Privacy Policy

Version 1.0.1 · effective May 20, 2026

Saltpig Privacy Policy

Version: 1.0.1 Effective date: May 20, 2026

This Privacy Policy describes how Data-Monti LLC (doing business as EasyModeOnly), the operator of Saltpig ("Saltpig", "we", "us", or "our"), collects, uses, and shares your information when you use the Saltpig mobile app, the saltpig.app website, and any related services (together, the "Service").

Read this together with the Terms of Service. A plain-language summary appears at the top of each section. The full text controls in case of conflict.

1. Information we collect

Short version: Account info, the recipes and photos you create, what you do in the app, and basic device data.

1.1 Information you give us

  • Account information. Email address, display name, password (stored hashed), profile photo, and any other profile fields you fill in.
  • Authentication identifiers. When you sign in with Apple or Google, we receive a stable identifier and the email address those providers share with us.
  • Recipes, cook photos, tips, and comments ("User Content") that you upload, save, or share.
  • Social graph. Friend connections, follows, and any sharing or messaging actions inside the app.
  • Purchases. If you subscribe to Saltpig Pro or send a gifted subscription, we record the transaction ID, product purchased, and renewal status. We do not receive your payment card or bank details — those go to Apple or Google.
  • Support correspondence. Messages you send to hello@easymodeonly.com or through in-app support.

1.2 Information collected automatically

  • Device and technical information. Device model, operating system version, app version, language, time zone, and a Saltpig-generated install identifier.
  • Usage data. Pages and screens you view, features you interact with, recipes you cook, time spent, and similar product-analytics events. See Section 3 for analytics.
  • Push-notification tokens. If you enable notifications, we store the Apple (APNs) or Google (FCM) device token so we can deliver them.
  • Network information. IP address and approximate location derived from it. We use this primarily for security, fraud detection, and recording legal-acceptance metadata.
  • Cookies and similar technologies (web only). The saltpig.app website uses minimal first-party cookies for session and security. We do not use advertising cookies.

1.3 Information from third parties

  • Apple Sign in with Apple, Google Sign-In, Keycloak. When you authenticate, we receive the identifiers and email addresses described above.
  • Apple App Store and Google Play. For subscription purchases, we receive transaction receipts and renewal status via App Store Server Notifications and Real-Time Developer Notifications.
  • Recipe extraction service. If you import a recipe from a public URL, we may use our extraction service (extractor.montidata.com) to fetch and parse the page. We send the URL and receive parsed structured data; we do not send your account identifier to the extractor.

2. How we use information

Short version: To run the app, keep it safe, improve it, and contact you about it.

We use the information described above to:

  • create and maintain your account;
  • provide the Service — display your recipes, deliver notifications you've enabled, sync your library across devices;
  • enable social features you opt into (friends, sharing);
  • process subscriptions and gifts;
  • improve the Service through aggregate analytics, A/B tests, and bug reports;
  • power AI features such as recipe categorization, cook-time estimation, and ingredient substitution (see Section 5);
  • prevent abuse, fraud, and security incidents;
  • respond to your support requests;
  • comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information, and we do not share it with advertisers for targeted advertising.

3. Product analytics and your opt-out

Short version: We collect aggregate usage events to improve the product. You can opt out anytime in Settings, and we honor that on the server too.

  • We operate a typed event pipeline that sends product-analytics events to BigQuery in our easymode-analytics Google Cloud project. Events describe actions like "recipe saved" or "cook session started" along with the device and app version.
  • You can turn off analytics from Settings → Privacy → Analytics. When the opt-out is on:
    • the mobile app drops events at the source instead of sending them;
    • the server-side ingestion pipeline also drops any events received for an opted-out user as a second line of defense.
  • Analytics are used internally and are not shared with third-party advertising networks.

4. How we share information

Short version: Only with the service providers we need to run Saltpig, with other users when you choose to share, and when the law requires it.

4.1 Service providers (processors)

We share information with vendors who help us run the Service under written confidentiality and data-protection terms. Our main processors are:

ProcessorPurposeData shared
Google Cloud PlatformHosting (Cloud Run, Cloud SQL), storageAccount data, User Content, logs
BigQuery (easymode-analytics)Product analytics warehouseAnalytics events (Section 3)
Keycloak (self-hosted on GCP)AuthenticationEmail, identifiers, session tokens
Firebase Cloud Messaging (Google)Push notificationsAPNs/FCM device tokens, notification payloads
Apple App Store / Google PlaySubscription billingTransaction receipts
extractor.montidata.com (our recipe-import service)Parsing public recipe URLsThe URL you submit; no account identifier

We do not use third-party advertising networks, RevenueCat, or external analytics SDKs.

4.2 Other users

Anything you mark as public or share with friends is visible to the audience you select. Friend-only content is visible to users you have a mutual friendship with. Recipes you publish as a verified creator are public by design.

4.3 What verified creators can see about people who cook their recipes

When you cook a recipe published by a verified creator, the creator gets information about that activity through their creator dashboard. What is visible depends on your profile-visibility setting:

  • If your profile is public: the creator can see your profile photo, display name, and the cook photos you choose to share, alongside any rating or difficulty feedback you submitted for the recipe. This is the same visibility any other Saltpig user would have for your public activity.
  • If your profile is not public: the creator can see only aggregated rating and difficulty signals across all cooks of the recipe — for example, the average rating and the distribution of difficulty responses. The creator does not see your name, photo, or any per-cook identity tied to your feedback.

We use the word "aggregated" rather than "anonymized" because aggregate counts can sometimes be re-identified at small sample sizes (for example, if you are the only person to have cooked a niche recipe). We do not promise that aggregate signals are mathematically anonymous; we promise that we do not surface non-public users' identities to creators alongside their ratings.

4.3 Legal and safety

We may share information when required by law, court order, or to protect the rights, property, or safety of Saltpig, our users, or others.

4.4 Business transfers

If Data-Monti LLC is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.

5. AI features and your content

Short version: We use AI on your content to power features in the app. We do not sell your content to AI vendors, and we don't use your private content to train models outside Saltpig.

  • AI features (recipe categorization, cook-time estimation, nutritional analysis, summarization) process your recipes and related metadata.
  • We may use anonymized, aggregated, or public content to improve Saltpig's own models. We do not use your private (non-shared) User Content to train third-party general-purpose models.
  • When an AI feature is powered by a third-party model provider, we follow the provider's enterprise data-handling terms, which prohibit using your prompts and outputs to train their models.

6. Data retention

Short version: We keep your data while your account is active. After deletion, most data is removed within 30 days; some records are kept longer for legal reasons.

  • While your account is active: we retain your account data, User Content, and activity records.
  • After account deletion: we delete or anonymize most personal data within 30 days. We may retain:
    • transaction and tax records for as long as required by law (typically 7 years);
    • records of legal acceptances (Terms of Service, Privacy Policy) for as long as required to defend against disputes;
    • backups, which expire on a rolling schedule (typically up to 90 days);
    • de-identified aggregate analytics, which are not linked to you.

7. Security

Short version: We use industry-standard safeguards. No system is 100% secure.

  • Data is encrypted in transit (TLS) and at rest (Google Cloud-managed encryption).
  • Passwords are stored using salted hashes managed by our identity provider (Keycloak).
  • Access to production systems is restricted to authorized personnel and logged.
  • Despite our efforts, no method of transmission or storage is 100% secure. You are responsible for keeping your account credentials safe and reporting any suspected compromise to hello@easymodeonly.com.

8. Your rights and choices

Short version: You can see, update, delete, or export your data from inside the app or by emailing us.

Regardless of where you live, you have the following rights with respect to your Saltpig data:

  • Access: see the data we hold about you.
  • Correction: update inaccurate data.
  • Deletion: delete your account (Settings → Account → Delete account).
  • Export: request a portable copy of your data.
  • Opt out of analytics: Settings → Privacy → Analytics (see Section 3).
  • Opt out of marketing email: use the unsubscribe link in any marketing email we send.

To exercise any of these rights, use the in-app controls or email hello@easymodeonly.com. We will respond within 30 days. We will not discriminate against you for exercising these rights.

8.1 California residents (CCPA)

If you live in California, you also have the right to:

  • know what categories of personal information we collect, the purposes, and the categories of recipients (described in Sections 1–4 above);
  • not be sold or shared for cross-context behavioral advertising (we do not do either);
  • request deletion (covered above);
  • be free from retaliation for exercising any of these rights.

We have not "sold" or "shared" personal information as defined by the CCPA in the past 12 months and do not intend to.

8.2 EU / UK / EEA residents (GDPR)

If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the rights listed above plus:

  • the right to object to processing based on legitimate interests;
  • the right to restrict processing while a request is being resolved;
  • the right to data portability in a structured, commonly used, machine-readable format;
  • the right to lodge a complaint with your local supervisory authority.

Our legal bases for processing are: (a) contract (running the Service for you), (b) legitimate interests (security, fraud prevention, product improvement), (c) consent (for optional features like notifications and analytics), and (d) legal obligation (tax records, court orders).

If you transfer data to us from outside the United States, you acknowledge that the data will be processed in the U.S.

9. Children

Short version: Saltpig is for ages 13 and up.

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn we have collected personal information from a child under 13, we will delete it. If you believe a child under 13 has provided us with personal information, email hello@easymodeonly.com.

For users aged 13 to 17, additional restrictions apply (no in-app purchases, no creator monetization) — see Section 1 of the Terms of Service.

10. International users

The Service is operated from the United States. If you use the Service from another country, your information will be transferred to, processed in, and stored in the United States. The data-protection laws of the United States may differ from those in your country.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The current version is always available at https://saltpig.app/privacy.

  • Material changes to how we collect, use, or share your information will be announced inside the app and by email, at least 30 days before they take effect.
  • Cosmetic changes (typos, formatting, clarifications that don't change your rights) take effect immediately on posting.
  • Versioning follows the same semantic convention as the Terms.

12. Contact

Questions about this Privacy Policy or your data?

Data-Monti LLC (d/b/a EasyModeOnly) Attention: Privacy Email: hello@easymodeonly.com

If you live in the EEA, the UK, or Switzerland, you may also contact your local data-protection authority.