The operator of the Crisp website (https://cookwithcrisp.app) and the mobile apps for iOS and Android, 阮 念武 (hereinafter referred to as the “Operator”), will handle user information on this service in accordance with the Act on the Protection of Personal Information and other applicable laws and regulations.
Information Collected and Purpose of Use
If compliance with laws and regulations is required, we will use the information to the extent necessary to ensure such compliance.
Please do not include personal information unrelated to cooking, third-party confidential information, medical history, or other sensitive information in your entries or photos. You can specify ingredients you wish to avoid by listing only the ingredient name.
| Information to Be Collected | Primary Purpose of Use |
|---|---|
| Email address, account ID, authentication status, and information required for login | Account creation, identity verification, sending verification emails, and maintaining logged-in status |
| Display Name, Username, Profile Photo, Bio, Privacy Settings | View and Manage Profile |
| Registered Models, Favorites, Cooking Log, Q&A, Replies, Reactions, Notifications | Saving data, model-specific displays, information sharing among users, and notifications of replies and similar activity |
| Dish you want to make, ingredients, quantities, ingredients to avoid, cooking conditions, questions, and any photos you’ve attached | Creating recipes, suggesting existing recipes, and answering questions about cooking |
| Aggregated daily counts made from searches in the search box at the top of the site (short search terms such as dish or ingredient names, display language, type of result, number of searches) | Improving search and the synonym dictionary, evaluating search accuracy, and planning which recipes to create next |
| Date and time of use, request identifiers, number of uses, AI processing costs, error information, and information regarding communication and access | Preventing unauthorized use, managing usage limits and budgets, responding to outages, and maintaining and improving the service |
| Details of inquiries and reports, contact information, response history, and information required for identity verification | Handling inquiries, investigating claims of rights infringement, and responding to requests for disclosure, correction, or deletion |
| Payment and contract identification information, amounts, payment status, billing history, credit balance, and usage history | Purchase processing, contract management, refunds, fraud prevention, accounting, and compliance |
| AI Agent Integration: Registration information for connected apps (name, destination address); records of connections and consent (permissions granted, date and time, version of the consent text); and operational logs for authorization and connections (source host, processing results, and error types; does not include the original text entered into the tool, tokens, or email addresses). | Authentication of connections from AI agents selected by users; management and revocation of permissions; prevention of unauthorized use; and troubleshooting |
Published Information
Your display name, username, profile photo, and bio will appear on your public profile. The list of registered devices will be displayed only if you choose to make it public in your profile settings.
By default, cooking logs and consultations are set to “Private.” If you select “Public” and save, the text, photos, appliance model, cooking conditions, results, and other details will be made public. Replies and reactions to public posts may be displayed to other users and used to notify the poster.
We will not disclose your email address, favorites, or private cooking logs to other users. However, the operator may review this information to the extent necessary for operational investigations or to respond to inquiries.
Information that has been published may be saved by third parties or indexed by search engines and other services. Even if you delete or make the information private later, you cannot revoke copies that third parties have already obtained.
Processed by AI
When AI is used for answers, recipe creation, or analysing text entered in the search box, we send your input, the necessary parts of the conversation, the selected appliance and cooking conditions, and attached photos to the AI provider through Vercel AI Gateway. Internal account identifiers are also sent to the Gateway for usage management.
In the current implementation, we use settings that require processing routes limited to Azure for AI processing, where input data is not retained, and where input is not used for model training. However, this does not mean that no information whatsoever is stored by any of the relevant service providers, including management information such as communication logs, billing data, and measures against fraudulent use.
The text of cooking support conversations and attached photos are not stored in this service’s database as conversation history. Conversations are retained on-screen, and we may resend the most recent conversations and photos necessary for a response. We do store information such as the date and time of use, processing status, fees, and hashes used to verify requests.
When text entered in the search box is analysed by AI, the text itself is still not saved in this service’s database. Only short terms read by the AI, such as dish names, are used for the search statistics described in “Cookies, Local Storage, and Web Analytics”.
Generated recipes will be published—in a format that other users can view and reuse—after undergoing checks, provided you select “Publish” on the creation screen. The system does not include the original text of your conversation or your account information as part of the published recipe details. If you notice that a published recipe contains personal information or other sensitive data, please notify our support team.
To prevent the publication of inappropriate content, text and photos in profiles, posts, replies, and solution reports are also sent through the AI processing pipeline described above along with an internal identifier for verification. If verification fails, the content will not be published. Please note that this verification does not guarantee cooking safety or the accuracy of the information.
For external AI services that users have chosen and authorized to connect to their Crisp accounts (e.g., OpenAI’s ChatGPT, Anthropic’s Claude; hereinafter referred to as “Connected Services”), Crisp will transmit the results of operations—such as recipes, device information, “My Devices” and “Favorites,” and meal plans—to those services based on the user’s instructions. Search terms and meal plan content sent to Crisp from the Connected Services are used for processing, and the original text is not stored (however, if you instruct Crisp to save a meal plan, the content of that saved meal plan will be retained). Conversations entered into the Connected Services are handled by those services, and the information transmitted is handled by the operators of the Connected Services in accordance with their respective policies.
Sharing via Photos and Chat
Attaching photos is optional. Photos used in your profile or cooking logs will be resized and converted for display, and any associated metadata—such as location information—will be removed. Photos submitted for cooking support will also be converted into display-ready images before being sent. However, information visible in the photos themselves—such as faces, addresses, or labels—will not be automatically removed.
"Ask Everyone About This Question" is a feature that moves the text of a user-selected question and some of the cooking conditions to an editable draft. The entire conversation, AI responses, and photos will not be automatically published. Please review the content to be published before saving.
Use with Third-Party Services and Overseas Use
We use the following external services to the extent necessary to provide our service. Communications and outsourcing related to website delivery, authentication, storage, AI processing, and other operations may involve businesses located outside Japan or businesses that process information outside Japan.
Regarding operations outside Japan, we will verify applicable contracts, service areas, and protective measures, and take the procedures and measures required by law. Requests for information based on laws and regulations will be accepted through our inquiry desk. Information published by each business operator can be viewed via the links below.
Purchases and subscription management use Stripe’s interface. Stripe collects card numbers, security codes, and similar details directly; Crisp’s servers do not store them. Crisp sends account and transaction identifiers and purchase details to Stripe, and receives payment and subscription status. The operator reviews billing information in Stripe only as needed to handle payments.
In addition to acting as a payment processor, Stripe may process information on its own behalf for purposes such as fraud prevention and compliance with laws and regulations. This may include processing and storage outside Japan, such as in the United States; details are provided in Stripe’s Privacy Policy and Data Processing Agreement.
The third-party services connected via AI agents are not subcontractors of the operator, but rather businesses selected and authorized by users. These may include businesses located outside Japan (e.g., the United States), and any information provided to them will be handled in accordance with those businesses’ privacy policies and terms of use. The operator has no control over such handling. The business, country of location, legal system and measures of each connected service are shown in “Provision to Third Parties” and on the screen where you authorize the connection.
External data transmissions from the browser related to affiliate ads are described in the section titled “External Data Transmissions Related to Affiliate Ads.”
| External Services and Providers | Key Information | Purpose of Use |
|---|---|---|
| Vercel／Vercel Inc. | Requests to the site, communication information such as IP addresses, and data generated in connection with the provision of the service | Website publishing, application processing, maintenance, and measures against unauthorized use |
| Neon (Authentication and Database) | Information required for authentication, account information, and data stored on this service | Authentication and database storage |
| Resend／Plus Five Five, Inc. | Recipient email address, contents of the verification email, and transmission results | Email delivery |
| Vercel AI Gateway／Vercel Inc.、Azure／Microsoft | AI input and output, attached photos, device information required for processing, internal identifiers, and usage information | AI-generated responses, recipe creation and verification, and management of processing and costs |
| Vercel Web Analytics／Vercel Inc. | Pages viewed, referral sources, date and time of access, device and browser information, approximate geographic location, and fixed classifications of actions taken on public pages, etc. | Aggregating viewing statistics, improving the service |
| Stripe | Account and transaction identifiers, purchase details, payment information, billing information, device and network information | Payment, recurring billing, invoices, contract management, refunds, and fraud prevention |
| External AI services that users have authorized to connect (e.g., OpenAI, Anthropic) | Results of tool operations based on user instructions (recipes, device information, "My Devices" and "Favorites," meal plans), and connection credentials | Using Crisp with an AI agent selected by the user |
Cookies, Local Storage, and Web Analytics
We use cookies to maintain your logged-in status and for similar purposes. We also use your browser’s storage to save display settings, your selected model, and trial notes stored on your device.
Tab-based storage is used for content entered while creating recipes and for drafts intended for sharing. Question-sharing drafts are not imported after more than 1 hour has passed since their creation. This time limit does not apply uniformly to other drafts or saved data.
You can delete cookies and device data through your browser settings. If you delete or disable them, you may not be able to log in or retain your settings.
In a standard browser, we use Vercel Web Analytics, which does not use third-party cookies, to aggregate views of public pages. On public pages, we also count fixed categories for search outcomes and how a search was started, the site section and recipe type when a recipe link is opened, and the first checked step on an original recipe. We exclude URL query parameters and fragments, individual profile pages, and cooking-record pages. We do not include search text, account IDs, recipe IDs, chat content, or photos in the attributes of these interaction events. We do not start this optional analytics on pages within the Crisp app. Checking a step does not prove that cooking started or finished.
Separately, to improve search, when someone uses the search box at the top of the site (including pages shown inside the Crisp app), we save in this service’s database aggregated daily counts of short search terms such as dish or ingredient names, together with the display language, the type of result (found, near matches shown, nothing found, and so on) and the number of searches. These counts do not record an account, IP address, device or browser information, the selected appliance model, or any time more precise than the date, and the full text you enter is not saved. For long terms, terms containing runs of digits, email addresses or URLs, and terms that amount to an allergy, a dietary restriction or a “without X” request, we count the search without storing the term. Filtering on the recipe list page and offline search in the mobile app are not counted.
The search statistics are viewed only by the operator, to learn which terms found nothing and which are used often, and to reflect that in the synonym dictionary, the evaluation of search accuracy and the planning of future recipes. They are not used for advertising and are not shared with or sold to third parties. Entries are deleted on a rolling basis once 180 days have passed since the day they were recorded. Because the counts are not saved in a form linked to a particular user, we cannot pick out, disclose or delete only one person’s searches. If you entered something in the search box that you did not intend, please tell us through the contact form and we will check and delete the relevant term.
On Stripe’s payment and account management screens, Stripe uses cookies and similar technologies to ensure secure payments and prevent fraud. Their use is governed by Stripe’s Privacy Policy.
Google Analytics with consent
Only in a regular browser after consent, we add Google Analytics (Google LLC) to measure public page views and existing search-result, recipe-open and first step-check interactions. Before consent and after refusal, we do not load the Google analytics tag or send information.
Information sent to Google includes allowed public URLs and page names, fixed interaction categories, and browser and device information and cookie identifiers collected by the Google tag. We do not send URL queries or fragments, referrer text, email, account IDs, free-text searches, cooking chats or photos. Private pages such as login and payment, and in-app pages, are excluded.
Your choice is stored in your browser. You can withdraw it at any time through Analytics settings; we stop subsequent sending and delete Google analytics cookies. Withdrawal does not delete information already sent to Google. We do not use Google Signals, ads personalization or export to BigQuery. Existing Vercel measurement continues for comparison.
About Ads
Crisp participates in the A8.net affiliate program operated by Fan Communications Co., Ltd. and the ValueCommerce Affiliate program operated by ValueCommerce Co., Ltd. On some of our original Japanese recipe pages, we display affiliate ads linking to the Tanita Official Online Shop, the SharkNinja Official Online Store, and Yahoo! Shopping as sources for purchasing kitchen tools and appliances. The current test covers 5 model-specific pages for salted ginger fried chicken and 10 original Japanese-language recipe pages that explicitly specify the use of specific tools. An additional 10 pages will display only A8.net ads. The target pages are subject to change in the future. These ads will not be displayed on English or Chinese pages or within the Crisp mobile app.
Affiliate ads are marked with “PR” in the ad spaces directly below the breadcrumb trail and in the “Equipment Needed” section. The operator may receive a referral fee if a user purchases a product through the link. The operator does not guarantee the quality, availability, price, delivery, or cooking results of any products featured in the ads.
After a page loads, your login status is checked with Crisp's server and, if you are logged in, your subscription status as well. Ads are displayed only when you are confirmed not to be a Crisp Plus member. Ads are not displayed, and no ad-related external communication is started, before this check is complete, if the check fails, for Crisp Plus members, or in the mobile app.
Crisp does not send the email addresses, account IDs, or input it holds (such as recipe creation, search, or chat) to ASPs or sellers. The information your browser sends when ads are displayed or links are clicked is described in "External Data Transmissions Related to Affiliate Ads".
Users can stop the display of affiliate ads and the associated external communications by using Crisp Plus. You can also use your browser’s cookie deletion, tracking prevention features, content blockers, and other tools. Crisp does not have a dedicated opt-out setting to disable affiliate ads alone. If you block communications via your browser or other means, the display of purchase sources and performance tracking may not occur.
We have not yet started serving ads via Google AdSense. We also do not use automatic link conversion provided by ASPs, such as JavaScript or LinkSwitch. Furthermore, we do not send custom events to Vercel Web Analytics specifically to track clicks on affiliate links.
External Data Transmissions Related to Affiliate Ads
When affiliate ads are displayed on certain original recipe pages in Japanese, your browser will retrieve tracking images from A8.net or ValueCommerce and product images from Tanita, depending on the ad displayed—even if you do not click on the link. The information that may be received by the recipient and the purposes for which it is used are as shown in the table below.
The information sent as a referrer depends on your browser’s settings and specifications, but it is typically Crisp’s origin (https://cookwithcrisp.app). Whether cookies already exist on the destination domain, as well as the reading and writing of cookies and the actual data sent, vary depending on your browser settings, anti-tracking features, and each company’s specifications.
A8.net states that cookies will not be sent if settings to block third-party cookies are enabled.
Clicking an ad link takes you to the Tanita Online Shop, the SharkNinja official online store or Yahoo! Shopping through a tracking URL of A8.net or ValueCommerce. On those sites, i-Healthcare Co., Ltd., SharkNinja G.K., LY Corporation, other sellers and each ASP may use cookies and similar technologies, under their own privacy policies, to measure results such as page views, clicks, and purchases.
| Recipient | Information Transmitted | Operator’s Purpose of Use | Purpose of Use by the Recipient |
|---|---|---|---|
| FAN Communications, Inc. (A8.net) | IP addresses, user agents, cookies, and information regarding the display, viewing, or clicking of ads | To provide guidance on where to purchase, and to enable the measurement of results—such as the display, viewing, and clicking of ads, as well as purchases—and the calculation of referral fees | Advertising delivery and data aggregation related to advertising delivery |
| ValueCommerce Co., Ltd. (ValueCommerce Affiliate) | IP address, device and browser information (such as User-Agent), date and time, request URL, referrer information, and cookies already set on the destination domain, etc. | To provide guidance on where to purchase, and to enable the tracking of results—such as ad impressions, clicks, and purchases—as well as the calculation of referral commissions | Implementation of Affiliate Programs and Measurement of Advertising Performance |
| Tanita Corporation (product image delivery: api-img.tanita.co.jp) | IP address, device and browser information (such as User-Agent), date and time, request URLs for product images, referrer information, and cookies already set on the destination domain, etc. | To display product images in ad slots | Distribution of Product Images |
- A8.net guidance on the external transmission rules
- About A8.net's Privacy Policy
- FAN Communications: handling of personal information
- ValueCommerce Privacy Policy
- ValueCommerce Privacy Policy for Browsing History
- Tanita's Privacy Policy
- Tanita Online Shop Privacy Policy
- SharkNinja Official Online Store Privacy Policy
- LY Corporation Privacy Policy
Provision to Third Parties
We will not disclose personal data to third parties except when the individual has given consent, when required by law, or when permitted by law for the protection of life, physical safety, or property.
We will handle the outsourcing necessary to provide the service and the display of information that users have chosen to make public in accordance with the above. When providing information to overseas businesses, we will also verify compliance with legal requirements regarding the transfer of data overseas.
When integrating with AI agents, users select the destination service themselves, review the types of information to be shared and the recipient on the permission screen, and provide consent. The service then transmits the results of operations performed based on the user’s instructions to the destination service. Verified destination providers include ChatGPT (provided by OpenAI, located in the U.S.) and Claude (provided by Anthropic, located in the U.S.). For other apps, the app names are self-reported, and since Crisp cannot verify the AI services used within the apps, we cannot identify the service providers or their countries of origin. The United States is the most likely candidate.
The U.S. system for the protection of personal information can be verified in the “Survey on Systems for the Protection of Personal Information in Foreign Countries (United States)” published by the Personal Information Protection Commission. The measures taken by service providers to protect personal information are disclosed in the respective privacy policies of OpenAI and Anthropic. For apps other than those that have been verified, we cannot identify the service provider and therefore cannot provide information on the measures they take.
You can stop this service by disconnecting it from the “Connected Apps” section of your My Page. The AI agent integration is available only to users in Japan.
Save and Delete
We will retain information for the period necessary to achieve the purpose for which it was collected. We will endeavor to delete information that is no longer needed, after confirming the necessity of retention in light of legal obligations, investigations into unauthorized use, dispute resolution, and other relevant factors.
Search statistics (see “Cookies, Local Storage, and Web Analytics”) are deleted on a rolling basis once 180 days have passed since the day they were recorded.
You can edit, make private, or delete your own cooking logs and questions from the screen. You can also delete your replies. Deleting a post removes its text, cooking conditions, and related content, along with photos that are not used anywhere else. However, identifiers, processing dates and times, and similar information may remain for deletion processing or misuse prevention.
Connections with AI agents expire 180 days after authorization and can be revoked at any time via “Connected Apps” on your My Page. Authorization credentials for that connection will be immediately invalidated upon revocation, expiration, or account cancellation. We periodically delete expired authorization credentials and app registration information that has been inactive for more than 180 days since last use. Records of connections and consent (including the details authorized, date and time, and version of the consent text) are retained for investigating unauthorized use, responding to inquiries and disputes, and as evidence of consent. Records older than 1 year from the date of revocation or expiration are periodically deleted, and all records are immediately deleted upon account cancellation. Operation logs for authorizations and connections are retained for the period necessary to investigate unauthorized use and address system failures, after which they are deleted.
Accounts that have not started the payment process can be deleted from account settings after email verification. If you have started the payment process, contact us to request account deletion—even if you have not completed a purchase—so we can review your subscription, credit balance, and any refund matters. Stopping subscription renewal and deleting your account are separate steps.
When you delete your account, transaction records are retained for as long as necessary for accounting, legal compliance, and dispute resolution. Backups and account-management information held by Stripe and other external services are not deleted at the same time. Contact us to request deletion of information that cannot be managed through the site.
Information security measures
We will implement measures to prevent information leaks and unauthorized access through encryption of communications, authentication, access restrictions, control over public and private access, input validation, and usage limits.
We will limit access to information to the extent necessary for operations and verify the handling conditions and safety management practices of external contractors. In the event of a data breach or other incident requiring reporting or notification to the individual under applicable laws, we will respond in accordance with those laws.
Disclosure, Correction, Suspension of Use, and Inquiries
Requests for notification of the purpose of use of retained personal data, disclosure, correction, addition or deletion, suspension of use or erasure, cessation of provision to third parties, and disclosure of records of provision to third parties subject to disclosure under applicable laws are accepted through our inquiry desk.
We may request additional information to the extent necessary for identity verification or to identify the subject information. We will respond without delay in accordance with applicable laws and regulations; if we are unable to comply or cannot accommodate your preferred method, we will explain the reasons why.
You may also use this contact form to request the operator’s name, address, and other information required by law, as well as details regarding safety management measures. Upon receiving such a request, we will respond without delay in accordance with applicable laws and regulations. The content of your inquiry and your contact information will be used solely for managing the receipt, investigation, response, and follow-up of your inquiry and will not be disclosed to the public.
Changes
If we make changes to how we handle information, we will announce the details of the changes and their effective dates on this page or elsewhere. If legal requirements mandate consent regarding changes to the purpose of use or the provision of information to third parties, we will obtain such consent separately.
Revised 2026-9-20 (effective the same day): we added to “Information Collected and Purpose of Use”, “Processed by AI”, “Cookies, Local Storage, and Web Analytics” and “Save and Delete” that, for searches made in the search box at the top of the site, we save aggregated daily counts (terms and number of searches) that are not linked to an account or device.
Revised on 2026-9-24 (effective when this measurement is published): Added fixed-category counts for public-page search results, recipe opens, and checked recipe steps.
Revised 2026-9-25 (effective the same day): for affiliate ads on some original Japanese recipe pages, we added the participating affiliate services, the external transmissions made when ads are displayed and when links are clicked, the information transmitted, the recipients, the purposes of use, that the ads are not shown to Crisp Plus members, and the settings users can choose.
Revised 2026-9-28 (effective when this change is published): We added 10 original Japanese-language recipe pages to the affiliate ad test. On these additional pages, only A8.net ads appear; ValueCommerce tracking images are not loaded.
Revised 2026-10-20 (effective the same day): In conjunction with the release of the AI Agent Integration (MCP) feature, we have added details regarding the transfer of tool operation results to external AI services selected and connected by users based on their instructions, as well as the information collected, retention periods, methods for opting out, and the handling of information provided to third parties located overseas, to the sections “Information Collected and Purpose of Use,” “Processed by AI,” “Use with Third-Party Services and Overseas Use,” “Provision to Third Parties,” and “Save and Delete.”
Mobile App (iOS and Android)
Within the app, you can use Crisp’s web features; even when there is no internet connection, you can search for and view the 80 included recipes, save them offline, and use the cooking timer.
Information Handled by the Mobile App
Offline saving, selected recipes and instructions, language and display mode, and the timer are managed within the device. The relevant sections of this policy apply to in-app web logins, account favorites and device settings, photos and posts, AI processing, and search statistics.
Mobile App Timer and Notifications
If you allow notifications, reminders for when the timer ends—including the recipe name and cooking stages—will be scheduled through your device’s notification feature. For this process, we do not register a notification destination with Crisp’s servers or send notification content to external push notification services.
You can enable or disable notifications in your device’s settings. You can search for, view, and save recipes even if you do not enable notifications. The content displayed on the lock screen depends on your device’s notification settings.
Web Browsing and Photos on the Mobile App
Crisp pages are loaded within the app; images are attached only as necessary based on user permission and selection when using the camera or photo gallery; and links to external services open in the OS browser or similar.
When you export cooking notes, the app creates a file in your device’s temporary storage and passes it to the OS sharing screen. It does not automatically send the file to Crisp. The handling of the file is governed by the sharing destination you select.
Managing Saved Content in the Mobile App
You can delete saved recipes within the app, and you can cancel a running timer. App data stored on your device can also be managed using the OS’s built-in app deletion and storage management features. Backups of the OS and restorations when switching devices are subject to the settings of your specific device and account.
Deleting the app does not mean your account will be deleted, and even if you delete your account, your offline saved data will not be automatically deleted.
Contact Us · Privacy Policy · Terms of Use · Disclosure in Accordance with the Act on Specified Commercial Transactions