Privacy Policy

Last updated: July 20, 2026

1. Who we are

Paperbag is made by Artysan L.L.C-FZ (Artysan Studio). If you have questions about this policy, contact us at paperbag@artysan.studio.

2. What we collect

When you create an account, we collect your email address and the name you provide during onboarding. When you use the app, we store the recipes you create, including their names, ingredients, portions, category, and any cover photos you choose to upload. We also store your avatar photo if you choose to set one, and your preferred measurement unit system. We do not collect usage analytics, crash reports, or any behavioural data. We process this data on the basis of providing the service you have signed up for.

3. Photo library access

Paperbag requests access to your photo library solely to let you select cover photos for your recipes and an avatar for your profile. We only access photos you explicitly select. We never scan, analyse, or upload your photo library.

4. Meal plan and grocery list

Your meal plan and grocery list are stored only on your device and are never uploaded to our servers. This data is not backed up and does not transfer between devices.

5. How we store your data

Your recipes and account information are stored locally on your device and backed up to our secure cloud servers hosted in Ireland. Recipe photos and your avatar are stored in a private cloud storage bucket accessible only to you. We never sell your data, and we only share it with the service providers listed below that are necessary to run the app.

6. Service providers

We use Resend to deliver authentication and account-related emails, and Supabase to host our cloud database and storage (servers located in Ireland). These providers process data solely to provide the service and do not use it for any other purpose.

7. Sign in with Apple and Google

If you sign in with Apple or Google, we receive only your email address from those providers. We do not receive your name from Apple or Google — you provide it directly during onboarding. If you sign in with Apple and later delete your account, your Apple ID linkage is revoked as part of the deletion process.

8. Account deletion

You can delete your account at any time from the Profile screen. When you delete your account, all your data is immediately removed from your device. Your cloud data, including your recipes and photos, is permanently deleted within 30 days. During this window your account can be recovered by contacting us at paperbag@artysan.studio. After 30 days, deletion is permanent and irreversible.

9. Your rights

You can request a copy of your data or ask us to delete it at any time by contacting paperbag@artysan.studio. Account deletion is also available directly in app without contacting us.

10. Children

Paperbag is not directed at children, and is not intended for anyone under the minimum age required by the laws of their country (for example, 16 in much of the European Union). We do not knowingly collect data from children.

11. Changes to this policy

If we make significant changes to this policy, we will notify you via email. Continued use of the app after changes constitutes acceptance of the updated policy.