Privacy Policy
How Scraps handles your data — in plain language, not legalese.
Last updated: March 8, 2026
THE SHORT VERSION
→ We collect what you give us (account info, pantry, household, recipes) to make Scraps work.
→ Your conversations are sent to Anthropic's Claude API to generate recipes. They don't train on it.
→ We don't sell your data. We use analytics to improve the product, not to target you.
→ You can delete your account and all your data anytime. Just ask.
What we collect
Scraps only collects what it needs to work. Here's the full list:
Account info
Username, email address, and a hashed password. We never store your actual password.
Conversations
Your chat messages with Scrap and the AI responses. These are stored so you can pick up where you left off.
Household profiles
Diner names, life stages, allergies, dietary restrictions, preferences, and dislikes. This is what lets Scrap cook for your actual household.
Images
Recipe photos you upload and receipt images you scan. Receipt images are processed for text extraction and not stored long-term.
Kitchen data
Pantry items, shopping lists, equipment inventory, saved recipes, recipe notes, and ratings.
Technical data
IP addresses for rate limiting and security. Browser user agent strings submitted with feedback. We use PostHog for product analytics (page views, feature usage) to understand how people use Scraps and make it better.
How we use your information
Everything we collect serves the product. We use your data to:
- • Generate personalized recipes based on your pantry, equipment, and household
- • Remember your conversations so you can revisit and riff on past meals
- • Track your saved recipes, notes, and cooking history
- • Send transactional emails (verification, password reset, username recovery)
- • Enforce rate limits and prevent abuse
- • Analyze product usage to improve the service (via PostHog)
We do not currently sell your personal data or serve advertising. If that ever changes, we'll update this policy and let you know.
AI processing & third-party services
This is the important one. Scraps uses AI to generate recipes and have conversations — here's exactly how that works.
When you chat with Scrap, your messages — along with relevant context like your pantry contents, household profiles, and equipment — are sent to Anthropic's Claude API. Under Anthropic's commercial API terms, this data is not used to train their models.
The third-party services we use:
- • Anthropic — AI provider that powers Scrap's conversations and recipe generation
- • Cloudflare — Cloud infrastructure that hosts the app, database, and file storage
- • Resend — Transactional email delivery (verification, password reset)
- • PostHog — Product analytics (feature usage, not personal profiling)
We don't share your personal data with any of these providers beyond what's necessary for them to do their job.
Data storage & security
Your data is stored on secure cloud infrastructure provided by Cloudflare. Passwords are hashed with bcrypt before storage — we cannot read them. Authentication tokens are cryptographically signed.
All connections use HTTPS. Rate limiting protects against brute-force attacks. We implement reasonable administrative, technical, and physical safeguards to protect your personal data. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.
Your rights
Depending on where you live, you may have rights regarding your personal data under applicable privacy laws (including the California Consumer Privacy Act, the Minnesota Consumer Data Privacy Act, and others). Generally, you have the right to:
- • Access your data — everything you've put into Scraps is visible to you in the app
- • Correct your data — edit your profile, household members, pantry, and recipes at any time
- • Delete your data — you can delete individual items, or request full account deletion
- • Opt out of data sales — we don't currently sell data, but if that changes, you'll have an opt-out
To exercise any data rights not available directly in the app, contact us at the email below. We'll respond within a reasonable timeframe as required by applicable law.
Children's privacy
Scraps is a general-audience service designed for adults. We do not knowingly collect personal information directly from children under 13. You may add household members of any age (including children) to your profile — this information is entered by you, the adult account holder, to help Scrap generate safe, appropriate recipes for your family.
If you believe a child under 13 has created an account on Scraps, please contact us and we will promptly delete it.
Changes to this policy
We may update this policy as Scraps evolves. If we make material changes, we'll update the date at the top of this page. For significant changes that affect how we handle your data, we'll notify you via email or an in-app notice.
Contact
Questions about this policy? Reach us at privacy@scraps.kitchen.
Scraps is built and operated by Mitch in Minneapolis, Minnesota.