Preserved — Privacy Policy
Effective date: 14 October 2026
Preserved is a private place for your family’s recipes. This policy explains what information we collect, how we use and share it, and the choices you have.
Preserved is operated by Preserved AI Pty Ltd (ABN 69 689 791 777), based in Australia.
1. Information we collect
(a) Your account
Your email address, your name, and an optional profile photo. If you sign in with Apple or Google, we receive your name and email from them.
(b) Your content
The recipes you save — including photos and scans of recipe cards, which may contain handwriting and names, recipe text, family memories and dedications, cookbook designs, and the profiles and photos of the cooks you add. This content is stored privately against your account.
The services described in section 3 process content for the features you request.
If you choose to share a recipe card, the recipient service’s privacy practices apply to that shared copy.
(c) Purchases and print orders
Your subscription status, such as trial, active or expired. Apple handles subscription payments.
If you order a printed book, Stripe handles the payment and Lulu handles printing and delivery. We receive order and payment-status information, but not your full card details. Print orders also require the recipient’s name, delivery address, contact phone number and print-ready book files.
(d) Optional product analytics
A limited set of product events, such as whether a scan completed or an export failed, helps us improve Preserved. These events use a pseudonymous identifier: a random identifier stored on that iPhone while signed out, or your account ID while signed in. Signing in does not attach earlier signed-out activity to your account.
Analytics events do not include your recipes, photos, names, email address or the free text you write.
Optional product analytics sent through PostHog stays off until you turn it on in Profile → Privacy → Share Usage Analytics. A signed-out choice applies to that iPhone; while signed in, your confirmed choice applies to your account. If your account choice cannot be confirmed, optional PostHog product analytics stays off on that iPhone. Necessary processing to operate and secure your account, purchases and stored content is separate.
We do not collect GPS location for analytics. PostHog is configured to discard raw client IP addresses and IP-based location enrichment is disabled. A delivery address provided for a print order is separate from analytics.
2. How we use your information
We use your information:
To provide Preserved: store and sync your recipes, render your cookbooks, and restore them on a new device.
To read and structure recipe scans, generate recipe artwork and cookbook covers, estimate nutrition, and enhance images for printing, using the services below when you enable AI features.
To manage your subscription and free trial.
To understand how Preserved is used, fix failures, and improve the product (optional usage analytics, when enabled).
To send necessary account, security, subscription and order messages, and promotional emails only when you have opted in.
To respond when you contact us.
3. Sharing your information
(a) Services we rely on
Preserved uses the services below to operate the app and fulfil your requests. They receive the information described in the table. Payment providers may also process information for their own fraud-prevention and legal obligations; see Stripe’s Privacy Policy.
We require all third parties receiving personal information through Preserved, including our AI service providers, to provide the same or equivalent protection as described in this Privacy Policy and required by Apple’s App Review Guidelines.
Apple processes subscription payments and, if you enable them, delivers push notifications to your iPhone.
(b) Third-party AI processing and your permission
Preserved’s AI features use OpenAI and fal, with nutrition reference information supplied by USDA FoodData Central. The table above identifies the information each provider receives and how it is used. Recipe content may include personal information such as handwriting, names and notes.
AI features are off until you explicitly enable them. Before sending your content for AI processing, we show an in-app disclosure explaining what information will be shared, which providers will receive it and for what purposes. You can choose to enable AI or select Not Now.
This choice is presented during onboarding and, if permission has not been granted, before an AI feature proceeds. The permission covers the AI features described above. After you enable AI, print enhancement may also run automatically for saved images.
You can withdraw permission at any time in Profile → Privacy → AI Features. Turning AI off prevents new AI processing requests on that device. If the account-wide update cannot be confirmed, the app asks you to connect and retry. Requests already sent may finish after you turn AI off; provider retention is explained in section 6(c).
Without AI, you can still type and edit recipes, use your own photos, and export or print. Your membership stays the same.
4. Advertising
Preserved does not display advertisements or sell your saved recipes and photos. Preserved does not use your private recipe archive for advertising.
If you choose to share a recipe card to another service, that service’s privacy practices apply to the copy you share.
5. How we store and transfer your information
Your account and content are stored using Supabase’s account, database and private file-storage services. Cloudflare R2 holds backup copies of stored files, as described in section 3. Account-deletion safeguards also apply to these copies.
Some providers process data in the United States; we rely on their standard contractual safeguards for international transfers.
6. How long we keep your information
(a) Your account and content
Your content stays as long as your account does — that is the point of Preserved. Deleting your account (Profile → Your Details → Delete Account) starts a 30-day grace window: your account closes immediately, but your content is kept for 30 days so it can be restored if you change your mind — sign in within that window and choose Cancel Deletion, or contact support@preservedapp.com. After the 30 days, your account and content are permanently deleted from our systems. Deleting your Preserved account does not cancel an Apple subscription; manage it separately in your Apple Account subscription settings.
(b) Deletion confirmation and records we keep
While your deletion is in progress, we keep a deletion record with your email address. We remove that record during a successful nightly cleanup once at least 48 hours have passed since your account data was deleted. When we can confirm the deletion has finished, we attempt to send one confirmation email to the address on your account when you asked for deletion. Before the deletion record is removed, we keep an encrypted copy of that address for this purpose.
We delete the encrypted copy when both the email provider’s acceptance and our completion checks have been recorded successfully. Otherwise, we remove it at the first successful scheduled cleanup after 14 days from encryption, once any active send has finished or timed out. Acceptance by the email provider does not guarantee arrival in your inbox. If we cannot confirm every required step before sending, or have no address for you, we do not send it.
Afterwards we permanently keep a minimal record that does not contain your email address or anything derived from it, to prevent the deleted account from being restored or its internal identifier reused:
an internal account identifier and when deletion was requested and completed;
for the confirmation email, a reference number, which version of the message was used, whether it was accepted for delivery, the number of attempts and the related times;
for our notification service, records showing that removal of your email address was verified and when, with processing details, including whether you had unsubscribed from email there.
Until that removal is verified, we also keep records of the steps taken to remove your address from the notification service. Our hosting provider’s database backups and service logs may still contain your information for a limited time after deletion, under its own retention.
(c) AI processing
When you enable AI features, the information described in section 3 is sent to the relevant providers for the feature you request. Provider request records and image files can remain after processing finishes. OpenAI retention depends on the API project and its logging controls; we do not claim zero data retention. fal request records and input/output images use separate retention controls. We do not promise immediate deletion or zero retention by these providers. You can change your AI choice in Profile → Privacy → AI Features.
(d) Analytics retention
We keep analytics only while needed for the purposes described here and review that need at least monthly. We use PostHog’s supported deletion mechanisms when data is no longer needed or an applicable erasure request requires it, and track deletion through the provider’s completion process. Monthly review is not a fixed deletion timer and does not extend an applicable deadline. We do not keep exported analytics backups or re-import discarded analytics. Session recording, automatic screen/interaction capture, surveys and other unnecessary analytics features are disabled. Limited app lifecycle events, such as opening the app, remain subject to the same analytics choice.
Minimal records needed to honour your choices, prevent unwanted messages, secure the service or meet applicable obligations are handled separately from optional usage analytics. The account and content deletion commitments above, including backup safeguards, are unchanged.
7. Your choices about your information
(a) AI features
You can decline AI processing or change your choice in Profile → Privacy → AI Features. The disclosure, permission and withdrawal process is explained in section 3(b).
(b) Usage analytics
Use Profile → Privacy → Share Usage Analytics at any time. Turning it off stops optional product analytics sent through PostHog on that iPhone immediately. It does not control Facebook’s processing or copies you choose to share. The app shows whether the account-wide update is confirmed or still pending; use Keep off for this account if shown. A confirmed refusal applies to optional usage analytics for your account. An account refusal records the associated erasure obligation, but is not confirmation that previously collected data has already been deleted. You can also contact us to request deletion or exercise an applicable objection right.
(c) Notifications
Reminders and notifications can be turned off in Profile → Notifications & Emails or in your device’s Settings.
(d) Promotional email
The signup choice for occasional tips and updates starts unselected. We use an affirmative choice, rather than a regional preselected default. Change it in Profile → Notifications & Emails, or use the unsubscribe link in a promotional email. We record your action, the wording shown, when you chose and on which screen. Necessary account, security, trial and order email is handled separately.
(e) Promotional push notifications
Invitations and promotional updates require a separate in-app choice as well as your iPhone’s notification permission. Enabling analytics or email does not enable promotional push.
(f) Access, correction, export and deletion
Your recipes are always visible and editable in the app; you can export your cookbooks at any time; account deletion is in the app. For anything else, email us.
Depending on where you live (including under the Australian Privacy Act, UK/EU GDPR, and US state privacy laws), you may have additional rights to access, correct, delete, or port your personal information, and to complain to your local privacy regulator. Email us and we will honour them.
8. Children
Preserved is not directed at children under 13, and we do not knowingly collect their information. Family recipes about Grandma are welcome; accounts for young children are not.
9. How to contact us
If you have questions about this policy or want to exercise your privacy rights, contact:
Preserved AI Pty Ltd
ABN 69 689 791 777
Australia
support@preservedapp.com
10. Updates to this Privacy Policy
If we change this policy in a way that matters, we will update the date above and tell you in the app before the change takes effect.