Privacy Policy
How Superior Dough collects, uses, and protects your data.
Superior Dough ("we", "us") is a baking app operated by Superior Dough LLC, a Wyoming limited liability company. This Privacy Policy explains what we collect, why, and the choices you have. If anything here is unclear, email hello@superiordough.com.
What we collect
- Account information. Email address, display name, optional username, and the skill level, equipment, and goals you provide during onboarding.
- Profile content. Avatar image, bio, and location (city or ZIP — we display city or region only).
- Content you create. Starters, bakes, photos, formulas, notes, and comments. This is your data; we store it so you can access it across devices and back it up.
- Baker Chat messages. The questions you send to Baker Chat and the recipe, starter, and environmental context the app attaches so Baker can answer in your situation. Usage counts are kept for free-tier rate limiting.
- Searches. The queries you type into search, stored with your account so we can show you your recent searches. We also log which result you opened, to learn which answers are useful.
- Voice playback (Baker Voice, planned). When Baker Voice is enabled, the text we send to ElevenLabs to synthesize speech. We do not record or store your microphone input.
- Subscription state. Plan tier, billing status, Founding Baker membership flag, renewal date. Payment card numbers are never seen by us; they live with Stripe or Apple.
- Device and technical data. Approximate device model, OS version, app version. Used for diagnostics and to ship the right build to the right surface.
- Coarse location (optional). Only if you grant permission. Used to tailor weather-aware baking advice (humidity, temperature on bake day).
- Crash reports. Stack traces with personally identifying fields scrubbed. No email addresses or tokens are attached to crash events.
- Product usage. Named events for the actions that tell us whether the app is working — opening the Formula Lab, completing a step, saving a formula, logging a bake, feeding a starter, seeing the paywall, starting a subscription. Each event carries the action, your account identifier, and a small fixed label such as the dough type or the plan tier. It never carries the content of what you made: no formula names, no notes, no photos, no search queries, no messages. You can switch this off in Settings → Share usage data.
What we do not do today
As of the effective date above:
- We do not track you across other apps, websites, or offline properties.
- We do not sell or share your personal data with advertisers.
- We do not serve third-party advertising in the app.
- We do not collect precise GPS location.
- We do not record microphone or camera input outside of explicit upload flows you initiate.
These statements describe how the app works today; they are not a permanent commitment. If we ever change them — for example, by introducing advertising, or by sharing or selling personal information to third parties for their own purposes — we will update this policy, notify you in the app before the change takes effect, and provide any consent mechanism or opt-out the law requires. We will not apply a materially different practice to data already collected without a lawful basis for doing so.
How we use your data
- To run the core features of the app — Formula Lab and its active-bake control surfaces, starter tracking, the Bake Log, Baker Chat, and The Bench community feed.
- To show you your own recent searches, and to improve search for everyone. Your searches are stored against your account so the recent list works; the crowd signal we use to rank results for other bakers is aggregated and anonymized, and no other baker sees a query of yours. Your own formulas, bakes, and notes stay private: we index them only so you can search them, and that private index is never shared with or used to serve other bakers.
- To sync your data across the devices you sign in on.
- To enforce free-tier usage limits server-side.
- To communicate with you about your account — receipts, security notices, and material changes to these policies.
- To diagnose crashes and technical faults in aggregate.
- To understand which parts of the app get used, and where people get stuck, so we know what to build and what to fix. This is measurement of our own product, not advertising, profiling, or a signal we sell or share.
Service providers
We use the following processors to run the app. Each is contractually bound to use your data only for the purposes we direct.
- Supabase — account authentication, database, file storage, and real-time sync. Data resides in Supabase infrastructure with row-level security enforced at the database layer.
- Stripe — subscription billing for web and Android. Card numbers, billing addresses, and tax data are held by Stripe; we receive only a customer reference and subscription state.
- Apple App Store — subscription billing for iOS. Apple holds the payment relationship; we receive only a transaction identifier and entitlement.
- Anthropic — Baker Chat is proxied through our server to Anthropic's Claude API. Your messages are sent for the duration of a response and are not retained by us afterward. See Anthropic's privacy policy for their retention.
- Voyage AI — converts your saved notes, recipes, and Baker Chat messages into numerical embeddings so Baker can retrieve the relevant ones when answering you. The text is sent to Voyage to compute the embedding; the resulting vectors are stored in our database, not by Voyage.
- Open-Meteo — weather and elevation data. If you allow location access, your device's coordinates are used to retrieve local temperature, humidity, pressure, and elevation. No account identifier is sent.
- OpenStreetMap (Nominatim) — turns your coordinates into a place name so Conditions can show where you are baking. Your device contacts this service directly, which means it also receives your IP address. No account identifier is sent.
- Sentry — error and crash reporting so we can find and fix defects. Reports carry technical context (error message, stack trace, app version, device type) and your account identifier. They are not used for analytics or marketing.
- PostHog — product analytics. Receives the usage events described above, tied to your account identifier so we can tell one baker's path through the app from another's. We have disabled session recording, autocapture, and surveys, and your IP address is dropped rather than stored, so PostHog never receives a recording of your screen, the text of what you typed, or your location. It is not used for advertising and we do not share it onward.
- ElevenLabs (planned) — text-to-speech for Baker Voice. We send only the text to be spoken; no account identifier and no audio recording.
- Resend — transactional email (password reset, receipts, account-deletion confirmations). No marketing email.
- Vercel and Cloudflare — hosting and static-asset delivery.
Photo and content storage
Photos you upload are stored in Supabase Storage. Avatars and Bench posts are publicly readable (that is the point of a community feed). Bake-log photos default to private and are only readable when you sign a share link or post them to the Bench. You can delete any photo at any time from the surface where you posted it.
Cookies and tracking
We use only essential cookies — session tokens to keep you signed in. We do not use third-party advertising, marketing-attribution, or behavioral-tracking cookies, and nothing here follows you to another company's app or website. The app uses local storage on your device to cache your settings and offline-available content, and to hold the analytics identifier described above. Turning off Settings → Share usage data stops that identifier being created or used.
Data security
All traffic between your device and our servers is encrypted in transit (TLS 1.2 or higher). Row-level security policies are enforced at the database layer, which means user A cannot read user B's data even if a query is malformed. API keys never reach the browser. Production data on the Supabase Pro tier benefits from point-in-time recovery (PITR) — we can restore the database to any moment in the recent past in the event of a serious bug or attack.
Data retention
Account and content data are retained for the life of your account. When you delete your account (Settings → Account → Delete Account), we immediately remove all rows linked to your account, all photos you uploaded, and all comments you posted. Active subscriptions are cancelled with your payment provider in the same flow. Some operational records (audit logs, billing receipts) are retained for the period required by law — typically seven years for tax records.
Your rights
- Access and export. You can export every piece of your data from Settings → Account → Export Data as a JSON archive.
- Correction. You can edit or remove any content you create.
- Deletion. You can permanently delete your account from Settings → Account → Delete Account. Deletion is immediate and irreversible.
- Consent withdrawal. You can revoke location, notification, and microphone permissions from your device's system settings at any time.
For EU and UK users (GDPR)
Our legal basis for processing your account and content data is contract — we need it to run the app you signed up for. Our legal basis for sending service emails, and for the product-usage measurement described above, is legitimate interest: we measure our own product to decide what to build, and you can object at any time by switching off Settings → Share usage data. You have the rights above plus the right to lodge a complaint with your local supervisory authority. Our representative for EU data subjects can be reached at hello@superiordough.com.
For California users (CCPA and CPRA)
As of the effective date above, we do not sell or share your personal information as those terms are defined under the CCPA and CPRA, so no "Do Not Sell or Share My Personal Information" mechanism is currently required. If that changes, we will update this policy and provide the opt-out the statute requires before any such sale or sharing begins. You retain the right to know what we collect, to delete it, to correct it, and to opt out of any future sale or sharing. To exercise any of these, email hello@superiordough.com. We will respond within the statutory window.
Children's privacy
Superior Dough is not directed at children under 13 (or the local equivalent minimum). We do not knowingly collect data from minors below that threshold. If you believe a minor has provided us data, email hello@superiordough.com and we will delete it.
Changes to this policy
If we make material changes to this policy, we will notify you in-app and require re-acceptance before continuing to use the service. The version and effective date above identify the active policy.
Contact
Superior Dough LLC · Wyoming, USA · hello@superiordough.com