Privacy Policy

Last updated: May 21, 2026

StirLoom ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and share information about you when you use our service at my.stirloom.com (the "Service").

1. Information We Collect

Information you provide

• Account information: Your name, email address, and password when you create an account.
• Recipe content: Recipes, photos, notes, ratings, and comments you add to your collection.
• Payment information: Billing is handled by Stripe. We do not store your credit card number - only a Stripe customer ID.

Information collected automatically

• Usage data: Pages visited, features used, and actions taken within the Service.
• Device information: Browser type, operating system, and IP address.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process payments and manage your subscription
• Send transactional emails (account confirmation, password reset, subscription receipts)
• Send service-related announcements (we do not send marketing email without your consent)
• Respond to your support requests
• Detect and prevent fraud or abuse

3. How We Share Your Information

We do not sell your personal information. We share information only in these limited circumstances:

• Recipe collection members: Recipe content you add is visible to other members of your collection whom you or an admin has invited.
• Public share links: If you generate a public share link for a recipe, that recipe is accessible to anyone with the link.
• Service providers: We use Supabase (database and authentication), Stripe (payments), and Brevo (transactional email). These providers process data on our behalf under their own privacy policies.
• Legal requirements: We may disclose information if required by law or to protect the rights and safety of our users.

4. Data Retention

We retain your data for as long as your account is active. If you cancel your subscription, your recipes remain stored in the database in the event you wish to reactivate your account. You may request complete deletion of your account and all associated data at any time by emailing info@stirloom.com.

5. Children's Privacy

The Service is not directed to children under 13. Users under 13 may only use the Service with verifiable parental consent, as acknowledged during signup. We do not knowingly collect personal information from children under 13 without parental consent.

6. Your Rights

Depending on where you live, you may have rights including:

• Access to the personal data we hold about you
• Correction of inaccurate data
• Deletion of your data
• Data portability (we provide HTML and JSON export)
• Opt-out of non-essential communications

To exercise any of these rights, contact us at info@stirloom.com.

7. Security

We use industry-standard measures to protect your data, including encrypted connections (HTTPS), password hashing, and row-level security on our database. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

8. International Data Transfers

StirLoom is operated from the United States. Your personal data is stored and processed on servers located in the United States. If you access the Service from outside the United States — including from Canada, the European Union, or other regions with data protection laws — your information will be transferred to and processed in the US, where data protection laws may differ from those in your jurisdiction.

For Canadian users: By using StirLoom, you acknowledge that your personal information is being transferred to and stored in the United States and may be accessible to US courts, law enforcement, and national security authorities under US law.

For users in the European Economic Area (EEA), United Kingdom, and Switzerland: Please note that StirLoom is a US-based service not specifically directed at EU residents; if you choose to use it, you do so with the understanding that your data will be processed in the US.

9. Cookies

We use session cookies necessary for authentication. We do not use advertising or tracking cookies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice in the app. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at info@stirloom.com.