Privacy Policy

1. Who we are

Al Wasfa (الوصفة) is a recipe marketplace. Foodies discover and purchase recipes. Chefs publish recipes, media, and optional subscription plans. Payments are processed in Iraqi dinar (IQD) through third-party gateways (currently Amwal and Zain Cash), not through Google.

Questions about this policy: hello@alwasfa.shop or https://www.alwasfa.shop.

2. Google Sign-In and Google user data

You can create an account or sign in with Google (OAuth). When you choose Continue with Google, Google asks you to share limited account information with Al Wasfa. We only request basic profile information needed to run sign-in: your Google account email address, your name, and your public profile photo (typical OpenID / email / profile scopes). We do not request access to Gmail, Google Drive, Contacts, Calendar, Photos, or any other Google product.

How we use Google user data: we use your email to identify your Al Wasfa account; we use your name and profile photo to create or update your public.profiles display name and avatar if those fields are empty. We do not use Google user data for advertising, credit decisions, or sale to data brokers. We do not allow other parties to use Google user data for those purposes.

How we store Google user data: your email is stored in our authentication provider (Supabase Auth). Your name and avatar URL may be stored in our profiles table. Session cookies keep you signed in. We retain this data while your account exists, and for a limited time afterward in backups, unless a shorter period is required by law.

How we share Google user data: we do not sell Google user data. We share it only with service providers that host or operate the app under contract (for example our database and hosting providers), and if required by law. Those providers may process data outside Iraq.

Limited Use: we limit our use of Google user data to providing or improving user-facing features that are prominent in Al Wasfa — namely signing you in and showing your name and photo in the account chrome. That use matches this published policy.

3. Other information we collect

Account data: email and password if you sign up without Google; role (foodie or chef); optional profile fields such as bio and specialty.

Marketplace data: recipes, media you upload (images and video stored with our media host), cart and order history, purchases, chef subscription memberships, and payout records for chefs.

Assistant (chat): if you use /chat, we store the messages you send and the replies, tied to your account, so you can reopen a conversation.

Technical data: cookies and similar storage for login sessions, locale, cart (on your device), and PWA install-banner dismissals. Server logs may include IP address, browser type, and request paths for security and debugging.

Payments: we do not store full card numbers. Gateways (Amwal, Zain Cash) process payment details under their own policies. We store order amounts, status, and gateway references needed to complete a purchase or subscription.

4. How we use information

To create and secure your account, including Google Sign-In.

To show recipes, unlock purchased or subscribed content, and run Chef Studio.

To process checkout, confirm payment, and show orders and earnings.

To operate the cooking assistant and improve recipe search (including embeddings of recipe text you publish).

To communicate about your account, orders, or security.

To prevent fraud, abuse, and technical issues, and to comply with law.

5. Cookies

We use essential cookies to keep you signed in (Supabase session cookies) and to remember your locale. The shopping cart is stored in your browser (localStorage), not in a third-party ad cookie. We do not use Google user data to build advertising profiles.

6. Your choices

You can edit your display name and avatar in Account settings. You can sign out at any time. You can revoke Al Wasfa’s Google access in your Google Account permissions; you can still use email and password if you set them, or contact us to help recover access.

To correct data or request deletion of your Al Wasfa account and associated personal data (including Google-sourced name, email, and avatar we stored), email us at the address above. We will respond within a reasonable period. We may retain records we must keep for tax, dispute, or legal reasons (for example completed orders).

7. Children

Al Wasfa is not directed at children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child provided data, contact us and we will delete it.

8. Changes

If we change how we use Google user data, we will update this policy and, where required, ask for consent before using that data in a new way. The effective date above will change when we publish a revision.

9. Contact

Al Wasfa privacy contact: hello@alwasfa.shop. Website: https://www.alwasfa.shop.