Spoonful Privacy Policy

Last updated: September 20, 2026

Spoonful is a mobile app that creates recipes from photos of food. It is operated by  Dexterity Labs Inc. ("Dexterity Labs", "we", "us", "our"), a company incorporated under the laws of Canada.

This policy explains what personal information we collect when you use the Spoonful app and related services (the "Service"), why we collect it, who we share it with, and the choices you have. If you do not agree with this policy, please do not use the Service.

Questions? Contact us at contact@dexteritylabs.ca.

The short version

• You sign in with Google or Apple. We receive basic profile details from them, such as your name and email address.
• We store the photos you take, the recipes generated from them, and the preferences you give us during onboarding, including any dietary restrictions you select (such as vegetarian, vegan or gluten-free).
• To generate a recipe, your photo and relevant preferences are sent to third-party AI model providers. Your content is not used to train AI models.
• We do not sell your personal information, and we do not show ads.
• We do not use analytics or advertising trackers.
• You can delete individual recipes, or your entire account, from inside the app at any time.

1. Information we collect

Information you give us

• Account information. When you sign in with Google or Apple, we receive the profile details that provider shares with us. This typically includes your name, email address and, for Google, your profile picture. We never receive your Google or Apple password.
• Profile and preferences. Information you provide during onboarding or in settings, such as cooking preferences and any dietary restrictions you select from a fixed list (for example vegan, vegetarian, gluten-free or dairy-free).
• Photos. Images you capture or submit in the app so that a recipe can be generated.
• Recipes and related content. Recipes generated for you, plus any edits, notes or other content you save.
• Communications. Messages you send us, for example when you email support.
• Waitlist. If you join the waitlist on our website, we collect the email address you submit and use it only to contact you about Spoonful's launch.

Information collected automatically

• Technical and log data. When the app communicates with our servers, our hosting provider and our systems process information such as your IP address, device type, operating system, app version, timestamps and error details. We use this to run, secure and troubleshoot the Service.
• Session data. We store session tokens and similar identifiers so that you stay signed in.

We do not collect your precise location, contacts or advertising identifiers.

Sensitive information

We do not ask for health information. Some dietary restrictions you can select (for example gluten-free or dairy-free) may relate to a health condition, but we do not ask why you selected them and we do not draw any conclusions about your health from them. Selecting dietary restrictions is optional, and we use them only to tailor the recipes generated for you. You can change or remove them at any time in the app.

2. How we use your information

We use personal information to:

• create and manage your account and keep you signed in;
• generate, store and display your recipes and photos;
• personalize recipes using your preferences and dietary restrictions;
• respond to your questions and support requests;
• send you service-related messages, such as notices about changes to our terms or this policy;
• keep the Service secure, prevent abuse and fix problems;
• comply with legal obligations and enforce our Terms of Service.

We do not use your photos, recipes or preferences to train AI models, and we do not use your information for advertising.

3. How AI processing works

When you ask Spoonful to generate a recipe, we send your photo and the preferences needed to tailor the result (which may include your dietary restrictions) to our AI providers: OpenRouter, Google, Anthropic and OpenAI.

• We have enabled settings in our provider accounts that are intended to prevent your content from being used to train AI models.
• AI providers may temporarily process or retain request data to deliver their service and to detect abuse, according to their own terms and policies.

AI-generated recipes can be inaccurate. Please read the AI and food safety sections of our Terms of Service.

4. Who we share information with

We do not sell your personal information. We share it only as follows.

Service providers that process information on our behalf:

We do not use any other third-party services that receive your personal information. Spoonful is free, so we do not collect or receive any payment information.

Legal and safety reasons. We may disclose information if we believe in good faith that it is required by law or legal process, or necessary to protect the rights, property or safety of our users, the public or Dexterity Labs.

Business transfers. If we are involved in a merger, acquisition, financing or sale of assets, personal information may be transferred as part of that transaction, subject to this policy or one that is at least as protective.

Other users. Recipes and photos are private to your account. Spoonful has no sharing or publishing features, so nothing you create is visible to other users.

5. Where your information is stored and processed

We are based in Canada. Our service providers operate in other countries, in particular the United States, and Cloudflare operates a global network. This means your personal information may be stored and processed outside your province, territory or country of residence, including outside Quebec and outside Canada. While it is in another country, it is subject to that country's laws and may be accessible to its courts, law enforcement and national security authorities.

We use contractual and other measures designed to ensure that our service providers protect personal information to a standard comparable to the one described in this policy.

6. How long we keep information

• Account, preferences, recipes and photos: kept for as long as your account is open.
• Deleted recipes: when you delete a recipe, the recipe is deleted immediately and its photo is removed by our automated cleanup shortly afterwards, typically within two days.
• Photo analyses: the intermediate analysis we create from your photo is deleted automatically within 24 hours of your last activity on it, or within 30 days if we could not create a recipe from the photo.
• Leftover images: images that are no longer linked to a recipe or an analysis are removed through automated cleanup that runs daily.
• Account deletion: when you delete your account in the app, we delete your account information, preferences, recipes and photos from our active systems. Residual copies in backups and logs are removed within 30 days.
• Support emails and legal records: kept for as long as needed to resolve the matter and to meet our legal obligations.

7. How we protect information

We use reasonable technical and organizational safeguards appropriate to the sensitivity of the information, including encryption in transit, access controls and restricting access to those who need it. No system is perfectly secure, and we cannot guarantee absolute security. If a breach creates a real risk of significant harm to you, we will notify you and the relevant regulators as required by law.

8. Your choices and rights

Inside the app you can:

• view and edit your profile, preferences and dietary restrictions;
• delete individual recipes and their photos;
• delete your account and all associated data.

Depending on where you live, you may also have the right to:

• ask whether we hold personal information about you and request access to it;
• ask us to correct inaccurate information;
• ask us to delete your information;
• withdraw consent to our use of your information (this may mean you can no longer use some or all of the Service);
• receive a copy of your information in a portable format;
• object to or ask us to restrict certain processing;
• make a complaint to a privacy regulator.

To make a request, please contact us. We may need to verify your identity before acting on a request. We respond within the period required by law, which is generally 30 days. We will not treat you unfairly for exercising your rights.

Canada. If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada or your provincial privacy regulator, such as the Commission d'accès à l'information du Québec.

United States. We do not sell personal information, and we do not share it for cross-context behavioural advertising or targeted advertising. We use any information that could be considered sensitive (such as dietary restrictions) only to provide the Service. Depending on your state, you may have the rights listed above, plus the right to appeal a decision we make about your request. To appeal, reply to our decision email and tell us you are appealing.

9. Children

Spoonful is intended for adults. You must be at least 18 years old to create an account, and we do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has given us personal information, contact us and we will delete it.

10. Third-party services

When you sign in with Google or Apple, their handling of your information is governed by their own privacy policies. The Service may contain links to other websites or services that we do not control. We are not responsible for their privacy practices.

11. Changes to this policy

We will update this policy as the Service changes. When we do, we will change the "Last updated" date above. If a change is significant, we will let you know in the app or by email before it takes effect. Where the law requires your consent to a change, we will ask for it.

12. Contact us

Dexterity Labs Inc.
Attn: Privacy Officer
2 Parkwood Court
Tillsonburg, ON N4G 4J9
Canada

Email: contact@dexteritylabs.ca