server Access Logs, retained for 30 days.
• Support Communications, retained for 3 years from your last interaction.

Upon account deletion:

• deleted data is removed from active systems within 30 days;
• residual encrypted backup copies are purged within an additional 30 days.

We may retain limited information longer where required by law, contract, fraud prevention, or legal defense purposes.

4.1 Inactive Accounts

We may preserve inactive accounts and family recipe archives for extended periods in order to maintain continuity of family-shared content unless deletion is requested by the account owner or otherwise required by law.

We may eventually delete inactive accounts after prolonged periods of inactivity consistent with our operational needs and legal obligations.

4.2 No Guaranteed Archival or Backup Service

While we strive to maintain reliable storage and backups, ReciKey is not intended to function as a guaranteed archival, legal recordkeeping, or permanent backup service.

Users are encouraged to maintain independent backups of important family recipes, recordings, and memories.

5. Your Privacy Rights

5.1 Rights Available to All Users

You may:

• Access and export your data;
• Correct inaccurate information;
• Delete your account and associated data;
• Withdraw consent for optional features at any time.

You may submit requests through the app or by contacting support@sonofagoodman.com.

5.2 California Residents (CCPA / CPRA)

California residents have the right to:

• Request access to personal information collected;
• Request correction of inaccurate information;
• Request deletion of personal information;
• Limit the use of sensitive personal information;
• Opt out of any sale or sharing of personal information;
• Be free from unlawful discrimination for exercising privacy rights.

We do not sell or share personal information for cross-context behavioral advertising.

5.3 GDPR / UK GDPR Rights

Residents of the EEA, UK, and Switzerland additionally have the right to:

• Restrict certain processing activities;
• Object to processing based on legitimate interests;
• Request data portability;
• Withdraw consent at any time;
• Lodge complaints with supervisory authorities.

6. International Data Transfers

Our Services and providers primarily operate in the United States.

Where legally required, we rely on Standard Contractual Clauses, the UK International Data Transfer Addendum, the Swiss-U.S. Data Privacy Framework principles where applicable, or other lawful transfer mechanisms.

You may request additional information regarding transfer safeguards by contacting support@sonofagoodman.com.

7. Children's Privacy

The Services are not directed to children under 13 years of age (or under 16 in certain jurisdictions), and we do not knowingly allow such children to independently create accounts.

Adult account holders may add information about minor family members to family trees or shared archives.

By adding information about a minor, you confirm that you are authorized to do so.

If you believe a child has provided information improperly, please contact support@sonofagoodman.com.

8. Security

We implement administrative, technical, and physical safeguards designed to protect your information, including:

• Encryption in transit (TLS 1.2 or higher);
• Encryption at rest;
• Hashed passwords using industry-standard algorithms;
• Database Row-Level Security (RLS);
• Access controls and audit logging;
• Infrastructure monitoring and anomaly detection.

We regularly review access controls, monitor infrastructure activity, and work with trusted providers that maintain industry-standard security practices.

We encourage users to:

• use strong and unique passwords;
• enable biometric or device-level protections;
• keep devices updated;
• carefully manage family-sharing permissions.

However, no system can guarantee absolute security.

8.1 Data Breach Notification

In the event of a data breach affecting personal information, we will notify affected users and applicable authorities as required by law.

9. Biometric and Voice Data

ReciKey allows users to record audio, including family interviews and voice notes.

We do not:

• create or store voiceprints;
• use voice recordings for identity verification;
• use biometric identifiers derived from voice data.

Voice recordings are used solely to provide requested app functionality, such as transcription, playback, and preservation of family recipe content.

Biometric authentication features such as Face ID or fingerprint unlock are processed entirely on your device by your operating system.

We never receive or store biometric authentication data.

10. Cookies and Similar Technologies

The Services use limited cookies and similar technologies for:

• authentication and session management;
• analytics and debugging;
• storing user preferences.

We do not use cookies for cross-site behavioral advertising.

10.1 Do Not Track

Because there is no accepted industry standard for responding to "Do Not Track" browser signals, the Services do not currently respond to them.

10.2 Analytics and Tracking Limitations

We use analytics tools to understand overall product usage, improve reliability, diagnose crashes, and enhance accessibility and usability.

We do not use analytics providers to:

• build advertising profiles about users;
• sell behavioral data;
• record private recipes or family stories for advertising purposes;
• conduct cross-context behavioral advertising.

We do not use third-party advertising SDKs within ReciKey.

Analytics data is collected in aggregated or pseudonymized form wherever reasonably possible.

10.3 App Tracking Transparency (ATT) and Advertising Identifiers

ReciKey does not track you across apps or websites owned by other companies, and does not access or use Apple's Advertising Identifier (IDFA). Because we do not engage in "tracking" as defined by Apple's App Tracking Transparency framework, the app does not present the App Tracking Transparency permission prompt. Our analytics rely only on the anonymous or pseudonymous identifiers described above. You can review Apple's information on App Tracking Transparency at https://support.apple.com/en-us/HT212025.

11. Third-Party Links

The Services may contain links to third-party websites or services. We are not responsible for their privacy practices.

12. Accessibility

If you require this Policy in an alternative format due to a disability, please contact support@sonofagoodman.com.

13. Changes to This Privacy Policy

We may update this Policy periodically.

When material changes occur:

• the "Last Updated" date will change;
• reasonable notice may be provided through the app, website, or email where required by law.

Continued use of the Services after changes become effective constitutes acceptance of the revised Policy.

14. Trademark

ReciKey and the ReciKey logo are trademarks of Son of a Good Man LLC.

15. Governing Law and Dispute Resolution

This Policy is governed by the laws of the State of California.

Disputes relating to this Policy are subject to the dispute resolution provisions set forth in our Terms of Service, including any arbitration agreement and class action waiver.

16. Severability

If any provision of this Policy is found unenforceable, the remaining provisions remain in effect.

17. Contact Us

If you have questions regarding this Policy or wish to exercise your privacy rights, please contact:

Son of a Good Man LLC

435 E. Market St.

Long Beach, California 90805

USA

General Support: support@sonofagoodman.com

Privacy Inquiries: support@sonofagoodman.com

To request account deletion, email support@sonofagoodman.com.

You may also request deletion directly within the ReciKey app under: Settings → Account → Delete Account.