Privacy Policy

How Superior Dough collects, uses, and protects your data.

Effective October 6, 2026 · Version 1.5

Superior Dough ("we", "us") is a baking app operated by Superior Dough LLC, a Wyoming limited liability company. This Privacy Policy explains what we collect, why, and the choices you have. If anything here is unclear, email hello@superiordough.com.

What we collect

• Account information. Email address, display name, optional username, and the skill level, equipment, and goals you provide during onboarding.
• Profile content. Avatar image, bio, and the city or region you enter. If you turn on the Starter Map, we store the approximate centre of that city or region, never anything closer, so your starters can appear on the map.
• Content you create. Starters, bakes, photos, formulas, notes, and bake costs. This is your data; we store it so you can access it across devices and back it up. Bake costs are visible only to you.
• Recipe imports. When you use Scan to Import, the photo of the page, the web address, or the text you paste is sent through our server to Anthropic's Claude API to be read and converted into a formula. We do not store the photo, the fetched page, or the pasted text. We store the result on your account: the formula and its timings, the recipe's written method and notes for your personal use, and the source address and author where the page names one. A count of your imports is kept for rate limiting.
• Baker Chat conversations. The questions you send, Baker's replies, any photos you attach, and the recipe, starter, and environmental context the app attaches so Baker can answer in your situation. Conversations are stored on your account so they sync across your devices, until you delete them or your account. Usage counts are kept for free-tier limits.
• Messages. Direct messages you exchange with other bakers, which are text only. Each message is stored for both people in the conversation.
• Activity on The Bench. Who you follow, your reactions, Baker's Notes you leave on posts, bakes you save, bakers you mute or block, Weekly Challenge entries, and reports you file.
• Searches. The queries you type into search, stored with your account so we can show you your recent searches. We also record which result you opened, and which formulas and results you open elsewhere in the app, to learn which answers are useful. These records are separate from the usage data described below and are not affected by its switch.
• Feedback. When you tell us an answer from Baker was wrong or report a problem, we store your question, Baker's reply, and your device's browser or app version so we can reproduce it.
• Team data. If you join a Master Baker team, the team owner sees your production assignments and your handle.
• Subscription state. Plan tier, billing status, Founding Baker membership, renewal date. Payment card numbers are never seen by us; they live with Stripe or Apple.
• Device and technical data. Approximate device model, OS version, app version. Used for diagnostics and to ship the right build to the right surface.
• Notification token. If you allow notifications in the iOS app, the token Apple issues so we can send them. Removed when you sign out or delete your account.
• Location (optional). Only if you grant permission. We ask your device for an approximate position, not high-accuracy GPS, and use it for weather-aware baking advice (humidity, temperature on bake day). It stays on your device; we do not store it on your account.
• Crash reports. Stack traces with personally identifying fields scrubbed. No email addresses or tokens are attached to crash events.
• Product usage. Named events for the actions that tell us whether the app is working — opening the Formula Lab, completing a step, saving a formula, logging a bake, feeding a starter, seeing the paywall, starting a subscription. Each event carries the action, your account identifier, and a small fixed label such as the dough type or the plan tier. It never carries the content of what you made: no formula names, no notes, no photos, no search queries, no messages. You can switch this off in Settings → Share usage data. If you are in the EU, the EEA, Switzerland or the UK, it starts off and is collected only if you turn it on there.
• Performance and errors. With the same switch on, the app also records how it is performing for you: how long screens take to load, requests to our servers that are slow or fail, moments the app freezes, and errors in the app's code. These records carry your account identifier, your device and browser type, and the app version. Web addresses are recorded without anything after a question mark, and the screen is never recorded: anything you tap is described without its text. It is governed by Settings → Share usage data exactly as product usage is.

What we do not do today

As of the effective date above:

• We do not track you across other apps, websites, or offline properties.
• We do not sell or share your personal data with advertisers.
• We do not serve third-party advertising in the app.
• We do not collect high-accuracy GPS location.
• We do not use your microphone. The camera is used only when you take or scan a photo or a QR code.

These statements describe how the app works today; they are not a permanent commitment. If we ever change them — for example, by introducing advertising, or by sharing or selling personal information to third parties for their own purposes — we will update this policy, notify you in the app before the change takes effect, and provide any consent mechanism or opt-out the law requires. We will not apply a materially different practice to data already collected without a lawful basis for doing so.

How we use your data

• To run the core features of the app — Formula Lab and its active-bake control surfaces, starter tracking, the Bake Log, Baker Chat, The Bench, and messages between bakers.
• To show you your own recent searches, and to improve search for everyone. Your searches are stored against your account so the recent list works; the crowd signal we use to rank results for other bakers is aggregated and anonymized, and no other baker sees a query of yours. Your own formulas, bakes, and notes stay private: we index them only so you can search them, and that private index is never shared with or used to serve other bakers.
• To sync your data across the devices you sign in on.
• To convert a recipe you import into a formula, and to keep its written method on your account so you can bake from it. When you publish or share an imported formula, the author's writing is removed from the public copy and an attribution to the source travels in its place; your own caption and Baker Chat's notes stay. See the Terms of Service for the copyright rule behind this.
• To enforce free-tier usage limits server-side, and rate limits that keep The Bench free of spam.
• To review reports and keep The Bench safe under our Community Guidelines.
• To email you about your account — security notices and material changes to these policies — and, occasionally, news about the app. Every news email carries an unsubscribe link, and unsubscribing is honored permanently. Security and account emails are part of running your account and carry no unsubscribe.
• To diagnose crashes and technical faults in aggregate.
• To understand which parts of the app get used, and where people get stuck, so we know what to build and what to fix. This is measurement of our own product, not advertising, profiling, or a signal we sell or share.

Service providers

We use the following processors to run the app. Each is contractually bound to use your data only for the purposes we direct.

• Supabase — account authentication, database, file storage, and real-time sync. Data resides in Supabase infrastructure with row-level security enforced at the database layer.
• Stripe — subscription billing on the web. Card numbers, billing addresses, and tax data are held by Stripe; we receive only a customer reference and subscription state.
• Apple App Store — billing for subscriptions bought in the iOS app, where available. Apple holds the payment relationship; we receive only a transaction identifier and entitlement.
• Apple Push Notification service — delivers notifications to the iOS app if you allow them. Apple receives the notification text and your device token.
• Anthropic — Baker Chat, Scan to Import, and starter-name suggestions are sent through our server to Anthropic's Claude API to produce a response. The app asks your permission before the first of these is sent, and you can withdraw it in Settings, under Share with Baker's providers. We store your Baker Chat conversations on your account, as described above; we do not store the photos, web pages, or text you import. See Anthropic's privacy policy for their retention.
• Voyage AI — turns the text of your notes, bakes, starters, and Bench captions into numerical embeddings so search and Baker Chat can find the relevant ones. Your search queries and Baker Chat questions are also sent to Voyage to match against them, and are not stored as embeddings. The vectors are stored in our database, not by Voyage. None of your words go to Voyage until you allow sharing with Baker's providers (the same permission Baker Chat asks for); without it, search still works by keyword. If you turn it off in Settings → Share with Baker's providers, your words stop going to Voyage and the search index entries made from them are deleted at the next index run.
• Open-Meteo — weather and elevation data. If you allow location access, your coordinates are sent through our server for the forecast, and your device contacts Open-Meteo directly for elevation, which means Open-Meteo also receives your IP address. No account identifier is sent.
• OpenStreetMap (Nominatim) — turns your coordinates into a place name so Conditions can show where you are baking. Your device contacts this service directly, which means it also receives your IP address. No account identifier is sent.
• Sentry — error and crash reporting so we can find and fix defects. Reports carry technical context (error message, stack trace, app version, device type) and your account identifier, never your email address. They are not used for analytics or marketing.
• PostHog — product analytics. Receives the usage events described above, tied to your account identifier so we can tell one baker's path through the app from another's. We have disabled session recording, autocapture, and surveys, and we tell PostHog not to store your IP address with events, so PostHog never receives a recording of your screen or the text of what you typed. It is not used for advertising and we do not share it onward.
• Datadog — performance and error monitoring for the app (the performance and error records described above). Your device sends these directly to Datadog, which means Datadog also receives your IP address. Session replay is off, so Datadog never receives a recording of your screen, and the text you type or tap is masked before anything is sent. It is not used for advertising and we do not share it onward.
• Resend — email delivery. Resend holds your email address and display name. We record whether an email was delivered or opened, and we keep replies you send us.
• Vercel — hosting for the web app and our server routes.
• Shopify — runs the Superior Dough shop. We send Shopify no information about you; if you buy from the shop, Shopify handles the order under its own privacy policy.

These providers process data in the United States and other countries.

Photo and content storage

Photos you upload are stored in Supabase Storage. Avatars are public. Bench posts, including their photos, can be seen by anyone viewing The Bench; photos are served through short-lived links from private storage. Bake-log photos you have not shared stay private. You can delete any photo at any time from the surface where you posted it.

A formula you publish to The Bench, and a formula or note you share by link, is frozen as a public copy at the moment you share it. Anyone who has the link can read that copy without signing in. The copy carries the formula, its timings, your caption, Baker Chat's notes where the formula came from Baker, and an attribution to the source where the formula was imported. It does not carry the written method of an imported recipe. It stays readable until you delete the post, revoke the link, or delete your account.

If you block a baker, neither of you can see the other's Bench posts, Baker's Notes, or reactions, and neither can message the other. If you mute a baker, their posts leave your feed and they are not told.

Cookies and local storage

We do not use cookies. The app keeps your sign-in session, your settings, offline copies of your content, and the analytics and performance-monitoring identifiers described above in your device's local storage. We do not use third-party advertising, marketing-attribution, or behavioral-tracking technology, and nothing here follows you to another company's app or website. Turning off Settings → Share usage data stops those identifiers being created or used.

Data security

All traffic between your device and our servers is encrypted in transit (TLS 1.2 or higher). Row-level security policies are enforced at the database layer, which means user A cannot read user B's private data even if a query is malformed. Secret keys never reach your device. We keep regular database backups so we can recover from a serious fault.

Data retention

Account and content data, including recipes you import, Baker Chat conversations, and the public copies you share, are retained for the life of your account.

When you delete your account (Settings → Account → Delete Account), we delete your account, your content, your photos, and your Baker's Notes, messages, and Baker Chat conversations straight away. Any Stripe subscription is cancelled in the same step. An App Store subscription is managed by Apple: cancel it in your Apple account settings, because it does not end when you delete your account. Search logs, feedback you sent us, emails you sent us, and reports you filed are kept without your name or account attached. Deleted data can stay in our backups for a short period until they rotate out. We keep billing records for the period required by law — typically seven years for tax records.

Your rights

• Access and export. Settings → Your Data lets you download your formulas (.sdf) and a backup of your starters, bakes, recipes, notes, and preferences (.json). For a copy of anything else we hold, email hello@superiordough.com and we will send it.
• Correction. You can edit or remove any content you create.
• Deletion. You can permanently delete your account from Settings → Account → Delete Account. Deletion is immediate and irreversible.
• Consent withdrawal. You can revoke location, camera, and notification permissions from your device's system settings at any time, switch off Settings → Share usage data, and unsubscribe from news email from any news email we send.

For EU and UK users (GDPR)

Our legal basis for processing your account and content data is contract — we need it to run the app you signed up for. Our legal basis for sending occasional news from the founder is legitimate interest: we tell you when you sign in, and you can object at any time by turning off Settings → Email from Superior Dough or by unsubscribing from any email. With it off, the only email we send you is your sign-in code. For the product-usage measurement described above, our basis in the EU, the EEA, Switzerland and the UK is your consent: it stays off until you turn on Settings → Share usage data, and you can turn it off again there at any time. You have the rights above plus the right to lodge a complaint with your local supervisory authority. To exercise any of these rights, email hello@superiordough.com.

For California users (CCPA and CPRA)

As of the effective date above, we do not sell or share your personal information as those terms are defined under the CCPA and CPRA, so no "Do Not Sell or Share My Personal Information" mechanism is currently required. If that changes, we will update this policy and provide the opt-out the statute requires before any such sale or sharing begins. You retain the right to know what we collect, to delete it, to correct it, and to opt out of any future sale or sharing. To exercise any of these, email hello@superiordough.com. We will respond within the statutory window.

Children's privacy

Superior Dough is not directed at children. Accounts are for people 13 and older, or the higher minimum age your country sets for this kind of service (16 in Germany, Ireland and the Netherlands, for example). When you sign in, you confirm you meet it. We do not ask your age or keep a date of birth, and we do not knowingly collect data from anyone below that age. If you believe a minor has provided us data, email hello@superiordough.com and we will delete it.

Changes to this policy

If we make material changes to this policy, we will notify you in-app and require re-acceptance before continuing to use the service. The version and effective date above identify the active policy.

Contact

Superior Dough LLC · 1442 Pottstown Pike, Unit #3245, West Chester, PA 19380, USA · hello@superiordough.com