Privacy Policy

Effective date: June 9, 2025

Last updated: June 9, 2025

1. Data Controller

Costhap Co Ltd
Hwy 4027, Phuket 83110, Thailand
Contact: https://x.com/costhapdev

2. Applicable Law

This Policy is issued under Thailand’s Personal Data Protection Act (PDPA) and, where applicable, global privacy standards.

3. Information We Collect

• IP address & device information: Automatically collected for analytics and app performance (legitimate interest).
• In-app purchase IDs: Collected to verify and unlock paid features (performance of a contract).
• Recipes & input data: Any text or recipe you submit; shared with OpenAI’s API to generate AI-powered results (consent).

4. Legal Bases for Processing

• Consent: Before sharing your recipes or inputs with OpenAI.
• Performance of a contract: To validate and deliver purchased features.
• Legitimate interests: To analyze usage patterns and improve app stability.

5. How We Use & Share Your Data

• With OpenAI: Transmit your recipe inputs to OpenAI in the U.S.; processed under OpenAI’s data use policy.
• Analytics providers: Share anonymized IP/device data for aggregate reporting.
• Payment processors: In-app purchase IDs are validated by platform payment services.
• We do not sell or rent your personal data to third parties.

6. International Transfers

Your data may be transferred outside Thailand (e.g., to OpenAI in the U.S.). We employ standard contractual clauses and other safeguards required by law.

7. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes described or to comply with legal obligations. Analytics data is aggregated and retained for up to 24 months.

8. Your Rights

Under the PDPA you have the right to:

• Access and receive a copy of your personal data.
• Request correction of inaccurate data.
• Request deletion or restriction of processing.
• Withdraw consent at any time (without affecting prior processing).

To exercise these rights, contact us at https://x.com/costhapdev.

9. Children’s Privacy

Our app is not intended for users under 13. We do not knowingly collect data from minors.

10. Security Measures

We implement administrative, technical, and physical safeguards to protect your data. However, no system is impenetrable.

11. Changes to This Policy

We may update this Policy to reflect changes in our practices or legal requirements. We will post the revised Policy here with an updated effective date.

12. Contact Us

For questions or complaints, please reach out via https://x.com/costhapdev or mail us at: