CookCredit Skill Privacy Policy

Effective date: August 22, 2026 Last updated: August 22, 2026

This Privacy Policy explains how CookCredit LLC ("CookCredit," "we," "us"), 683 Grant St SE, Atlanta, Georgia 30315, handles information in the CookCredit camera-based knife-skill experience and optional private assessment library ("CookCredit Skill").

1. The important points

• Camera and motion analysis happen in your browser. Nothing is uploaded merely because you

start or finish a session.

• A recording is uploaded only if you sign in, choose Keep privately, and confirm.
• Private recordings and linked assessment data are scheduled for deletion no later than 90

days after upload. Temporary account-export ZIP files are deleted after 24 hours.

• CookCredit does not sell personal information, share it for cross-context behavioral

advertising, or use private CookCredit Skill uploads to train AI or robotics models.

• CookCredit Skill is for adults who are at least 18 years old.

2. Information processed during an assessment

With your permission, the browser processes:

• live camera frames showing whatever is in view, typically your knife hand, knife, cutting

board, food, and nearby background;

• estimated wrist and hand-landmark positions, motion trajectories, and an estimated blade path;
• session inputs such as selected hand, experience level, camera angle, and what you are cutting;
• measurements such as detected strokes, cadence, rhythm, consistency, form, capture quality,

score, and replay markers; and

• a brief on-device face-presence check in assessment mode. It detects whether a face is present

before the countdown. It does not identify the face, compare it with a database, or create or store a face template.

CookCredit Skill requests camera video only. It does not request microphone access, and the recording contains no audio.

These calculations occur on your device. The live landmark overlay and checker are not burned into the saved recording. Browser memory and behavior vary, but CookCredit does not receive the camera stream, recording, or motion results unless you separately choose a cloud feature or send them to us.

3. Account and optional private-library information

If you sign in, Firebase Authentication provides CookCredit with an account identifier and, depending on the sign-in method, your email address, display name, and authentication-provider information. CookCredit does not receive your Google password.

If you choose Keep privately, we store:

• the recording;
• assessment inputs, score, metrics, duration, file type, and file size;
• creation and scheduled-deletion timestamps; and
• a versioned consent receipt recording the notice version, notice hash, affirmations, and

consent timestamp.

We do not automatically upload earlier sessions when you sign in.

4. Technical and security information

Our hosting and security providers may process an IP address, browser and device information, request timestamps, authentication events, and abuse-prevention signals. CookCredit receives privacy-reduced client error reports containing an error code, product phase, page path without query parameters, broad browser family, build identifier, and a short diagnostic message. Client monitoring removes email addresses, full URLs, IP-address patterns, and long token-like values before logging.

The browser may keep strictly necessary local data, including the number of assessment attempts, the email entered for an email-link sign-in, and Firebase sign-in state. We do not currently use advertising cookies or third-party behavioral analytics in CookCredit Skill.

5. How we use information

We use information to:

• run the camera assessment and return practice feedback;
• provide the optional private assessment library, playback, download, export, and deletion;
• authenticate users and prevent unauthorized access;
• enforce upload, storage, and request limits;
• diagnose crashes and service failures;
• maintain, secure, and improve the reliability of CookCredit Skill; and
• comply with law and protect users, CookCredit, and the public.

Private CookCredit Skill recordings and linked assessment data are not used for model training. If CookCredit later offers research participation or training-data contribution, it will be a separate, affirmative choice governed by a separate notice. We will not quietly apply a future training permission to previously stored private recordings.

6. When information is disclosed

We disclose information only as reasonably necessary:

• to Google Cloud and Firebase for hosting, authentication, Firestore, Cloud Storage, Cloud

Functions, App Check/reCAPTCHA Enterprise, and operational logging;

• to provide a feature you request, such as sending a recording to a device share destination

that you choose;

• to comply with a valid legal requirement, warrant, subpoena, or court order;
• to investigate fraud, abuse, security incidents, or threats to safety; or
• in a corporate transaction, subject to appropriate confidentiality and notice where required.

CookCredit does not sell, lease, trade, or otherwise profit from biometric information. We do not sell personal information or share it for cross-context behavioral advertising.

7. Retention

Information	Normal retention
Unsaved recording and in-browser motion analysis	On the device for the active page/session; removed when you delete it from the page or the browser releases the session.
Private recording, assessment result, and linked consent receipt	Deleted no later than 90 days after upload, or sooner when you delete the assessment or all CookCredit Skill data.
Temporary account-export ZIP	Deleted no later than 24 hours after creation.
Shared CookCredit authentication record	Kept while the CookCredit account remains active; a CookCredit Skill deletion does not delete a sign-in used by other CookCredit products.
Privacy-reduced application and security logs	Generally retained for up to 30 days, except records kept longer when reasonably necessary for security, fraud investigation, or legal compliance.
Privacy requests and compliance records	Kept as reasonably necessary to document and fulfill the request and meet legal obligations.

Deletion removes active CookCredit Skill records and files. Provider-managed disaster-recovery copies, if any, are isolated from normal product access and age out under the provider's recovery cycle. We do not restore deleted user content from a backup except when legally required or needed for disaster recovery, and restored data remains subject to the original deletion schedule.

Our public Biometric Data Retention and Destruction Schedule provides additional detail.

8. Your choices and requests

You may:

• decline camera permission or biometric/motion consent;
• save, open, or share a local recording using your device;
• choose whether to upload a private cloud copy;
• download or delete an individual private assessment;
• create a ZIP export containing available CookCredit Skill assessment data and recordings; or
• permanently delete all CookCredit Skill assessments, recordings, and pending exports.

The in-product deletion control covers the CookCredit Skill data boundary. For an account-wide CookCredit request, access or correction request, withdrawal of consent, or a request that cannot be completed in the product, email connectwithus@cookcredit.com. We may verify your identity before acting. Authorized agents may submit requests where applicable law permits, but we may request proof of authority and direct identity confirmation.

We extend access, correction, portability, and deletion requests to users generally, subject to security, legal, fraud-prevention, and technical exceptions. We will not discriminate against you for exercising a privacy right.

9. State privacy rights

Depending on where you live and whether a particular law applies to CookCredit, you may have rights to know, access, correct, delete, or obtain a portable copy of personal information, and to appeal a denied request. Some laws also provide rights concerning sale, targeted advertising, profiling, or sensitive information. CookCredit does not currently sell personal information, share it for cross-context behavioral advertising, or use CookCredit Skill for targeted advertising. We therefore do not offer a separate sale or advertising opt-out because there is no such processing to opt out of.

California residents can review the California Attorney General's description of CCPA rights. CookCredit will honor applicable Global Privacy Control signals if our practices ever include a processing activity to which such a signal applies.

For hand-motion and biometric-related information, read our Biometric Notice and Written Release.

10. Children

CookCredit Skill is not directed to or offered to anyone under 18. We do not knowingly collect personal information through CookCredit Skill from a child under 13. If you believe a minor used the Service, contact us so we can investigate and delete associated data as appropriate.

11. Security

We use HTTPS, owner-scoped access rules, server-authorized uploads, authentication, App Check, upload validation, request limits, and automatic deletion. No service is completely secure, so we cannot guarantee that unauthorized access or loss will never occur.

12. United States service

CookCredit Skill is operated from the United States and currently intended for United States users. Information may be processed in the United States. Do not use the Service where doing so would violate applicable law.

13. Changes and contact

We may update this Policy when the product or law changes. We will change the date above and provide reasonable notice before a material change applies. We will request new consent before using already-collected information for a materially different purpose when required by law.

Privacy questions and requests:

CookCredit LLC 683 Grant St SE Atlanta, GA 30315 connectwithus@cookcredit.com