Privacy Policy

Effective Date: May 26, 2026  |  Last Updated: May 26, 2026

953 LLC, doing business as Compagnon ("we," "us," or "our"), operates the Compagnon mobile application and related services (the "Service"). This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

By using Compagnon, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

1. Information We Collect

a) Information You Provide

b) Information Collected Automatically

c) Information from Third-Party Sign-In

If you sign in with Apple or Google, we receive your name and email address (or a relay email in Apple's case) as authorized by you during the sign-in flow. We do not receive your password from these providers.

2. How We Use Your Information

PurposeData Used
Provide and operate the ServiceAccount info, preferences, user content
Generate AI-powered recipe suggestions, execution plans, and cooking feedbackChat messages, recipes, cooking session data
Sync your data across devicesAll user content (via encrypted cloud sync)
Process subscriptions and paymentsAccount info, subscription tier (payment details handled by Apple/Google/Stripe)
Send transactional emails (confirmation, password reset)Email address
Enforce rate limits and prevent abuseIP address, user ID, request timestamps
Diagnose errors and improve performanceCrash reports, usage data, device info

3. AI Processing & Third-Party Services

When you use Compagnon's AI features (recipe creation, chat, execution planning, cooking feedback), your messages and relevant recipe data are sent to OpenAI via our secure proxy server to generate responses. We do not send your name, email, or account credentials to OpenAI.

OpenAI's use of data sent through our API is governed by their API Data Usage Policy. As of the effective date of this policy, OpenAI does not use API inputs or outputs to train their models.

We use the following third-party services:

ServicePurposeData Shared
SupabaseAuthentication & databaseAccount info, user content
PowerSyncReal-time data syncUser content (encrypted)
OpenAIAI recipe generation & chatChat messages, recipe data
ResendTransactional emailsEmail address
StripeWeb payment processingEmail, subscription status
Apple / GoogleIn-app purchase processingAccount ID, subscription status

4. Data Storage & Security

Your data is stored on secure, cloud-hosted infrastructure (Supabase and PowerSync) with encryption in transit (TLS) and at rest. Our API server is hosted on Railway with HTTPS enforced. We implement access controls, rate limiting, and authentication checks to protect your data.

While we take reasonable measures to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

5. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law (e.g., financial records, legal obligations).

Aggregated, anonymized data that cannot identify you may be retained indefinitely for analytics and service improvement.

6. Your Rights

All Users

European Economic Area (GDPR)

If you are located in the EEA, you have additional rights under the General Data Protection Regulation:

California Residents (CCPA)

If you are a California resident, you have the right to:

7. Children's Privacy

Compagnon is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13 without parental consent, we will delete that data promptly. If you believe a child has provided us with personal information, please contact us.

8. Cookies & Tracking

The Compagnon mobile app does not use cookies. Our web services (e.g., landing pages) may use essential cookies for functionality but do not use advertising or third-party tracking cookies.

9. International Data Transfers

Your data may be processed in the United States, where our servers and service providers are located. By using the Service, you consent to the transfer of your data to the United States. We ensure appropriate safeguards are in place for international transfers as required by applicable law.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last Updated" date at the top of this page and, where appropriate, via email or an in-app notification. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy, want to exercise your rights, or need to report a concern, contact us at: