Legal
Privacy Policy
This Privacy Notice for Lucky Apron LLC (“we,” “us,” or “our”) describes how we collect, use, store, and share personal information when you use our services (“Services”), including when you:
Visit https://www.luckyapron.com or any site of ours that links to this notice
Create an account, post recipes, photos, videos, or other content, or otherwise use Lucky Apron
Contact us or otherwise engage with us about the Services
If you do not agree with this notice, do not use the Services. Questions: contact@luckyapron.com.
Summary of key points
What we collect. Account details you give us, content you post, optional dietary preferences, and limited technical logs needed to run the site.
Sensitive information. We do not require health records or similar data. If you choose to save food preferences (foods you can't eat, don't like, like or love) or diets you follow, we use them only to order search results when you choose Best match and to warn you on recipe pages. Nobody else can see them, and we ask for your consent before you save the first one.
Third parties. We do not buy lists from data brokers. We use service providers such as hosting, cloud storage, and email. We do not currently use Google Analytics or advertising pixels.
How we use information. To provide accounts and the platform, host your content, secure the Services, communicate with you, and comply with law. We do not use your data for third-party targeted ads.
Who we share with. Service providers that help us operate Lucky Apron, other users when you post publicly, and others when the law requires it. We have no parent company or affiliates.
Your rights. Depending on where you live, you may request access, correction, or deletion. Use https://www.luckyapron.com/r/contact-us or email contact@luckyapron.com.
1. What information do we collect?
In Short: We collect information you provide, content you post, and limited technical data needed to operate the Services.
Information you give us
We collect information you voluntarily provide when you register, use the Services, post content, set preferences, or contact us. This may include:
name
email address
username
password
contact preferences
profile details you choose to add
content you upload or create, including recipes, photos, videos, comments, and channel materials
food preferences you choose to save: foods or food groups (for example "Shellfish") you mark as can't eat, don't like, like or love, and diets you follow (vegetarian, vegan, pescatarian, gluten-free, dairy-free, keto, low-carb, or ismilar), each strictly or when you can
Dietary preferences. These are optional. We use them only to order search results when you choose Best match and to show on a recipe's page which of its ingredients don't suit you. We do not ask why you avoid a food and do not store a reason. Some details may be treated as information about your health (for example an allergy) or your religious or philosophical beliefs (for example avoiding pork, or being vegan) under certain laws, so we treat all food preferences as sensitive information: we ask for your explicit consent before you save the first one, and only you can see them. You can change or delete them at any time on your Food preferences page.
Sensitive information. We do not require government IDs, medical records, or similar sensitive data to use the Services. Optional food preferences, which may be sensitive, are described above.
Information collected automatically
When you use the Services we may collect IP address, device and browser type, dates and times of access, and similar log data, to operate, secure, and debug the Services.
Payments (not offered yet)
We do not process payments today. When subscriptions or other paid features become available, our payment processor will collect billing information needed to charge you. We do not intend to store full card numbers on our own systems.
Third-party sources
We do not collect personal information from data brokers. If you sign in with a third-party account (for example Google or Facebook), we receive the profile data that provider shares with us, as described in section 7.
Please keep the information you give us accurate.
2. How do we process your information?
In Short: We use your information to run Lucky Apron, communicate with you, keep the Services secure, and comply with law.
We process personal information to:
create and authenticate accounts
provide the website and features, including hosting recipes, photos, videos, and channels
use your optional food preferences to order search results when you choose Best match (you can turn this off for one search or altogether) and to mark the ingredients on a recipe's page that don't suit you
respond to support requests
send administrative messages (account, security, and policy updates)
enable user-to-user communication when you use those features
request feedback
review User Content with automated and AI tools for spam, scams, vulgarity, slurs, harassment, and other violations of our Terms
send marketing emails only if you opt in; you can unsubscribe at any time
protect the Services (security, fraud, and abuse prevention)
understand how the Services are used so we can fix and improve them
comply with law and enforce our terms
We do not use food preferences for advertising, for content review, or to build profiles about you, and we do not send them to AI providers.
When paid features launch, we will also process information as needed to manage subscriptions, billing, and related support.
3. What legal bases do we rely on?
In Short: We process personal information only when we have a valid reason under applicable law.
If you are in the EU or UK
We may rely on:
Contract — to create your account and provide the Services you request
Consent — for optional items such as marketing emails. For food preferences, which may reveal health information or beliefs, we rely on your explicit consent, which you give on your Food preferences page before saving the first one. You may withdraw consent at any time; that does not affect processing already completed.
Legitimate interests — to secure the Services, prevent fraud and abuse, review content for policy violations, debug, and understand usage, where those interests do not override your rights
Legal obligations — to comply with law, respond to lawful requests, or defend legal claims
Vital interests — only if needed to protect someone’s vital interests
If you are in Canada
We process information with your express or implied consent where the law allows, or without consent only in the limited cases Canadian law permits (for example fraud prevention or a legal requirement). You may withdraw consent where applicable through account settings or by contacting us.
4. When and with whom do we share personal information?
In Short: We share information with vendors that run the platform, with other users when you post publicly, and when the law requires it. We have no parent company or affiliates.
We may share personal information with:
Service providers that process data for us under contract, including hosting and infrastructure, cloud storage, email delivery, security and logging, content-moderation and AI review tools, and — when paid features exist — a payment processor
Other users and the public when you post recipes, photos, videos, comments, or profile information in public areas. That content can be seen by others and may remain available until you delete it or we remove it
Legal and safety recipients if we believe disclosure is required by law, to protect rights and safety, or to enforce our terms
A buyer or successor if we negotiate or complete a merger, asset sale, financing, or similar transaction
We do not sell your personal information. We do not share it with a parent company or affiliates. We do not share it with marketing partners for their own promotion. Food preferences are never shared with other users, the cooks and channels whose recipes you read, groups you belong to, or our moderators.
5. Do we use cookies and other tracking technologies?
In Short: We use first-party cookies that are necessary to run the Services.
We use first-party cookies (or similar technology) for:
Authentication — keep you signed in and protect your account
Essential operation — security, preventing abuse, and remembering basic settings the site needs in order to work
We do not use third-party advertising cookies, pixels, or analytics suites (such as Google Analytics) at this time.
We keep simple first-party statistics of pages viewed. When you search, they record only whether you turned food preferences off for that search, never the preferences themselves. Food preferences are also left out of the error reports our servers send to our monitoring service.
You can block cookies in your browser. Blocking essential cookies may stop sign-in or other features from working.
This section is our cookie notice. We do not maintain a separate Cookie Policy.
6. Do we offer artificial intelligence-based products?
In Short: We use automated and AI tools to review content for spam and abuse. We do not use AI to generate public-facing recipe products for you at this time.
We use automated systems, which may include third-party AI services, to help review recipes, photos, videos, comments, and similar User Content for spam, scams, vulgarity, slurs, harassment, and other violations of our Terms.
What this means:
We may send posted content (and limited related account or technical data needed for the review) to those tools so they can flag or score it
We use the results to hide, remove, limit, or further review content, and to protect other users
We do not use this review to build third-party advertising profiles
We do not currently send your content to AI providers so they can train their general public models for their own products, unless a provider’s terms require a narrow use to deliver the moderation service itself
These tools can make mistakes. A human may review flagged material. We also use AI to suggest how ingredients in our shared catalogue are tagged (for example whether an ingredient contains gluten); that sends ingredient names only, never your food preferences or other personal information, and staff review every suggestion. If we add other AI features (for example recipe assistants that send your prompts to a model), we will update this notice.
7. How do we handle social logins?
In Short: You can register or sign in with Google or Facebook. We may add other providers later.
You may create an account or sign in using a third-party login, currently Google and Facebook. We may add other providers later. If you choose that option, the provider sends us information from your account there. That usually includes your name, email address, and profile photo. Some providers may also share a unique user ID. We do not receive your social-network password.
We use that information only to create and authenticate your Lucky Apron account and as otherwise described in this notice. We do not post to your Google or Facebook account without a separate action from you.
We do not control the provider’s own privacy practices. Review their privacy notice and your privacy settings on that service.
If we use Google sign-in or other Google APIs, our use of information received from Google APIs will comply with the Google API Services User Data Policy, including the Limited Use requirements.
8. How long do we keep your information?
In Short: We keep information only as long as we need it to provide the Services or as the law requires.
We keep account information and content while your account is open, and food preferences until you change or delete them, withdraw your consent, or close the account. The Lucky Apron app keeps a copy on your device so it works offline; it is removed when you sign out or delete your account.
When we no longer have a legitimate need to keep personal information, we delete or anonymize it, or isolate it in backups until deletion is possible.
We may keep limited information longer if required for tax, accounting, security, dispute resolution, or other legal reasons.
9. How do we keep your information safe?
In Short: We use reasonable technical and organizational measures, but no system is perfectly secure.
We use safeguards designed to protect personal information we process. No internet transmission or storage system is 100% secure. We cannot guarantee that unauthorized parties will never access information. Use the Services on a secure connection when you can.
10. Do we collect information from minors?
In Short: The Services are for users 18 and older.
We do not knowingly collect personal information from, or market to, anyone under 18. By using the Services you represent that you are at least 18. If we learn that we have collected information from someone under 18, we will deactivate the account and delete the data as required. If you believe we have information from a minor, email contact@luckyapron.com.
11. What are your privacy rights?
In Short: Depending on where you live, you may have rights to access, correct, or delete your information, and to opt out of marketing.
Marketing
You can unsubscribe from marketing emails using the link in those emails or by contacting us. We may still send non-marketing messages needed to run your account.
Account
You may review or update account information in settings, or email us to request that we close your account. After a deletion request we will deactivate or delete the account from active systems. We may retain limited information for fraud prevention, security, legal compliance, or to enforce our terms.
EEA, UK, Switzerland, and Canada
You may have rights to access, correct, delete, or restrict processing of your personal information, to data portability, and to object to certain processing. You may also have rights related to automated decisions that produce legal or similarly significant effects.
Contact us using the details below. We will handle requests as required by applicable law.
If you are in the UK and unhappy with our response, you may contact us first and then the Information Commissioner’s Office:
ico.org.uk/make-a-complaint, helpline 0303 123 1113, or Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
If you are in the EEA or UK you may also complain to your local data protection authority. In Switzerland you may contact the Federal Data Protection and Information Commissioner.
Withdrawing consent
Where we rely on consent, you may withdraw it at any time by contacting us or changing settings. For food preferences, withdrawing consent on your Food preferences page deletes them.
12. Controls for do-not-track features
Some browsers offer a Do Not Track (DNT) signal. There is no common standard for honoring DNT, so we do not respond to DNT signals at this time. If a binding standard applies later, we will update this notice. California law requires us to say this.
13. Do United States residents have specific privacy rights?
In Short: Residents of certain U.S. states may request access, correction, deletion, and other rights described below.
This section is for residents of states with consumer privacy laws, including California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia, as those laws apply.
Categories collected
Category | Examples | Collected
A. Identifiers | Name, email, username, IP address, account name | YES
B. Customer Records information | Education, employment, financial account numbers we store | NO
C. Protected classification characteristics | Race, religion, marital status, and similar demographic data we do not request | NO
D. Commercial information | Purchase and payment history | NO today (YES for billing records when paid features launch)
E. Biometric information | Fingerprints, voiceprints | NO
F. Internet or other network activity | Logs of how you use the Services; essential cookies | YES (limited; not advertising profiles) |
G. Geolocation data | Precise GPS | NO
H. Audio, electronic, visual, or similar information | Photos and videos you upload | YES
I. Professional or employment information | Job history | NO
J. Education information | Student records | NO
K. Inferences | Profiles of preferences built for advertising | NO
L. Sensitive personal information | Optional food preferences and diets you choose to save, which may reveal health information (such as allergies) or religious or philosophical beliefs | YES only if you save those preferences; otherwise NO
We also receive information when you contact support.
Retention. Categories A, F, and H: while you have an account, or until you delete the relevant content, unless we must keep a copy for security or law. Food preferences: until you change or delete them, withdraw consent, or close the account.
Sources. You, your device/browser, and service providers that host or deliver the Services.
Sale / sharing. We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We have not sold or shared personal information for those purposes in the past twelve months.
Sensitive personal information. We use food preferences only to provide the features you ask for (search ordering and recipe warnings), so no separate "limit the use of my sensitive personal information" request is needed. We do not use them to infer characteristics about you.
Your rights
Subject to legal limits, you may have the right to:
know whether we process your personal data
access it
correct it
delete it
obtain a copy of data you provided
not be discriminated against for exercising these rights
opt out of targeted advertising, sale, or certain profiling — these do not apply to current Lucky Apron practices because we do not do that advertising
How to exercise rights
Visit https://www.luckyapron.com/r/contact-us or email contact@luckyapron.com. We will verify your identity before completing a request. An authorized agent must show proof of authority.
Appeals
If we deny a request, you may appeal by emailing contact@luckyapron.com. If an appeal is denied, you may contact your state attorney general where that right exists.
California Shine the Light
California residents may request once per year information about personal information disclosed to third parties for those parties’ direct marketing. We do not disclose information for that purpose. To ask, use the contact details in section 16.
14. Do other regions have specific privacy rights?
Australia and New Zealand
We handle personal information in line with Australia’s Privacy Act 1988 and New Zealand’s Privacy Act 2020 as they apply. This notice describes what we collect, why, and who receives it. If you do not provide information needed for an account, we may be unable to provide the Services.
You may request access or correction by contacting us. You may complain to the Office of the Australian Information Commissioner or the Office of the New Zealand Privacy Commissioner.
15. Do we make updates to this notice?
Yes. The “Last updated” date will change when we revise this notice. For material changes we may post a notice on the Services or email you. Review this page from time to time.
16. How can you contact us?
Lucky Apron LLC
Email: contact@luckyapron.com
Web form: https://www.luckyapron.com/r/contact-us
17. How can you review, update, or delete the data we collect from you?
Email contact@luckyapron.com or use https://www.luckyapron.com/r/contact-us. You can also edit much of your account information while signed in, and view, change or delete your food preferences on your Food preferences page. We will handle requests as required by the law that applies to you.