Privacy Policy

Last updated: October 17, 2026

Uunara is a private recipe and household cooking workspace. This Privacy Policy explains what information Uunara collects, how it is used, and the choices available to people who use the Uunara website, iOS app, API, command-line and MCP tools, and assistant integrations.

Who Is Responsible for Your Information

Uunara is published and provided by Metalone Media (Metalone OÜ, Estonia). Metalone OÜ is responsible for the personal information processed through Uunara as described in this policy. References to “we,” “us,” and “our” mean Metalone OÜ.

Information We Collect

We collect the information needed to provide the product:

• Account information from our authentication provider, such as your user identifier, email address, profile information, OAuth scopes, OAuth tokens, and login session details.
• Household, membership, external identity, and assistant connection records used to keep recipe data scoped to the correct private household and to detect whether an authorized assistant, CLI, or MCP client is connected.
• Recipe content you create, import, edit, or send through Uunara, including titles, descriptions, summaries, images or image URLs, ingredients, amounts, preparation notes, steps, timing, servings, meal type, scheduled dates, menu grouping, menu order, planning notes, and assistant-authored comments.
• Cooking activity you submit, including ratings, difficulty, whether you would cook a recipe again, actual servings, substitutions, comments, cooked-at timestamps, and derived cooking statistics.
• Shopping and local app state, such as ingredient items marked as already owned, recipes marked done on a device, saved recipe selections, and cached recipe feed data used to make the app faster and support device features.
• Device tokens when you register a device for app functionality such as notifications, if that functionality is enabled.
• Subscription or trial status and purchase metadata needed to unlock paid features, if subscriptions or purchases are enabled. Payment card details are handled by the app store or payment provider, not by Uunara.
• Technical information such as IP address, request metadata, authentication events, API logs, diagnostic logs, and basic server observability data needed to operate and secure the service.

How We Use Information

We use information to authenticate users, provide recipe storage, meal planning, shopping, guided cooking, cooking history, app onboarding, subscription, and account deletion features, sync data across devices and integrations, power Uunara's API and assistant tools, maintain security, troubleshoot problems, prevent abuse, and improve product reliability.

Assistant, CLI, and MCP Integrations

When you connect Uunara to ChatGPT, another assistant, a CLI, or an MCP-capable client, the integration can read or write the Uunara data that you authorize. For example, it may list recipes, create recipes, update recipe fields, delete recipes, or report that an assistant connection is active in your authenticated household. Uunara does not give an integration access to other households. Any information you provide to ChatGPT, another assistant, or an external client is also handled under that provider's own terms and privacy policy.

Authentication Providers

Uunara uses third-party authentication infrastructure to sign users in, support OAuth authorization flows, and issue tokens for the iOS app, CLI, MCP, and API access. WorkOS provides this authentication infrastructure and processes account and login information according to its own privacy practices. Uunara stores or receives the tokens and account identifiers needed to maintain your session and authorize API access.

Device, App Store, and System Features

The iOS app stores login credentials in Keychain and may cache recipe feed data, completed recipe identifiers, and shopping item selections in application support storage on your device. Uunara may index recipe titles, summaries, keywords, thumbnails, and app deep links with iOS Spotlight and App Shortcuts so you can find or open recipes through Apple system features. Apple and the App Store may process app installation, purchase, crash, diagnostic, and system integration information under Apple's own policies.

Subscription Processing

Apple processes App Store purchases. RevenueCat processes purchase history, entitlement and trial status, and an account-linked identifier so Uunara can verify access and restore purchases. Deleting your Uunara account does not cancel your Apple subscription; cancel it separately in your Apple account settings.

Usage Analytics

Uunara collects account-linked app usage events by default to understand feature adoption, navigation, and returning usage. Events include an account identifier, event name, event and receipt timestamps, app version and build, platform, and limited predefined properties such as the screen name. We store these events in our own service database without an external analytics provider. Analytics events do not contain recipe or workout content, assistant conversations, or Apple Health measurements, and are not used for advertising or cross-company tracking.

Stored usage events currently have no automatic expiry and are retained with their account identifier after account deletion. Automatic deletion or anonymization of analytics events is not currently implemented. You can contact us about your analytics information using the privacy contact below.

How We Share Information

We do not sell personal information. We share information only as needed to operate Uunara, comply with law, protect rights and security, process subscriptions or purchases, or complete actions you request through connected services. Service providers may process data for hosting, authentication, observability, app distribution, payment processing, email or support, and infrastructure operations.

Storage and Security

Uunara stores user content in backend databases and uses access controls so authenticated requests are scoped to the user's household. The iOS app stores login credentials in secure device storage and may keep local caches for app performance and offline system features. No internet service can guarantee perfect security, but we use reasonable technical and organizational measures to protect information.

Data Retention

We keep account, household, recipe, assistant connection, cooking activity, device, subscription, and technical information for as long as needed to provide Uunara, comply with legal obligations, resolve disputes, and maintain security. If you delete content or your account, we remove it from active product surfaces unless retention is required for backups, logs, security, payment records, or legal reasons. Local device caches may also be cleared by logging out, deleting the app, or using system storage controls.

Account Deletion

You can delete your Uunara account from Account in the app, including when you do not have an active subscription. Deletion removes the Uunara user, personal household and associated product records, and queues cleanup of the Uunara RevenueCat customer and authentication membership and sessions. Provider cleanup is retried if a service is temporarily unavailable. Uploaded image objects are queued for removal after a 72-hour safety delay. Deleting the stored image does not immediately remove copies already cached by delivery networks or devices. Managed recipe images are served with a cache freshness period of up to one year. Device image caches have no fixed expiry and are evicted as storage limits are reached or removed when the app is deleted.

The shared WorkOS login identity is retained separately from Uunara product records because the same identity infrastructure serves other products. A hashed identifier and deletion timestamp remain to prevent old access tokens from recreating the deleted account. Scheduled production database backups have a 30-day retention period; logs and records needed for security or legal obligations may remain. Contact privacy@uunara.com with requests concerning the shared identity or retained information.

Your Choices

You can choose what recipe, shopping, and cooking information you add to Uunara. You can disconnect integrations, delete recipes, delete your account through available app features, remove registered devices, cancel subscriptions through the app store or payment provider, or contact us to request access, correction, export, or deletion of your account information where applicable law gives you those rights.

Children

Uunara is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

International Use

Uunara may process information in countries other than where you live. By using Uunara, you understand that your information may be transferred to and processed in those locations.

Changes

We may update this Privacy Policy as Uunara changes. If changes are material, we will take reasonable steps to notify users, such as updating this page or providing notice in the app.

Contact

For privacy questions or requests, contact privacy@uunara.com.