Privacy Policy

This Privacy Policy covers all CodeCraft LLC applications:

• The Oracle's Handbook (Android) — Tarot, astrology, and esoteric study app. All reading data is stored locally on your device. No account required for free features; in-app purchases are processed through Google Play.
• Hiram's Vault (iOS & Android) — Community platform for Arkansas Masons. Requires an account; stores user profiles, messages, and lodge data via Supabase.
• Food Sentinel (iOS & Android) — Food allergen checking, recipes, meal planning, and food-sensitivity tracking. No account required. Your excluded ingredients, meal plans, shopping lists, and sensitivity log are stored on your device. Searches, barcode lookups, recipe browsing, and AI features send the information needed to answer them to our servers and the providers listed in Section 5. Displays ads via Google AdMob — see Section 4.
• Auris Reader (iOS & Android) — Text-to-speech document reader. All documents and playback state are stored locally. No account or internet connection required.
• Weather Navigation (iOS & Android) — Route-based weather planning app. Uses GPS location and Google Maps to fetch NWS weather forecasts along your route — see Section 6 for details.
• Performance Tracker (iOS & Android) — Multi-sport performance tracker. All data is stored locally on your device. Uses GPS to tag session locations; no location data leaves your device.

We strive to collect the minimum necessary information. Depending on the app and features you use, this may include:

• Account data — name and email address, for apps that require an account (Hiram's Vault).
• Device & usage data — authentication logs, error logs, and crash reports (which can include your IP address, device model, and OS version) used only to secure, operate, and fix the Services.
• Location data — GPS coordinates, used in Weather Navigation to fetch route weather and in Performance Tracker to tag session locations locally. Neither app stores or transmits your precise location to our servers.
• Advertising data — collected by Google AdMob within Food Sentinel (see Section 4).
• Food and feature requests — in Food Sentinel, the searches, barcodes, recipe requests, and AI questions you submit (see Section 5).
• Health information — in Food Sentinel, the symptoms you track, when you ate a food and when an issue started, and your notes. This is stored on your device and only leaves it when you run an AI comparison (see Section 5).
• Content you submit — in Food Sentinel, product names, barcodes, and ingredient lists you add, which are shared with other users (see Section 5).

We do not collect personal information for our own marketing or advertising purposes.

• Authenticate users and maintain accounts;
• Provide core functionality (e.g., messaging, content storage, sync);
• Fetch external data on your behalf (e.g., food, ingredient, and recipe data, NWS forecasts);
• Generate AI responses you request;
• Protect our servers from abuse (e.g., verifying that requests come from a genuine copy of the app);
• Monitor, maintain, and improve performance and security;
• Provide support and respond to inquiries;
• Comply with legal obligations and enforce our terms.

Food Sentinel displays advertisements served by Google AdMob, a third-party advertising service operated by Google LLC. To serve and measure ads, AdMob may collect:

• Device advertising identifiers (Android Advertising ID / Apple IDFA);
• IP address and coarse location;
• App interaction and usage data.

This data is governed by Google's Privacy Policy. CodeCraft LLC does not receive or store the advertising data that AdMob collects. Where required (for example, in the EEA, UK, and Switzerland), Food Sentinel asks for your consent before showing personalized ads, and on iOS it asks for permission before tracking.

You can opt out of personalized advertising at any time:

• Android: Settings → Google → Ads → “Delete advertising ID” or “Opt out of Ads Personalization.”
• iOS: Settings → Privacy & Security → Tracking — disable “Allow Apps to Request to Track,” or reset your Advertising Identifier.

Food Sentinel has no accounts and does not ask for your name or email. Data stored on your device (excluded ingredients, meal plans, shopping lists, and your sensitivity log) stays there unless a feature below sends it. Requests go through our server, hosted on Vercel, which passes them to the provider and does not store their contents.

• Food search and barcode lookups — your search text or barcode is sent to the USDA FoodData Central API and Open Food Facts. The camera is used only on your device to read barcodes; no images are sent.
• Recipes and videos — recipe searches are sent to Spoonacular, TheMealDB, and FatSecret, along with your excluded ingredients as filters for Spoonacular. Recipe names are sent to the YouTube API Services to find matching videos (see Section 7).
• AI ingredient substitutions (Chef AI) — the dish, the ingredient, and your excluded ingredients are sent to Google Gemini.
• Sensitivity tracking and AI comparison — the symptoms you track and the foods, times, and notes you log are stored only on your device. When you tap Compare, and only after you agree in the app, that section's foods and ingredients, the symptom, your times and notes, and your excluded ingredients are sent to Google Gemini to generate the comparison. We do not store the request or the result. Please keep personal details out of your notes.
• Shared ingredient lists — when you add a product with a barcode in sensitivity tracking, its barcode, product name, and ingredient list are saved to a shared database (hosted on Supabase) to help all users look products up. Your symptoms, times, notes, and anything identifying you are never included.
• Reporting AI answers — if you report an AI answer, the question, the answer, and any reason you give are sent to us through Sentry.
• Voice input — the shopping list's microphone uses your device's built-in speech recognition (Apple or Google), which may process your audio on their servers under their privacy policies. We do not receive the audio.
• App integrity — Firebase App Check (Google) uses Play Integrity on Android and App Attest on iOS to confirm requests come from the genuine app.
• Crash reports — Sentry receives crash and error reports, which can include your IP address, device model, and OS version.

Gemini requests are processed by Google under its Gemini API terms and Privacy Policy. AI features are intended for users 18 and older.

Weather Navigation requests access to your device's GPS to determine your current position and plot routes. Your location is used solely to:

• Fetch weather forecasts from the National Weather Service (NWS) at waypoints along your route;
• Power turn-by-turn navigation via the Google Maps SDK.

We do not store your location history on our servers. Route data and location queries are transmitted in real time to NWS and Google Maps solely to fulfill your navigation request and are subject to their respective privacy policies: NWS Privacy Policy and Google Privacy Policy.

Food Sentinel uses the YouTube API Services to find recipe videos. By using that feature you agree to be bound by the YouTube Terms of Service, and Google's use of data is governed by the Google Privacy Policy. We do not access your YouTube or Google account. You can review and revoke any app's access to your Google account at Google security settings.

We do not sell or rent personal information. We may share information with trusted service providers solely to operate the Services:

• Supabase — account login, authentication, database, and messaging for apps that require an account (Hiram's Vault), and the shared ingredient database in Food Sentinel.
• Google AdMob — serves ads within Food Sentinel (see Section 4).
• Google Gemini — generates AI responses in Food Sentinel (see Section 5).
• Google Firebase App Check — verifies requests come from our genuine apps.
• Sentry — crash and error reporting.
• Vercel — hosts our website and the server our apps call.
• Google Maps — provides routing and map display within Weather Navigation (see Section 6).
• Food and recipe data sources — USDA FoodData Central, Open Food Facts, Spoonacular, TheMealDB, FatSecret, and the YouTube API Services receive only the search text, barcodes, and filters needed to answer a request.

These providers may only use information to deliver contracted services and must protect it using appropriate safeguards. We may also disclose information if required by law or to protect the rights, property, or safety of our users or others.

We employ reasonable and appropriate administrative, technical, and physical safeguards designed to protect information against unauthorized access, disclosure, alteration, and destruction. No security measures are perfect; if we learn of a security incident that affects your information, we will take steps consistent with applicable law to notify you.

We retain personal information only for as long as necessary to provide the Services, comply with our legal obligations, resolve disputes, and enforce agreements. When data is no longer needed, we delete or de-identify it in a reasonable timeframe. Crash reports are kept for a limited period and then deleted automatically. Shared ingredient lists contain no personal information and are kept to help other users. Data stored locally on your device is under your control and can be removed by clearing it in the app where that option exists, clearing the app's storage, or uninstalling the app.

You may request to access, correct, or delete personal information that we maintain about you. To exercise these rights, contact us using the details below. We may need to verify your identity to help protect your account and data. If we deny a request, we will explain the reason as permitted by law, and you may appeal by replying to our decision. We will not discriminate against you for exercising your rights.

You may also manage location, camera, microphone, and tracking permissions for any of our apps through your device's system settings at any time.

U.S. state privacy rights. Depending on where you live (including California, Colorado, Connecticut, Virginia, and other states with consumer privacy laws), you may have the right to know what personal information we collect and how we use and disclose it, to access, correct, or delete it, and to opt out of its “sale,” “sharing” for cross-context behavioral advertising, or use for targeted advertising. We do not sell personal information for money. Allowing AdMob to personalize ads in Food Sentinel may count as “sharing” or targeted advertising under some of these laws; you can opt out using the device settings in Section 4 or by contacting us. California residents: the categories of information we collect, their sources, and their purposes are described in Sections 2 through 5.

We process personal information on these legal bases: to perform our agreement with you (providing the features you use); your consent (personalized ads, and sending health information for an AI comparison); and our legitimate interests (security, abuse prevention, and fixing crashes). You have the right to access, correct, delete, restrict, or port your data, to object to processing, and to withdraw consent at any time. You may also complain to your local data protection authority. Our service providers may process data in the United States and other countries; where required, transfers are protected by safeguards such as Standard Contractual Clauses.

Our Services are not directed to children under 13, and we do not knowingly collect personal information from children. Food Sentinel's AI features are intended for users 18 and older. If you believe a child has provided personal information, please contact us and we will take appropriate steps to delete it.

The Services may contain links to third-party sites. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies.

Images, graphics, and media available through the Services are owned by CodeCraft LLC or used under license or other rights. You may not copy, use, or redistribute any imagery or media from the Services without our explicit written permission.

We may update this Privacy Policy from time to time. When we do, we will revise the “Effective Date” above and, where required by law, provide additional notice.