1 Who We Are
Wokly ("we", "us", "our") is a mobile application for authentic Chinese cooking, developed and operated as an independent app. If you have any questions about this Privacy Policy, please contact us at yongqi.luo.sg@gmail.com.
2 What Data We Collect
📧 Account Information
- Email address (used to create and authenticate your account)
- Password (stored as a secure hash — never in plain text)
- Display name (optional, set by you)
🍳 Content You Create
- Pantry ingredients you add or tick
- Recipes you save or favourite
- Meal plans you create
- Cooking progress and streak data
🎤 Voice Input (optional)
When you use the voice search feature, your speech is processed on-device by the operating system's speech recognition engine (Apple Speech Framework on iOS, Google Speech on Android). Wokly does not record, store, or transmit audio.
📸 Photos (optional)
When you upload a photo for a recipe, the image is stored securely in our cloud storage (Supabase Storage). Photos are not shared with third parties and are associated only with your account.
📱 Device & Usage Data
- Device type and operating system version (for debugging crash reports)
- App session activity (screens visited, features used) — collected in aggregate, not linked to your identity
- Push notification tokens (to deliver cooking reminders you opt into)
💳 Purchase Information
In-app purchase and subscription transactions are processed entirely by Apple (App Store) or Google (Google Play). Wokly receives only a confirmation of purchase status — we never see or store your payment card details. Subscription management is handled through RevenueCat.
3 How We Use Your Data
| Purpose | Data used | Legal basis |
|---|---|---|
| Provide and personalise the app | Account info, pantry, favourites, meal plans | Contract performance |
| Sync data across your devices | All user-generated content | Contract performance |
| Send cooking reminders & streak alerts | Notification token (only if you grant permission) | Consent |
| Verify subscription status | Purchase confirmation from Apple/Google | Contract performance |
| Improve app performance & fix bugs | Aggregated usage data, crash logs | Legitimate interest |
| Respond to support requests | Email address, description of issue | Legitimate interest |
4 Data Sharing & Third Parties
We do not sell your personal data. We share data only with the following service providers, and only to the extent necessary to run the app:
| Provider | Purpose | Privacy Policy |
|---|---|---|
| Supabase | Database, authentication, file storage | supabase.com/privacy |
| RevenueCat | Subscription & purchase management | revenuecat.com/privacy |
| Apple / Google | App distribution, payment processing, push notifications | Platform privacy policies |
| OpenAI | AI-powered recipe suggestions (if used) | openai.com/privacy |
We may disclose your information if required by law, or to protect the safety and rights of our users.
5 Data Retention
We retain your data for as long as your account is active. If you delete your account:
- Your profile, pantry, favourites, and meal plans are permanently deleted within 30 days.
- Anonymised, aggregated usage statistics are retained indefinitely for product improvement.
- Backup copies may persist in encrypted storage for up to 90 days before permanent deletion.
6 Device Permissions
| Permission | Why it's needed | Required? |
|---|---|---|
| 🎤 Microphone | Voice search for recipes and ingredients | Optional |
| 📷 Camera | Take a photo for a recipe or your profile | Optional |
| 🖼 Photo Library | Choose an existing photo from your gallery | Optional |
| 🔔 Notifications | Cooking reminders, streak alerts, meal plan nudges | Optional |
All permissions are requested at the point of use. You can revoke any permission at any time in your device Settings.
7 Children's Privacy
Wokly is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
8 Your Rights
Depending on where you live, you may have the right to:
- Access — request a copy of the personal data we hold about you
- Correct — ask us to fix inaccurate or incomplete data
- Delete — request deletion of your account and associated data
- Portability — receive your data in a machine-readable format
- Withdraw consent — opt out of notifications at any time in Settings
- Object — object to processing based on legitimate interests
To exercise any of these rights, email us at yongqi.luo.sg@gmail.com. We will respond within 30 days.
9 Security
We use industry-standard security measures including:
- HTTPS / TLS encryption for all data in transit
- AES-256 encryption for data at rest (via Supabase)
- Secure token-based authentication (JWT)
- Sensitive credentials stored in iOS Keychain / Android Keystore via Expo SecureStore
No method of transmission over the Internet is 100% secure. If you discover a security vulnerability, please contact us responsibly at yongqi.luo.sg@gmail.com.
10 Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For significant changes, we will notify you via an in-app notice or email. Continued use of Wokly after changes take effect constitutes your acceptance of the revised policy.
Questions or concerns?
We're happy to help with any privacy-related questions.
yongqi.luo.sg@gmail.com