1. Who we are
Reis Hill trading as Superwise is responsible for the personal information described here. This notice covers the Superwise iPhone and Android apps, Chrome extension, website, recipe service, AI assistant connections, shared spaces, purchases and support. Superwise is offered to people aged 18 or over in the United Kingdom, the United States and the other countries where we make it available through the App Store, Google Play or the Chrome Web Store. It is not currently offered in the European Union or the European Economic Area (the EU countries, Iceland, Liechtenstein and Norway), and we do not direct it at people there. Please do not create an account if you are located there.
For privacy questions or requests, email support@superwise.recipes. Our business contact address is 16 Campville Crescent, West Bromwich, B71 3NQ, United Kingdom.
2. Information we use
- Account: your email address, optional name, sign-in identifiers, session and account status. Email is needed to create an account; a name is optional. Sign-in may use email, Apple or Google.
- Your space and content: members, join codes, recipes, source links and photos, plans, shopping lists and changes you make. Other members of a shared space can see its content.
- Imports: the link, text, image or other source material you submit so we can extract a recipe. We send relevant source material to OpenAI. We keep the resulting recipe and source link, and may store a copy of a source photo. If the copy cannot be made, your device may load the photo from the source website. A source-derived result may be reused for the same link without your identity or private edits.
- Chrome extension: when you click Superwise on a web page, the extension sends us that page's address and a copy of the recipe content on it: its structured recipe data, main image and visible text. It sends nothing until you click, and nothing about other pages or your browsing. We use the copy only if we cannot load the page ourselves, treat it like any other import, and never reuse it for anyone else's import of that link.
- AI assistants: if you connect an AI assistant, such as Claude or ChatGPT, to Superwise, we keep the connection: the name the assistant gives itself, the address it returns you to, which space it may use, and when it was made and last used. Its access tokens are stored only in a scrambled (hashed) form. We log each request it makes (which action, whether it worked, and when) to apply limits and to show what an assistant did. The recipes, photos, meals and list items it adds become part of your space, marked with the assistant's name where shown. A link it asks us to import is handled like any other import. If it gives us the web address of a photo, we fetch the photo once from that address, which tells that website our server's address, not yours.
- Purchases: subscription product, status, dates and transaction identifiers from Apple or Google through RevenueCat. We do not receive your full payment-card details.
- Support and security: messages, reports, account and device details needed to help you, and technical logs used to deliver and protect the service. A feedback submission may include a screenshot and diagnostics shown by the app before you send it.
- Website requests: if you send your name and email through a website form, we use them to respond. Mobile-app account creation does not require an invitation.
- Optional analytics: with your choice, Amplitude receives app or website usage events. Website analytics may include a recording of the pages you view and how you use them. Form entries are hidden from recordings, but other content visible on a page may appear. The mobile apps do not record sessions. We do not use analytics for advertising.
Recipe photos stored by Superwise have hard-to-guess web addresses, but anyone with a photo's address can view it. Do not add photos you want to keep private.
Source pages can contain information about their authors or other people. We use that material only to make the recipe you requested, not to profile or contact those people. A source author can contact us about their information.
3. Why we use it
| Purpose | Legal basis (UK GDPR) |
|---|---|
| Create accounts, save and share content, import recipes and provide Plus | Our contract with you |
| Act on requests from an AI assistant you have connected, and keep a log of them | Our contract with you, and our legitimate interest in keeping assistant access secure |
| Respond to a website request | Steps you ask us to take before an account is opened |
| Process personal information found in source material you ask us to import | Our legitimate interest in providing the requested import, balanced against the source person's rights |
| Secure and improve the service, support users, handle reports and maintain a source-derived import cache | Our legitimate interests, balanced against people's rights |
| Optional app and website analytics | Your consent, which you can withdraw |
| Keep records or disclose information where the law requires it | Legal obligation |
We send sign-in, security, purchase and other service messages needed to run your account. We will send promotional email only where we have the required permission. We do not sell personal information or use it for targeted advertising.
4. Who receives it and where
Other members of a space can see content you put there. An AI assistant you connect receives what its requests return, such as your space's name, recipes, plan and shopping list. Its provider handles that information under its own terms and privacy policy, which you accept with it; we do not choose or control the assistant. We also use Supabase for accounts, database and photo storage; Fly.io for hosting; OpenAI for recipe extraction; Resend for email; RevenueCat for subscription status; and Amplitude for optional analytics. Apple and Google handle their sign-in and store purchases where you use them, and Apple hosts our support mailbox, so it receives emails you send us. These providers receive only information needed for their roles. We may disclose information to advisers or authorities where necessary or required by law, or as part of a genuine business transfer with appropriate safeguards.
Superwise is run from the United Kingdom, and some providers process information in other countries, including the European Union and the United States. For each transfer outside the UK, we rely on UK adequacy regulations or an approved safeguard, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. Ask support@superwise.recipes for details.
5. Cookies and analytics choices
The website uses essential storage for sign-in, security, theme and your analytics choice. With your permission, it also uses Amplitude analytics cookies and session recording. You can decline or change that choice through Cookie settings on the website. In the iPhone and Android apps, you can decline or later disable optional analytics without losing core features. The Chrome extension keeps only your Superwise sign-in and the progress of an import in your browser's extension storage, and uses no cookies or analytics.
6. Retention and deletion
We keep your account and space data while needed to provide Superwise. A deletion request made in the app starts a 30-day recovery period; signing back in during that period lets you choose to restore the account. We schedule permanent account erasure after the period. If you own a space used by others, you must transfer ownership first. Content in a shared space can remain for its other members after you leave, without your account or membership. Source-derived recipe results may also remain independently of your account.
We keep an AI assistant connection until you disconnect it, and delete it 90 days after that. Its request log is deleted after 90 days, and its access tokens when they expire.
We keep support, security, website-request and analytics records only while needed for their purpose, then delete or anonymise them. We decide how long to keep each record by the time needed to resolve a request, investigate a security concern, provide the service and meet any applicable tax, accounting or legal obligation. Temporary backup copies may remain until the relevant provider's backup cycle ends.
Request account deletion in the app under Account → Delete account, or email support@superwise.recipes if you cannot use the app. Deleting a Superwise account does not cancel an Apple or Google subscription; cancel it separately in the store account used to buy it.
7. Your rights
You can ask to see or correct your information, request deletion or restriction, object to processing based on legitimate interests, request certain portable information, and withdraw analytics consent. You can disconnect an AI assistant at any time in Account → AI assistants. These rights can have legal limits, including where information also belongs to other members of a shared space. Email support@superwise.recipes; we will normally respond within one calendar month. We may ask for reasonable proof of identity.
You can complain to the Information Commissioner's Office at any time. Depending on where you live, local law may give you further rights, and we will honour them where they apply.
8. Security, children and changes
We use access controls, authentication and encryption to protect information, although no online service can promise absolute security. Superwise is for adults aged 18 or over; we do not knowingly allow a child to hold an account. Contact us if you think a child has created one. We do not use personal information for solely automated decisions with legal or similarly significant effects.
We will update this notice when our service or data use changes, give appropriate notice of significant changes, and show the effective date above. If the business later transfers to a limited company, we will identify the new controller and explain the change.