OldGrub Privacy Policy

Effective Date: April 1, 2026 Operator / Data Controller: YourCIO Inc., Ontario, Canada Privacy Contact: jeff@yourcio.ca

1. Overview

This Privacy Policy explains how OldGrub (the "Service") collects, uses, discloses, stores, and protects information when you use the Service.

OldGrub is operated by YourCIO Inc., Ontario, Canada.

By using the Service, you acknowledge that your information will be handled as described in this Privacy Policy.

2. Important Note

Even if OldGrub mainly stores recipe-related content, some of the information connected to the Service may still be personal information under applicable law. For example, this can include account details, email addresses, IP addresses, device identifiers, payment-related records, photos, audio, or other uploaded materials that identify or relate to a person.

3. Information We Collect

We may collect the following categories of information:

A. Information You Provide Directly

account and profile information, such as your email address, display name, password hash, authentication data, and family-space role;
recipes, notes, comments, stories, tags, and other content you submit;
uploaded files and media, such as images, scanned recipe cards, PDFs, audio, and video;
messages, support requests, and other communications you send us;
billing and subscription information you provide through the Service.

B. Information Collected Automatically

log data, such as IP address, approximate location derived from IP, browser type, device type, operating system, referring pages, timestamps, and error logs;
usage data, such as pages viewed, features used, clicks, searches, and session activity;
cookie, local storage, and similar technology data used to remember preferences, maintain sessions, analyze usage, and improve the Service.

C. Information from Third Parties

We may receive information from third-party providers that help us operate the Service, such as:

payment processors;
authentication providers;
analytics providers;
hosting, storage, email, and security vendors; and
AI or transcription providers, where you use related features.

4. How We Use Information

We may use information for the following purposes:

to create and manage accounts and family spaces;
to provide, operate, maintain, and improve the Service;
to store, display, organize, search, and share content as directed by users;
to provide AI-assisted features such as recipe extraction, formatting, transcription, search, substitutions, summaries, scaling, and recipe variants;
to process subscriptions, billing, and related records;
to authenticate users and secure the Service;
to detect, prevent, investigate, and respond to fraud, abuse, security incidents, and technical problems;
to communicate with you about the Service, including transactional and support messages;
to send product updates, marketing, or promotional messages where permitted by law and subject to your choices;
to comply with legal obligations and enforce our Terms of Use; and
to generate aggregated or de-identified analytics, where permitted by law.

5. Legal Bases for Processing

Where applicable data-protection law requires a legal basis for processing, we rely on one or more of the following:

performance of a contract with you;
your consent;
our legitimate interests in operating, securing, improving, and supporting the Service; and
compliance with legal obligations.

6. AI Features and Uploaded Content

If you use AI-assisted features, relevant content may be sent to third-party AI or processing providers solely to provide the requested feature or support related functionality.

AI outputs may be inaccurate or incomplete. You are responsible for reviewing any AI-generated or AI-assisted content before relying on it.

We do not claim ownership of content you upload. Your rights and our limited license to operate the Service are described in the Terms of Use.

7. How We Share Information

We may share information:

with other users you authorize within your family space or through other sharing features you choose to use;
with vendors and service providers that perform services for us, such as hosting, cloud storage, email delivery, customer support, analytics, payment processing, fraud prevention, security, authentication, and AI processing;
with professional advisers, auditors, insurers, or legal counsel where reasonably necessary;
with law enforcement, regulators, courts, or other third parties where required by law or where reasonably necessary to protect rights, safety, property, or the integrity of the Service;
in connection with a merger, acquisition, financing, sale of assets, reorganization, or similar business transaction; and
with your consent or at your direction.

We do not sell your personal information for money.

8. International Transfers

OldGrub is operated from Canada, but our service providers or infrastructure may be located in Canada, the United States, the European Union, or other countries.

As a result, your information may be transferred to, stored in, or processed in countries outside your province, state, or country of residence, and may be subject to the laws of those jurisdictions.

9. Data Retention

We retain information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

provide the Service;
maintain your account and family content;
comply with legal, tax, accounting, security, and dispute-resolution obligations; and
enforce our agreements.

When information is no longer reasonably necessary, we will delete it, anonymize it, or securely destroy it, subject to backups and legal retention requirements.

10. Security

We use administrative, technical, and organizational safeguards that are reasonable in light of the sensitivity of the information we hold.

However, no internet-based service or storage system is completely secure, and we cannot guarantee absolute security.

11. Your Choices and Rights

Depending on your location and applicable law, you may have rights to:

access personal information we hold about you;
request correction of inaccurate information;
request deletion of certain information;
withdraw consent where processing is based on consent;
object to or restrict certain processing;
request export or portability of certain information; and
complain to a privacy or data-protection regulator.

To make a request, contact jeff@yourcio.ca. We may need to verify your identity before processing your request.

12. Cookies and Similar Technologies

We may use cookies, local storage, pixels, SDKs, and similar technologies to:

keep you signed in;
remember preferences;
understand usage and performance;
maintain security;
support analytics; and
improve the Service.

Where required by law, we will ask for consent before using non-essential cookies or similar technologies.

13. Email Communications

We may send you service-related communications such as verification emails, password-reset messages, receipts, billing notices, support responses, and important updates.

Where permitted by law, we may also send marketing or promotional emails. You can opt out of marketing emails using the unsubscribe link in the message or by contacting us.

14. Third-Party Services and Links

The Service may contain links to third-party websites or rely on third-party tools and services. We are not responsible for the privacy practices of third parties, and their practices are governed by their own policies.

15. Data Breaches

If we become aware of a breach of security safeguards involving personal information under our control, we will assess and respond in accordance with applicable law, including notification where required.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will post the updated version on the Service and update the Effective Date above. Continued use of the Service after the updated policy takes effect means you acknowledge the revised policy.

17. Contact

Questions, privacy requests, or complaints may be sent to:

YourCIO Inc. Ontario, Canada Privacy Contact: jeff@yourcio.ca