Privacy Policy

At Kusi, we believe in keeping things simple — including how we handle your data. This policy explains what we collect, what we don't, and how we keep it safe. If you have questions, email us at privacy@kusi.ph.

1. Who we are

Kusi (the "app", "we", "us", or "our") is operated by iScale Studio, operated by David Jonathan Tañedo, based in the Republic of the Philippines. Kusi is a Filipino home-cooking app that uses artificial intelligence to suggest meal ideas and generate recipes based on your budget.

2. Information we collect

We've designed Kusi to collect as little personal data as possible. Specifically:

• Anonymous user ID: When you open the app, we create a random anonymous identifier through Supabase Authentication. This ID has no connection to your real identity — we never see your name, email, or phone number.
• On-device data: Details like your name, household size, and saved meals are stored locally on your phone using encrypted device storage. We don't receive copies of this data.
• Usage records: We log basic usage events tied to your anonymous ID (such as how many meal suggestions you've generated today) to enforce daily fair-use limits.
• Generated recipes: Recipes that Kusi generates for you are cached on our servers so other users can benefit from the same recipe without re-generating — these caches are anonymous and not linked to you personally.
• Feedback: If you submit feedback through the in-app feedback form, we store the text you wrote plus your app version and platform (iOS or Android), tied to your anonymous ID.

3. Information we don't collect

Kusi does NOT collect, store, or transmit:

• Your real name, email address, or phone number
• Your location or GPS coordinates
• Your contacts, photos, microphone, or camera
• Payment or financial information
• Health or biometric data
• Advertising identifiers (IDFA, GAID, etc.)
• Third-party analytics (we use no Google Analytics, Facebook Pixel, Mixpanel, or similar tracking)

4. Third-party services we use

Kusi relies on a few trusted third-party services to function:

• Supabase (backend infrastructure and database). Hosted by Supabase Inc., uses Amazon Web Services data centers. See their privacy policy at supabase.com/privacy.
• Anthropic (AI recipe generation via Claude API). When you ask Kusi to suggest a meal, your budget and a short prompt are sent to Anthropic's Claude API for processing. Per Anthropic's commercial API policy, they do not retain prompts for model training. See their privacy policy at anthropic.com/privacy.
• Expo / EAS (mobile app delivery and over-the-air updates). Their privacy policy is at expo.dev/privacy.

We do not sell your data to anyone, ever. We don't share it with advertisers or data brokers.

5. How we use your information

We use the data described above to:

• Generate personalized meal suggestions and recipes
• Enforce daily fair-use limits to keep the app affordable
• Improve the app based on your feedback (when you submit it)
• Identify and fix bugs or crashes (using only anonymized usage patterns)

We do not use your data for advertising, profiling, automated decision-making that legally affects you, or any other purpose beyond running the app.

6. Data retention

• Anonymous user ID + usage records: retained as long as you have the app installed, plus up to 90 days after you uninstall (for daily-limit enforcement and audit logs).
• Generated recipe cache: retained indefinitely to benefit all users with faster meal suggestions. The cache is anonymous (no link to specific users).
• Feedback messages: retained indefinitely for product improvement. You can request deletion of your feedback at any time.
• On-device data (name, household size, saved meals): stays on your phone and is removed when you uninstall the app.

7. Your rights

You have the right to:

• Access the data we hold about you (tied to your anonymous ID)
• Request deletion of your data, including any feedback you've submitted
• Correct any data you believe is inaccurate
• Object to specific processing activities
• Lodge a complaint with the National Privacy Commission of the Philippines (privacy.gov.ph) or your local data protection authority.

To exercise any of these rights, email us at privacy@kusi.ph from any address. To verify your data, include your anonymous user ID — you can find it in the app under Settings (coming soon) or just describe your usage pattern. We respond to all valid requests within 30 days.

8. Security

We take reasonable measures to protect your data, including:

• HTTPS encryption for all data in transit
• Row-Level Security (RLS) on our database, so users can only access their own records
• Encrypted on-device storage for sensitive preferences (via Expo SecureStore)
• No service-role API keys or admin credentials exposed to the mobile app
• Regular security audits and dependency vulnerability scanning

However, no online service can guarantee absolute security. If we ever experience a data breach affecting your information, we'll notify affected users within 72 hours and report to the National Privacy Commission as required by Philippine law.

9. Children's privacy

Kusi is a general-audience app suitable for cooks of all ages. However, we do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please email us at privacy@kusi.ph and we will promptly remove it.

10. International users

Kusi is operated from the Philippines and primarily serves Filipino users worldwide. If you access Kusi from outside the Philippines (including the European Union or California), your information may be transferred to and processed in the Philippines, United States (where Supabase and Anthropic operate), or other countries where our service providers maintain infrastructure.

For users in the European Economic Area (EEA), United Kingdom, or Switzerland: we process your data under the legal basis of legitimate interest (providing the Kusi service you requested) and consent (for non-essential processing). You have rights under the General Data Protection Regulation (GDPR), including those listed in Section 7.

For California residents: under the California Consumer Privacy Act (CCPA), you have the right to know what personal information we collect, request its deletion, and opt out of any sale of personal information (we don't sell yours).

11. Changes to this policy

We may update this Privacy Policy as Kusi evolves. Material changes will be communicated through an in-app notice and/or by updating the "Last updated" date at the top of this page. Continued use of the app after a policy update constitutes acceptance of the revised terms.

12. Contact us

Questions, complaints, or data requests? Email us:

privacy@kusi.ph

iScale Studio, operated by David Jonathan Tañedo
Tarlac, Philippines