The operator of Crisp (https://cookwithcrisp.app) (hereinafter referred to as the “Operator”) will handle user information on this service in accordance with the Act on the Protection of Personal Information and other applicable laws and regulations.
Information Collected and Purpose of Use
If compliance with laws and regulations is required, we will use the information to the extent necessary to ensure such compliance.
Please do not include personal information unrelated to cooking, third-party confidential information, medical history, or other sensitive information in your entries or photos. You can specify ingredients you wish to avoid by listing only the ingredient name.
| Information to Be Collected | Primary Purpose of Use |
|---|---|
| Email address, account ID, authentication status, and information required for login | Account creation, identity verification, sending verification emails, and maintaining logged-in status |
| Display Name, Username, Profile Photo, Bio, Privacy Settings | View and Manage Profile |
| Registered Models, Favorites, Cooking Log, Q&A, Replies, Reactions, Notifications | Saving data, model-specific displays, information sharing among users, and notifications of replies and similar activity |
| Dish you want to make, ingredients, quantities, ingredients to avoid, cooking conditions, questions, and any photos you’ve attached | Creating recipes, suggesting existing recipes, and answering questions about cooking |
| Date and time of use, request identifiers, number of uses, AI processing costs, error information, and information regarding communication and access | Preventing unauthorized use, managing usage limits and budgets, responding to outages, and maintaining and improving the service |
| Details of inquiries and reports, contact information, response history, and information required for identity verification | Handling inquiries, investigating claims of rights infringement, and responding to requests for disclosure, correction, or deletion |
Published Information
Your display name, username, profile photo, and bio will appear on your public profile. The list of registered devices will be displayed only if you choose to make it public in your profile settings.
By default, cooking logs and consultations are set to “Private.” If you select “Public” and save, the text, photos, appliance model, cooking conditions, results, and other details will be made public. Replies and reactions to public posts may be displayed to other users and used to notify the poster.
We will not disclose your email address, favorites, or private cooking logs to other users. However, the operator may review this information to the extent necessary for operational investigations or to respond to inquiries.
Information that has been published may be saved by third parties or indexed by search engines and other services. Even if you delete or make the information private later, you cannot revoke copies that third parties have already obtained.
Processed by AI
When AI is used for answers or recipe creation, we send your input, the necessary parts of the conversation, the selected appliance and cooking conditions, and attached photos to the AI provider through Vercel AI Gateway. Internal account identifiers are also sent to the Gateway for usage management.
In the current implementation, we use settings that require processing routes limited to Azure for AI processing, where input data is not retained, and where input is not used for model training. However, this does not mean that no information whatsoever is stored by any of the relevant service providers, including management information such as communication logs, billing data, and measures against fraudulent use.
The text of cooking support conversations and attached photos are not stored in this service’s database as conversation history. Conversations are retained on-screen, and we may resend the most recent conversations and photos necessary for a response. We do store information such as the date and time of use, processing status, fees, and hashes used to verify requests.
Generated recipes will be published—in a format that other users can view and reuse—after undergoing checks, provided you select “Publish” on the creation screen. The system does not include the original text of your conversation or your account information as part of the published recipe details. If you notice that a published recipe contains personal information or other sensitive data, please notify our support team.
Sharing via Photos and Chat
Attaching photos is optional. Photos used in your profile or cooking logs will be resized and converted for display, and any associated metadata—such as location information—will be removed. Photos submitted for cooking support will also be converted into display-ready images before being sent. However, information visible in the photos themselves—such as faces, addresses, or labels—will not be automatically removed.
"Ask Everyone About This Question" is a feature that moves the text of a user-selected question and some of the cooking conditions to an editable draft. The entire conversation, AI responses, and photos will not be automatically published. Please review the content to be published before saving.
Use with Third-Party Services and Overseas Use
We use the following external services to the extent necessary to provide our service. Communications and outsourcing related to website delivery, authentication, storage, AI processing, and other operations may involve businesses located outside Japan or businesses that process information outside Japan.
Regarding operations outside Japan, we will verify applicable contracts, service areas, and protective measures, and take the procedures and measures required by law. Requests for information based on laws and regulations will be accepted through our inquiry desk. Information published by each business operator can be viewed via the links below.
| External Services and Providers | Key Information | Purpose of Use |
|---|---|---|
| Vercel／Vercel Inc. | Requests to the site, communication information such as IP addresses, and data generated in connection with the provision of the service | Website publishing, application processing, maintenance, and measures against unauthorized use |
| Neon (Authentication and Database) | Information required for authentication, account information, and data stored on this service | Authentication and database storage |
| Resend／Plus Five Five, Inc. | Recipient email address, contents of the verification email, and transmission results | Email delivery |
| Vercel AI Gateway／Vercel Inc.、Azure／Microsoft | AI input and output, attached photos, device information required for processing, internal identifiers, and usage information | AI-generated responses, recipe creation and verification, and management of processing and costs |
| Vercel Web Analytics／Vercel Inc. | Pages viewed, referral sources, date and time of access, device and browser information, approximate geographic location, etc. | Aggregating viewing statistics, improving the service |
Cookies, Local Storage, and Web Analytics
We use cookies to maintain your logged-in status and for similar purposes. We also use your browser’s storage to save display settings, your selected model, and trial notes stored on your device.
Tab-based storage is used for content entered while creating recipes and for drafts intended for sharing. Question-sharing drafts are not imported after more than 1 hour has passed since their creation. This time limit does not apply uniformly to other drafts or saved data.
You can delete cookies and device data through your browser settings. If you delete or disable them, you may not be able to log in or retain your settings.
We use Vercel Web Analytics for traffic analysis. This analytics feature aggregates browsing data without using third-party cookies. For this service, we remove search terms and fragments from the page URLs used for analysis and exclude pages such as individual profiles and cooking logs from the scope of analysis. We do not send chat messages or photos as analytics events.
About Ads
As of the date of this policy update, we have not yet begun serving ads via Google AdSense. When we begin transmitting information in connection with advertising, we will clearly state in this policy and other relevant documents the information to be transmitted, the recipients, the purpose, and the settings available to users, and we will obtain the necessary consent.
Provision to Third Parties
We will not disclose personal data to third parties except when the individual has given consent, when required by law, or when permitted by law for the protection of life, physical safety, or property.
We will handle the outsourcing necessary to provide the service and the display of information that users have chosen to make public in accordance with the above. When providing information to overseas businesses, we will also verify compliance with legal requirements regarding the transfer of data overseas.
Save and Delete
We will retain information for the period necessary to achieve the purpose for which it was collected. We will endeavor to delete information that is no longer needed, after confirming the necessity of retention in light of legal obligations, investigations into unauthorized use, dispute resolution, and other relevant factors.
You can edit, make private, or delete your own cooking logs and questions from the screen. You can also delete your replies. Deleting a post removes its text, cooking conditions, and related content, along with photos that are not used anywhere else. However, identifiers, processing dates and times, and similar information may remain for deletion processing or misuse prevention.
Not all data—including backups and management information for external services—is deleted immediately upon performing an on-screen action. For account deletion or the removal of information that cannot be deleted via the on-screen interface, please contact our support desk.
Information security measures
We will implement measures to prevent information leaks and unauthorized access through encryption of communications, authentication, access restrictions, control over public and private access, input validation, and usage limits.
We will limit access to information to the extent necessary for operations and verify the handling conditions and safety management practices of external contractors. In the event of a data breach or other incident requiring reporting or notification to the individual under applicable laws, we will respond in accordance with those laws.
Disclosure, Correction, Suspension of Use, and Inquiries
Requests for notification of the purpose of use of retained personal data, disclosure, correction, addition or deletion, suspension of use or erasure, cessation of provision to third parties, and disclosure of records of provision to third parties subject to disclosure under applicable laws are accepted through our inquiry desk.
We may request additional information to the extent necessary for identity verification or to identify the subject information. We will respond without delay in accordance with applicable laws and regulations; if we are unable to comply or cannot accommodate your preferred method, we will explain the reasons why.
You may also use this contact form to request the operator’s name, address, and other information required by law, as well as details regarding safety management measures. Upon receiving such a request, we will respond without delay in accordance with applicable laws and regulations. The content of your inquiry and your contact information will be used solely for managing the receipt, investigation, response, and follow-up of your inquiry and will not be disclosed to the public.
Changes
If we make changes to how we handle information, we will announce the details of the changes and their effective dates on this page or elsewhere. If legal requirements mandate consent regarding changes to the purpose of use or the provision of information to third parties, we will obtain such consent separately.