Expo

Privacy

Last updated 29 August 2026.

Expo takes a meal from pantry to plate: what you have in, what to buy, and a coordinated schedule to cook it all. We keep the data we collect to the minimum that makes that work. We don't run ads, and we don't sell or share your data for advertising.

What we collect

  • Account: your email address, used to sign you in. If you sign in with Google, we receive your email and basic profile from Google.
  • Profile: anything you choose to add: display name, username, a short bio, and an avatar image.
  • Settings: household size, units, ovens and equipment, dietary flags, and cook-mode preferences. Dietary flags are private and never shown to anyone else.
  • Your recipes & cooks: recipes you save, the record of dishes you've cooked, and the step timings that tune estimates to your pace.
  • Your kitchen: the pantry items and shopping list lines you keep. Like everything else here, they're private to your account.
  • Messages: anything you send through the help & feedback form.
  • Technical: we briefly use your IP address to rate-limit abuse of the recipe extractor, the voice and photo features, and the feedback form, plus standard server logs.

Recipe extraction

When you add a recipe link, Expo fetches that public page and sends its content to our AI provider (Anthropic) to work out step timings. We send the recipe text, not your account details. Recipe images are shown by linking to the original site, never copied onto our servers.

Talking to Sous (voice)

In cook mode the microphone records only while you hold the talk button, never in the background. Where your browser can transcribe speech itself (Chrome and most Android browsers), the audio is handled by the browser's own speech recognition under its terms. Everywhere else (including iPhone), the short clip is sent to our transcription provider (Deepgram) to be turned into text, then discarded. The text of what you said, along with what's currently cooking, goes to Anthropic so Sous can answer. We don't store your voice or your questions.

Kitchen photos

When you add pantry items from photos, the pictures you take are sent to Anthropic to read what's on the shelf, and nothing is saved until you review and confirm the list. The photos themselves are analyzed and discarded, never stored. Photos you attach to your cook log are different: those are yours on purpose, kept privately in your account until you delete them.

Who processes your data

We rely on a small set of providers, each handling only what their job needs:

  • Supabase: database, authentication, and file storage.
  • Vercel: hosting, server logs, and anonymous counts of which features are used, such as whether a schedule was set for one cook or two, and that a cook saved changes to a recipe's steps (never what changed) (no recipe content, no account details).
  • Anthropic: reading recipe pages for timings, answering your Sous questions, and reading kitchen photos you send.
  • Deepgram: turning short voice clips into text, where your browser can't do it locally.
  • Resend: sending sign-in and support emails.
  • Upstash: counters for rate limiting and your monthly recipe reads.
  • Google: only if you choose to sign in with Google.

Cookies

We use only what's needed to run the app: a session cookie to keep you signed in, and local storage to remember your theme and cook-mode preferences (like whether voice guidance is on), the meal you're cooking so cook mode can reopen, and a link you pasted before signing in. No advertising or third-party tracking cookies.

Your controls

From Settings you can edit or clear your profile and preferences at any time, export everything we hold as a JSON file (profile, settings, recipes, cook log, step timings, pantry, and shopping list), or delete your account, which permanently removes all of it.

Changes & contact

If this policy changes, we'll update the date at the top. Questions about your data? Reach us through the help & feedback form.