Sage

1. Introduction

Sage ("we", "our", or "us") operates the Sage Chrome Extension and the Sage web application (collectively, the "Service"). This Privacy Policy explains how we collect, use, and protect your information when you use our Service.

2. Information We Collect

Account Information

When you create an account, we collect your email address and authentication credentials. If you sign in with Google, we receive your name and email address from Google.

Recipe Data

When you use Sage to analyze a recipe, the extension extracts recipe content (ingredients, instructions, and nutritional information) from the web page you are viewing. This data is sent to our servers for processing and may be stored to display your healthified recipes.

Recipe Conversations

When you ask questions about a recipe, we store the messages you send, our replies, and any changes you choose to apply to the recipe. Those messages are sent to our AI provider to generate an answer. Messages can describe your dietary needs, so treat them as personal information and share only what you want recorded.

You can start a conversation without an account. We then store an opaque token in a cookie on your device; that token is the only thing that identifies the conversation as yours, and it is what carries the conversation over to your account if you sign up later.

Usage Data

We collect basic usage information such as the number of recipes analyzed and your dietary preferences to provide and improve the Service.

3. How We Use Your Information

• To provide recipe analysis and healthification services
• To calculate nutritional information via third-party nutrition APIs (Edamam)
• To generate healthier recipe alternatives using AI
• To answer your questions about a recipe and apply the changes you accept
• To manage your account and credit balance
• To save and display your healthified recipes
• To improve and maintain the Service

4. Third-Party Services

We use the following third-party services to operate Sage:

• Supabase — Authentication and database hosting
• Google Vertex AI and Anthropic — AI-powered recipe generation and recipe conversations
• Edamam — Nutritional analysis of recipes
• Google Cloud Run — Application hosting

These services have their own privacy policies governing their use of your data.

5. Chrome Extension Permissions

The Sage Chrome Extension requests the following permissions:

• Active Tab — To read recipe content from the page you are currently viewing when you initiate an analysis
• Side Panel — To display the Sage interface alongside the recipe page
• Storage — To save your preferences and session data locally

The extension only accesses page content when you explicitly choose to analyze a recipe. It does not run in the background, track your browsing history, or collect data from pages you do not analyze.

6. Data Storage and Security

Your data is stored securely using Supabase (built on PostgreSQL) with row-level security policies. We use HTTPS for all data transmission between the extension, our servers, and third-party services. We do not sell, trade, or rent your personal information to third parties.

7. Data Retention

Your account data, healthified recipes, and recipe conversations are retained as long as your account is active. You can delete your account at any time by contacting us; deleting it removes your conversations and the recipe versions they produced along with the rest of your data.

A conversation you start without an account is kept for 30 days and then deleted automatically, along with the token that identified it. Signing up within that window moves the conversation and any recipe you changed to your account, where the retention above applies instead. Recipe data sent for analysis is processed in real time and is not retained beyond what is stored in your account.

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your healthified recipes
• Withdraw consent for data processing

9. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us so we can promptly remove it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at privacy@sagerecipes.app.