Last updated 18 August 2026
Privacy policy
Cookeya is made by Arinex Nova. This policy explains what the app collects, what never leaves your phone, who else sees it, and how to get rid of it. It covers the Cookeya mobile app and this website.
What stays on your device
Your pantry, your cookbook, your weekly plan and your shopping list are stored in a database on your phone and are the source of truth for the app. With backup and sync switched off — which is the default — none of that data is ever transmitted to us. Uninstalling the app deletes it.
What we collect
Account details. When you register we collect your email address, your name and your household size. The email address identifies the account and is the only way we can contact you.
Kitchen data, only if you turn on sync. Switching on “Back up and sync” copies your pantry, cookbook, plan and shopping list to your account so a second device or a reinstall can restore them. With the setting off, the server refuses those requests. This is optional collection for app functionality, nothing else.
Photos, only when you attach one. The camera and photo library are used in one place: attaching an image to a recipe you are importing or writing. Declining the permission leaves the rest of the app fully usable.
What we do not collect
We do not collect your location, your contacts or your calendar; the app never asks for any of them. There are no analytics SDKs, no advertising SDKs and no advertising identifier. Nothing you do in the app is tracked across other apps or websites, and we do not sell or share personal data with third parties.
Recipe import
When you import a recipe from a link, the app fetches the page at the address you supplied so it can read the recipe from it. That request goes to the website you chose. Nothing about you is sent to it beyond an ordinary web request.
Notifications
If you allow them, Cookeya sends reminders about food about to expire and about planning the week. Allowing them stores a push token against your account so the reminder can be delivered; declining them, or turning them off later, clears it and changes nothing else.
How it is protected
Everything between the app and our servers travels over HTTPS. Passwords are stored hashed, never in a readable form. Session tokens are kept in the operating system’s secure storage — the iOS keychain or the Android keystore — rather than in ordinary app storage.
How long it is kept
Account data is kept while the account exists. When you delete the account it is marked deleted immediately and stops working; the underlying records are removed permanently after 30 days, which is the window in which an accidental deletion can be reversed by emailing us.
Your rights
You can ask us for a copy of the data attached to your account, ask us to correct it, or delete the account outright. Deletion is available inside the app under the You tab, and by email. If you are in the EU or the UK, the legal basis for processing your account details is the contract between us — we cannot give you an account without them — and for optional sync it is your consent, which you can withdraw by switching sync off.
Children
Cookeya is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has registered, email us and we will delete the account.
Changes
If this policy changes in a way that affects what we collect or who sees it, we will update the date at the top of this page and note the change in the app’s release notes.
Contact
Email cookeya-support@arinexnova.com. We answer in English and Spanish.