Privacy Policy

Hearth Press (“Hearth,” “we,” “us,” “our”) is a sole proprietorship operated by Ben Honda, based in Ontario, Canada. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use the Hearth mobile and web applications (the “App”), the marketing website at hearth.press (the “Site”), and any related services (together, the “Services”).

By using the Services, you consent to the practices described in this Policy. We comply with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

1. Information we collect

Account information

When you sign in with Apple or Google, we receive a unique identifier (an OIDC subject claim) from your provider, your email address, and — on first sign-in only — your first and last name if your provider chooses to share them. You may add or edit a display name and avatar in the App.

Recipe content

We store the content you save to your library: recipe titles, source attributions and URLs, yields, times, ingredients, methods, notes, photos, and any annotations you add. You own this content; see our Terms of Use.

Preferences

We store your unit-system preferences (measurement chips and locale) so the App renders recipes the way you like to read them.

Technical information

We collect session tokens, request logs, and an internal audit log of writes to your account. These exist to operate, secure, and support the Services.

Usage and analytics

When you use the App or Site, we collect usage events that describe how you interact with the Services — for example, screens viewed, features used, device type and operating-system version, and the approximate geographic region derived from your IP address. These events are routed through our analytics service providers (see Section 3). Analytics SDKs in the App use a pseudonymous identifier assigned by the SDK itself; we do not use Apple’s Advertising Identifier (IDFA) or any equivalent cross-app advertising identifier.

Information we do not collect

We do not collect contacts, calendar, advertising identifiers, or health or biometric information.

2. How we use information

We use the information above to:

• provide and maintain the Services;
• authenticate you and keep your account secure;
• process recipes you choose to import from a URL (we send the URL to a content-extraction service on your behalf — see Section 3);
• generate optional AI illustrations for imported recipes when you initiate an import (see Section 3);
• fulfill printed-book orders through a third-party print partner if and when you place one;
• communicate with you about your account or the Services;
• comply with legal obligations and enforce our Terms of Use.

We do not sell your personal information, and we do not use it for advertising.

3. Service providers

We rely on the following service providers to operate the Services. Each acts on our behalf and is bound to handle personal information only for the purposes we specify:

• Neon — managed Postgres database hosting (United States).
• Vercel — application and website hosting (United States).
• Apple and Google — authentication providers used when you sign in.
• Firecrawl — web-page extraction. When you import a recipe from a URL, that URL is sent to Firecrawl to retrieve and parse the page’s content.
• Google AI (Gemini) — image generation. If you opt in to generating an editorial illustration for a recipe, the recipe text is sent to Google AI to produce an image.
• Silo, operated by The Adpharm Inc. — customer-data platform (Oakville, Ontario, Canada). Silo collects usage events from the App and Site and routes them to our other analytics providers below.
• Google Analytics 4 — web and product analytics (United States).
• Amplitude — product analytics (United States).
• A third-party print partner — printing, binding, and shipping of cookbooks, if and when you place an order. Order and shipping details are shared with this partner to fulfill your order.

4. Cross-border data transfers

Our service providers are located primarily in the United States. By using the Services, you understand that your personal information may be processed and stored outside Canada, including in the United States, and may be subject to the laws of those jurisdictions, including lawful access by foreign government, courts, or law enforcement.

5. Cookies, local storage, and SDKs

The Site uses cookies and similar technologies set by our analytics service providers (see Section 3) to count visits and understand how the Site is used. These cookies do not identify you personally.

The App uses local device storage to remember your sign-in session (a JSON Web Token issued by us, valid for up to thirty days) and your preferences. The App also includes analytics SDKs from our service providers that store a pseudonymous identifier on the device to attribute usage events to a single installation.

6. Security

We use commonly accepted safeguards to protect personal information, including TLS encryption in transit, encryption at rest for the database, and access controls. No system is perfectly secure; if you suspect your account has been compromised, contact us at the address below.

7. Retention

We retain your personal information for as long as your account is active. When you delete your account, we mark it for deletion and remove your content from the active database; copies may persist in encrypted backups for a limited period before they are overwritten. We may retain certain records (for example, transaction or audit records) for a longer period where required by law.

8. Children under 13

The Services are not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has provided us with personal information, contact us and we will delete it.

9. Your rights

Under PIPEDA you have the right to:

• access the personal information we hold about you;
• correct information that is inaccurate or incomplete;
• withdraw consent to our processing of your personal information, subject to legal or contractual restrictions;
• file a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca) if you believe we have not handled your personal information appropriately.

To exercise these rights, email us at legal@m.hearth.press. We will respond within thirty days.

10. Changes to this policy

We may update this Policy from time to time. When we make material changes, we will update the “Effective” date at the top and, where appropriate, notify you in the App.

11. Contact

Questions or requests regarding this Privacy Policy:

Ben Honda d/b/a Hearth Press
Ontario, Canada
legal@m.hearth.press