Effective Date: May 26, 2026 | Last Updated: August 19, 2026
953 LLC, doing business as Compagnon ("we," "us," or "our"), operates the Compagnon mobile application and related services (the "Service"). This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.
By using Compagnon, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.
If you sign in with Apple or Google, we receive your name and email address (or a relay email in Apple's case) as authorized by you during the sign-in flow. We do not receive your password from these providers.
| Purpose | Data Used |
|---|---|
| Provide and operate the Service | Account info, preferences, user content |
| Generate AI-powered recipe suggestions, execution plans, and cooking feedback | Chat messages, attached photos, recipes, cooking session data, preferences |
| Suggest seasonal, locally available ingredients | Approximate location (city/region), only if you opt in |
| Sync your data across devices | All user content (via encrypted cloud sync) |
| Process subscriptions and payments | Account info, subscription tier (payment details handled by Apple/Google/Stripe) |
| Send transactional emails (confirmation, password reset) | Email address |
| Enforce rate limits and prevent abuse | IP address, user ID, request timestamps |
| Diagnose errors and improve performance | Crash reports, usage data, device info |
When you use Compagnon's AI features (recipe creation, chat, execution planning, cooking feedback, recipe images), the following is sent to OpenAI via our secure proxy server to generate responses and recipe images:
We do not send your name, email, or account credentials to OpenAI, and we do not use your content to train models.
OpenAI's use of data sent through our API is governed by their API Data Usage Policy. As of the effective date of this policy, OpenAI does not use API inputs or outputs to train their models.
We use the following third-party services:
| Service | Purpose | Data Shared |
|---|---|---|
| Supabase | Authentication & database | Account info, user content |
| PowerSync | Real-time data sync | User content (encrypted) |
| OpenAI | AI recipe generation, chat & recipe images | Chat messages, attached photos, recipe data, preferences, approximate location (opt-in) |
| RevenueCat | Subscription management | Your user ID, purchase receipts/transactions, device info |
| Sentry | Crash & performance diagnostics | Device model, OS, app version, IP address, error traces, and in-app event breadcrumbs. We do not intentionally send message content or recipe text to Sentry. |
| Resend | Transactional emails | Email address |
| Stripe | Web payment processing | Email, subscription status |
| Apple / Google | In-app purchase processing | Account ID, subscription status |
Location is optional and off by default. If you turn it on, Compagnon requests "while in use" location access only, resolves your position to a city/region name on your device, and stores only that place name with your preferences. We do not store precise coordinates or a location history. The place name is used to suggest seasonal, locally available ingredients, and (if set) is included with your preferences when generating AI responses. You can remove it at any time in Settings, or by revoking location permission in your device settings.
You can delete your account at any time from within the app at Settings → Delete Account. This deletes your account and the content associated with it — recipes, cooking sessions, menus, grocery lists, chat history, and preferences. If you signed in with Apple, we also revoke your Sign in with Apple tokens with Apple at the moment of deletion, so Compagnon no longer appears as an authorized app for your Apple ID. Subscriptions are managed by Apple or Google and are not cancelled by deleting your account; cancel them in your device's subscription settings.
Your data is stored on secure, cloud-hosted infrastructure (Supabase and PowerSync) with encryption in transit (TLS) and at rest. Our API server is hosted on Railway with HTTPS enforced. We implement access controls, rate limiting, and authentication checks to protect your data.
While we take reasonable measures to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.
We retain your data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law (e.g., financial records, legal obligations).
Aggregated, anonymized data that cannot identify you may be retained indefinitely for analytics and service improvement.
If you are located in the EEA, you have additional rights under the General Data Protection Regulation:
If you are a California resident, you have the right to:
Compagnon is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13 without parental consent, we will delete that data promptly. If you believe a child has provided us with personal information, please contact us.
The Compagnon mobile app does not use cookies. Our web services (e.g., landing pages) may use essential cookies for functionality but do not use advertising or third-party tracking cookies.
Your data may be processed in the United States, where our servers and service providers are located. By using the Service, you consent to the transfer of your data to the United States. We ensure appropriate safeguards are in place for international transfers as required by applicable law.
We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last Updated" date at the top of this page and, where appropriate, via email or an in-app notification. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.
If you have questions about this Privacy Policy, want to exercise your rights, or need to report a concern, contact us at: