Privacy, plainly.

Effective September 10, 2026. This policy describes how MyDrinkAI handles information in this application.

What we store

We store your name, email, securely hashed password or linked sign-in provider identity, sessions, recipes, conversations, plans, reviews, uploaded recipe photos, usage counters, recipe-view counts, optional email preferences, and membership status. Payment card details are handled by Stripe and are not stored in our application database.

What you share

Recipes are private when you create them. Publishing makes the recipe and your display name visible to other visitors. Reviews and attached photos on public recipes are public. Do not include personal information in anything you publish.

AI and service providers

Your prompts and recent conversation context are sent through Vercel AI Gateway to the configured AI provider to generate replies. Recipe and library subject details are sent to Kie AI for illustration generation; generated images and their subject descriptions are sent there for automated visual review. Hosting runs on Vercel and records are stored in Neon Postgres. Google handles Google sign-in and One Tap. If offered and selected, Facebook, Apple or Microsoft handles its own sign-in. We receive basic account information, not your provider password. Stripe handles memberships when enabled. Our email provider handles password recovery when enabled.

Cookies and browser storage

Essential cookies keep you signed in and protect authentication. A random visitor cookie deduplicates recipe views for popularity rankings; the database stores its hash, not your browsing history. Browser storage remembers your language and theme. The service worker does not cache private account or recipe data.

First-party measurement

A separate random cookie records your first referral source or campaign label for up to 30 days. We store a hash of that identifier. After sign-in, we record active UTC days and whether you created or saved your first recipe. We do not collect recipe text, prompts or full browsing URLs for analytics. Do Not Track and Global Privacy Control disable this activity collection. Anonymous records expire after 30 inactive days; activity-day records expire after 90 days. Account-linked attribution and activation can be exported and are removed with your account.

Google Analytics

We use Google Analytics to measure visits and page paths. Google Analytics uses cookies. We do not send account details, recipe content, prompts, or URL query values in our page-view events. Do Not Track and Global Privacy Control disable our Google Analytics tag. Advertising personalization is disabled.

Control and retention

You can export your records from your account, delete conversations, delete your own recipes, and make published recipes private. Account records persist until deleted. Infrastructure backups may retain records temporarily under the hosting provider’s retention policy.

Contact

Use the account export and deletion controls to manage your stored information. For account or privacy questions, contact the operator at contact@mediaatl.as.