Trust & Security

Access to the recipe book requires a personal account with email and password. Passwords are never stored in plain text: they are only saved as a cryptographic hash via the authentication system managed by our cloud infrastructure.

Administrators do not have access to user passwords. To support account recovery they can only generate a password reset link that is sent to the user's email.

All communications between the user's browser and our services happen over HTTPS with TLS, on both public and authenticated pages. Session cookies are limited to the app domain.

We collect only the data necessary for the service to function: email address, display name, an optional JuicePlus sponsor code, nutritional data optionally entered by the user to generate their plan, and photos voluntarily uploaded to recipes (UGC).

We do not sell data to third parties and do not use it for advertising profiling.

The app is hosted on Lovable Cloud and uses the managed cloud infrastructure for database, authentication and image storage. Any transactional emails (account confirmation, password recovery) go through the infrastructure's standard providers.

We use strictly necessary technical cookies to maintain the login session. We do not use third-party advertising tracking cookies.

Account data is kept as long as the user keeps their profile active. To request the deletion of the account and associated data, simply send a request through your reference contact or the contact form.

Users residing in the European Economic Area can exercise the rights provided by Regulation (EU) 2016/679: access, rectification, deletion, restriction, portability and objection to processing. Requests are handled without undue delay.

If you believe you have identified a vulnerability or a security issue, please do not publicly disclose it and contact us through the project reference. We will evaluate every report in good faith and as quickly as possible.