Privacy notice

CraveLab is a private recipe service operated from the European Union. It receives Instagram messages you deliberately send to the CraveLab bot and uses them to preserve source Reels, extract structured recipes, and place those recipes in your private library.

Data we process

We store your sign-in identity, Instagram-scoped messaging identity, source messages and media, extracted recipe data, pantry and cooking records, preferences you confirm, security audit events, and the sharing relationships you create. We also process technical data needed for security, such as session, IP, device, and request metadata.

Processors and transfers

Source content is sent to Google Gemini for recipe extraction. Authentication email is sent through the configured mail provider. Meta supplies Instagram messaging data. Product and nutrition matches may reference USDA and Open Food Facts records. Private application data is hosted on an EU server; providers may process data in other regions under their terms.

Control and retention

You can export your account from Settings, correct extracted data, revoke sharing, and request erasure. Originals and derived artifacts are retained while their recipe or account remains active, then removed by the asynchronous erasure process and backup retention cycle. We do not sell personal data or use private recipes for advertising.

Contact

For access, correction, objection, portability, or deletion requests, email privacy@cravelab.app.