Hey Pepper

Privacy Policy

Effective date: August 14, 2026Last updated: August 14, 2026

Ghost Pixel Studios LLC ("Ghost Pixel," "we," "us," or "our") operates Hey Pepper, including its website, web application, browser extension, voice assistant, and connected API or MCP features (collectively, the "Service").

This Privacy Policy explains what personal information we collect, how we use and disclose it, how long we keep it, and the choices and rights available to you. The Service is initially offered only in the United States.

1. Information we collect

Information you provide

Account information. When you create or manage an account, we may receive your name, email address, profile image, user identifier, authentication information, and account settings from our authentication provider, Clerk. We do not receive your password in readable form.

Recipes and cooking content. We collect information you create, upload, import, or save, including recipe titles, ingredients, instructions, tags, source links, recipe images, favorites, nutrition estimates, meals, meal plans, grocery lists, cooking plans, timers, progress, cooking history, ratings, notes, modifications, serving sizes, and related content.

Food and product preferences. We collect preferences such as favorite ingredients, preferred cuisines, serving size, measurement system, cooking schedule, assistant settings, selected voice, and other settings you choose. Hey Pepper does not provide dedicated fields for allergies or dietary restrictions. Please do not submit medical, allergy, diagnosis, medication, pregnancy, or other sensitive health information in chats, notes, recipes, voice interactions, or other free-form fields.

AI chats and inputs. When you use Pepper's text features, we process your messages, attached images, recent conversation history, the page or recipe context you are viewing, relevant saved preferences, and relevant cooking history. We also process the AI responses, tool actions, search queries, citations, and generated content produced for you. Text chat history currently remains primarily in the active browser session, although chat content or outputs may be retained when incorporated into saved account content, diagnostics, or a feature that expressly saves them.

Voice interactions. When you activate Pepper's voice mode, we process microphone audio, live transcripts, assistant responses, selected voice, relevant account content, and the page context needed to respond or carry out requested actions. We do not create a voiceprint or use voice audio to identify you. We do not intentionally retain raw voice recordings after the session ends. Voice providers may temporarily process or retain data as described in Section 5.

Uploads and imports. If you upload a recipe photo or attach an image to an AI conversation, we process the file and related metadata. If you import a recipe from a URL or use the browser extension, we may process the URL, webpage title, visible text, structured recipe data, selected text, metadata, and images needed to extract and save the recipe.

Shared-cookbook information. If you create, join, or invite someone to a shared cookbook, we process cookbook names, membership and role information, invitation email addresses, who sent the invitation, and the content contributed to that cookbook. Other cookbook members may see your display name, email address, profile image, role, and shared cookbook content.

Billing and subscription information. Clerk Billing and its payment-processing partners collect and process payment-card and billing information. We generally receive subscription status, plan, trial status, billing identifiers, and related transaction information rather than your full payment-card number.

Communications. If you contact us or respond to a survey or support request, we collect your contact information and the contents of the communication.

Information collected automatically

When you use the Service, we and our providers may automatically collect:

  • IP address and approximate location derived from it;
  • device, browser, operating-system, language, and screen information;
  • pages or screens viewed, referring and destination URLs, timestamps, clicks, navigation, and feature usage;
  • cookie, local-storage, session-storage, device, account, and session identifiers;
  • subscription tier, usage counts, rate-limit information, and AI token or feature usage;
  • error reports, performance data, diagnostics, security events, and fraud signals; and
  • analytics events, consent choices, and session-replay data as described below.

Information from other sources

We may receive information from Clerk, billing providers, cookbook inviters or collaborators, connected third-party agents, public webpages you ask us to import, and service providers that help us prevent fraud, secure the Service, or provide requested features.

2. Cookies, analytics, and session replay

We use cookies, local storage, and similar technologies to authenticate users, remember settings, maintain sessions, operate features, protect the Service, and understand product usage.

With your analytics consent, we use PostHog for product analytics, diagnostics, and session replay so we can understand how the Service is used, identify problems, and improve the product. PostHog may receive your account identifier, name, email address, device and browser information, pages viewed, events, and interactions with the Service.

Session replay creates a visual reconstruction of interactions such as clicks, scrolling, navigation, and interface changes. We configure replay to mask all inputs and exclude AI chats, voice transcripts, recipe notes, user-uploaded images, names, email addresses, authentication, billing, account-management, and deletion screens. We do not intentionally capture unredacted network bodies or console content. Session replays are retained for 30 days.

You can grant or refuse analytics consent and later change your choice in Settings. Refusing analytics does not prevent you from using core Service features.

We do not use third-party advertising cookies, sell personal information, or share personal information for cross-context behavioral advertising. Because there is no universally accepted standard for browser "Do Not Track" signals, the Service does not rely on DNT as the analytics control; use the consent and Settings controls described above. Where applicable, we recognize legally required opt-out preference signals, including Global Privacy Control, for activities covered by those signals. Because we do not sell or share personal information for targeted advertising, such a signal does not otherwise change those practices.

3. How we use information

We use personal information to:

  • create, authenticate, secure, and administer accounts;
  • provide recipes, meal planning, grocery, cooking, sharing, import, extension, voice, AI, API, MCP, and subscription features;
  • personalize the Service using saved food preferences and cooking history;
  • process user requests and allow Pepper to read or update authorized account data;
  • generate recipes, cooking plans, images, nutrition estimates, search results, and other requested content;
  • operate shared cookbooks, memberships, and invitations;
  • process subscriptions, enforce plan limits, prevent abuse, and maintain usage records;
  • provide support and respond to requests;
  • analyze performance, debug problems, conduct session replay with consent, and improve the Service;
  • communicate about accounts, security, billing, invitations, policy changes, and important product notices;
  • send marketing messages only when you separately opt in, with an unsubscribe option in each message;
  • protect users, investigate fraud or misuse, enforce agreements, and maintain safety and security;
  • comply with legal obligations and establish, exercise, or defend legal claims; and
  • create aggregated or de-identified information that we maintain in de-identified form.

Ghost Pixel does not use customer chats or voice interactions to train its own AI models.

4. AI-generated content and sensitive information

Pepper is an AI system. AI-generated recipes, nutrition estimates, images, search results, and other outputs may be incomplete, inaccurate, or unsuitable for your circumstances. Hey Pepper is not a medical, nutrition, allergy-safety, or other professional service.

We do not ask for allergy or dietary-restriction information in dedicated product fields and do not intentionally infer diagnoses or health conditions from favorite ingredients or preferred cuisines. However, if you voluntarily include sensitive information in a chat, note, recipe, image, voice interaction, or other free-form content, that information will be processed by us and the providers needed to deliver the requested feature. Please do not use Hey Pepper to communicate emergency information or information that you do not want processed by AI providers.

5. How we disclose information

We disclose personal information only as described in this Policy.

Service providers

We use providers that process information for us to operate the Service:

  • Clerk (https://clerk.com/legal/privacy): authentication, account management, user profiles, invitations, subscriptions, and billing.
  • Convex (https://www.convex.dev/legal/privacy): application database, search indexes, server functions, usage records, and file or image storage.
  • Google Gemini and Google Search (https://ai.google.dev/gemini-api/terms): text AI, recipe extraction, image generation, web search, and grounded results. For paid Gemini services, Google states that prompts and responses are not used to improve its products. Google may retain prompts and responses for limited abuse monitoring. When Google Search grounding is used, Google states that prompts, context, and generated output are stored for 30 days for grounded-result and search-suggestion purposes.
  • OpenAI (https://openai.com/policies/privacy-policy/): realtime voice AI. OpenAI states that API inputs and outputs are not used for model training by default unless the customer opts in. Default abuse-monitoring logs may retain customer content for up to 30 days unless different approved controls apply.
  • LiveKit (https://livekit.com/legal/privacy-policy): realtime audio transport, transcription routing, voice-agent infrastructure, noise cancellation, session connectivity, and related diagnostics. Raw audio is processed during the session. We configure the Service not to retain raw audio after the session.
  • PostHog (https://posthog.com/privacy): product analytics, error diagnostics, and consent-based session replay. We configure PostHog's customer-content product and model-development use to be disabled for Hey Pepper data.

These providers may process technical information such as IP address, device information, authentication details, usage metrics, and security logs as necessary to provide and protect their services. Their own account, security, and legally required processing may be governed by their terms and privacy notices.

Other disclosures

Cookbook collaborators. Shared cookbook members can access the cookbook content and member information described above. Do not place information in a shared cookbook that you do not want other members to see.

Connected agents and integrations. If you authorize an external AI agent, application, browser extension, MCP client, or API client to connect to Hey Pepper, we disclose the account data and tool results requested through that connection. The third party's privacy practices apply to information it receives. You are responsible for protecting access tokens and revoking connections you no longer use.

At your direction. We disclose information when you request or consent to the disclosure, such as inviting someone to a cookbook or asking Pepper to search the web.

Legal, safety, and rights. We may preserve or disclose information when reasonably necessary to comply with law or valid legal process; protect the rights, safety, and property of users, Ghost Pixel, or others; investigate fraud or misuse; enforce agreements; or respond to an emergency.

Business transactions. Information may be transferred in connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, subject to applicable law.

We do not sell personal information for money and do not share personal information for cross-context behavioral advertising. We have not done so during the preceding 12 months.

6. Data retention

We retain information only for as long as reasonably necessary for the purposes described in this Policy, including providing the Service, maintaining security, resolving disputes, complying with law, and enforcing agreements.

  • Account information and saved content are generally retained while your account is active.
  • PostHog session replays are retained for 30 days.
  • Google Search-grounded prompts, context, and outputs may be retained by Google for 30 days.
  • OpenAI API abuse-monitoring logs may be retained for up to 30 days by default.
  • Active account data covered by an approved deletion request will be deleted within 30 days.
  • Backup copies will be deleted or allowed to expire within 90 days.
  • Billing, tax, fraud-prevention, security, dispute, legal-hold, and compliance records may be retained longer when reasonably necessary or legally required.
  • De-identified information may be retained where it can no longer reasonably identify you and is maintained in de-identified form.

Deletion from your account may not remove information controlled by another user, information another person copied before deletion, or records we must retain for the limited reasons above. If you own a shared cookbook and delete your account, that cookbook is deleted and other chefs lose access. If you are a member only, you leave the cookbook and it stays.

7. Your choices and privacy rights

Account and content controls

You may update certain account details through Clerk and edit or delete supported content through the Service. In Settings → Account you can export your data and use Delete Account. You may also request access, correction, export, or deletion by emailing [email protected].

Analytics

You can refuse analytics and session-replay consent or withdraw consent in Settings. Withdrawal applies going forward and does not affect processing that occurred before the change.

Email

You can unsubscribe from marketing emails using the link in the message. Even if you opt out of marketing, we may continue sending necessary service emails about your account, security, billing, invitations, policy changes, or requested transactions.

U.S. state privacy rights

Depending on where you live and whether the applicable law covers Ghost Pixel, you may have rights to:

  • confirm whether we process your personal information;
  • access or obtain a copy of personal information;
  • correct inaccurate personal information;
  • delete personal information;
  • obtain portable data;
  • opt out of sale, targeted advertising, or certain profiling;
  • limit certain uses of sensitive personal information;
  • withdraw consent; and
  • appeal a decision on a privacy request.

To exercise a right or appeal a decision, email [email protected] and describe your request. We may need to verify your identity and authority before acting. An authorized agent may submit a request where permitted by law, but we may require proof of authorization and direct identity verification. We will respond within the timeframe required by applicable law and will not discriminate against you for exercising a privacy right.

Because we do not sell personal information or share it for cross-context behavioral advertising, we do not provide a "Do Not Sell or Share" link at this time. If our practices change, we will update this Policy and provide required controls before the change takes effect.

8. Security

We use administrative, technical, and organizational safeguards designed to protect personal information. These include authenticated access, user and cookbook authorization checks, encrypted transmission, provider access controls, rate limits, short-lived credentials for connected services, and restricted administrative access. Convex states that customer databases and file storage are encrypted at rest and data in transit is encrypted.

No internet service or storage system is completely secure. You are responsible for using a strong authentication method, protecting connected-agent credentials, and promptly notifying us if you suspect unauthorized account access.

9. Children's privacy

Hey Pepper is intended only for people who are at least 18 years old. We do not knowingly collect personal information from anyone under 18, and the Service is not directed to minors. If we learn that a person under 18 provided personal information, we will take reasonable steps to delete it and close the account. Contact [email protected] if you believe a minor has used the Service.

10. United States service and data processing

Hey Pepper is offered only in the United States at this time. Ghost Pixel and its providers may process information in the United States and in other locations where their facilities or subprocessors operate. Do not use the Service if its U.S.-only availability or these processing locations are not acceptable to you.

11. Third-party websites and content

The Service may link to recipe websites, citations, connected agents, payment pages, or other third-party services. Their privacy practices are governed by their own policies. We are not responsible for third-party content or privacy practices. Review their policies before providing information to them.

12. Changes to this Policy

We may update this Privacy Policy as the Service, providers, or legal requirements change. We will post the revised Policy with a new "Last updated" date. If a change materially affects how we use or disclose previously collected personal information, we will provide additional notice through the Service, by email, or as otherwise required by law before the change takes effect.

13. Contact us

For privacy questions, requests, or complaints, contact:

Ghost Pixel Studios LLC Email: [email protected] Mailing address: 21750 Hardy Oak Blvd Ste 104, PMB 72445, San Antonio, Texas 78258-4946 US