Privacy Policy

What we collect

Account details: your name, email address and a securely hashed password (we never store or see your actual password).

Kitchen content you or your team add: restaurant and location names, recipes, ingredient lists, photos of dishes, comments, team roles and invite codes.

Recipe scans: photos, PDFs or text you upload so The Pass can read a recipe for you.

Basic technical data: IP addresses and request logs our servers keep for security and troubleshooting, a sign-in cookie, a language cookie, and your last-used location saved on your device.

How we use it

To run The Pass: sign you in, show your kitchen the recipes and prep information it is allowed to see, and keep it secure.

Recipe scans are read by AI models that run on our own servers. Your images are not sent to outside AI companies, and they are not used to train AI models.

We do not sell your data, show ads, or use advertising or analytics trackers.

Who can see your information

People in your kitchen see what their role allows: owners and chefs manage recipes and staff, cooks see the recipes for the locations they belong to. Staff only see the locations they were invited to.

We use Cloudflare to deliver the site securely (it handles network traffic and encryption). Our application and database run on our own servers.

We disclose information only if required by law or to protect the safety of our users and service.

How long we keep it

Scan uploads are deleted automatically 30 days after upload. Recipes you save stay until a chef archives them or the kitchen is deleted.

Your account data is kept while you have an account. When you delete your account it is removed as described below. Security logs are kept for a limited time and then deleted.

Deleting your account

You can delete your account at any time in the app (Settings, then Delete account) or at thepass.site/delete-account.

This deletes your name, email, password, unsaved scans and access to every kitchen. Kitchens you are the only owner of are deleted with all their content. Recipes you wrote for a kitchen with other owners stay with that kitchen, credited to a former member.

You can also email [email protected] and we will delete it for you.

Your rights

You can see and correct your information in the app, and ask us for a copy of it or to delete it by emailing [email protected]. Depending on where you live (for example California or the EU) you may have additional rights, and we honor them.

Children

The Pass is a workplace tool for people 16 and older. We do not knowingly collect information from children under 13.

Security

Connections are encrypted, passwords are hashed with Argon2, repeated sign-in attempts are limited, and each kitchen’s data is isolated at the database level so one kitchen can never see another’s.

Changes and contact

If we change this policy we will update the date below and, for significant changes, tell you in the app. Questions: [email protected].