Legal
Privacy Policy
Effective May 19, 2026 · Last updated May 19, 2026
This Privacy Policy explains how Lit Apps Lab(“Kuskus,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you use the Kuskus mobile application and fromkuskus.com(together, the “Service”).
We designed Kuskus to be useful without being invasive. We collect only what we need to make the app work, and we never sell your personal data.
1. Who we are
The Service is operated by Lit Apps Lab, located at 30 N Gould St Ste R, Sheridan WY 82801, United States. For privacy questions, contact us at info@litappslab.com.
2. Information we collect
2.1 Account information
When you sign in, we collect your email address and the unique identifier provided by Apple, Google, or our email magic-link service. We store this on Firebase (Google Cloud) to authenticate you and link your subscription to your account. Specifically:
- Sign in with Apple— your Apple user ID and, if you choose to share it, your email and display name. If you choose “Hide my email,” we only receive Apple’s private relay address.
- Sign in with Google — your Google user ID, email address and (where available) display name and profile photo URL.
- Email magic link — your email address.
2.2 Email communications
We may use your email address to send transactional emails (sign-in links, receipts) and lifecycle emails (welcome, trial reminders, win-back offers) delivered via Resend. You can unsubscribe from marketing emails at any time using the link in the email footer; transactional emails will still be sent where they are required to operate the Service.
2.3 Content you create
We store the recipes, cookbooks, meal plans, grocery lists, notes, ratings, servings adjustments, and any text or images you save inside Kuskus. When you share a link or paste a URL for extraction, we receive and process that URL and the content of the page it points to so we can produce a structured recipe.
2.4 Device & usage information
To keep the app working and to understand which features matter, we automatically collect:
- Device model, operating system version, app version, language and region.
- Anonymous events such as “recipe extracted,” “meal plan opened,” “grocery item ticked,” crash reports and performance traces.
- A device-generated identifier used by our analytics provider.
2.5 Subscription information
If you purchase Kuskus Premium, the purchase is processed by Apple (App Store) or Google (Play Store). We do not see or store your payment card. We receive an anonymized subscription identifier from Qonversion, the service we use to validate purchases, so we can unlock the relevant features in your account.
2.6 Push tokens
If you grant notification permission, we store the push token issued by Apple Push Notification service or Firebase Cloud Messaging so we can send the notifications you opt into (e.g. meal plan reminders).
3. How we use information
- To provide the core features of the Service.
- To extract structured recipes from the URLs you submit, using third-party AI providers (see Section 5).
- To authenticate you and keep your account secure.
- To process subscription purchases and entitlements.
- To improve the app — diagnose crashes, fix bugs, understand which features are used and which are not.
- To respond to your support requests and communicate important service-related notices.
- To comply with applicable laws and to protect the rights, safety, and property of Kuskus, you, and others.
4. Legal bases (EEA / UK users)
If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR / UK GDPR:
- Contract — to provide the Service you signed up for (saving recipes, syncing across devices, processing purchases).
- Legitimate interests — to keep the Service secure, prevent abuse, and improve features. We balance these against your rights.
- Consent — for push notifications and any optional analytics that require it in your region. You can withdraw consent at any time in your device settings.
- Legal obligation — when we must retain or disclose information to comply with the law.
5. Third-party services & subprocessors
Kuskus shares the minimum necessary information with these providers, each acting as a processor or subprocessor on our behalf:
- Firebase (Google LLC) — authentication, Firestore content storage and sync, Crashlytics crash reporting.
- Google Cloud / Gemini — server-side AI parsing of recipe URLs you submit.
- Resend (Resend, Inc.) — delivery of transactional and lifecycle emails (sign-in links, receipts, trial reminders).
- Qonversion (Qonversion Inc.) — subscription validation and entitlement management.
- PostHog — privacy-respecting product analytics and feature flags. Configured to use a device-generated identifier, not your email.
- Apple & Google — sign-in, purchase processing, push notifications, app distribution.
- Vercel — hosting of
fromkuskus.com.
Subprocessors: Firebase (Google LLC), Resend (Resend, Inc.), Qonversion (Qonversion Inc.).
6. Recipe URLs & social platforms
When you share or paste a link from TikTok, Instagram, YouTube, Pinterest or any website, we fetch that URL server-side to extract the recipe. We do not log into your social accounts and we do not have access to your private feed; we only see the content of links you deliberately share with Kuskus. The content we keep is the structured recipe and a reference to the source URL, not your viewing history.
7. Sharing & disclosure
We do not sell your personal information. We share data only when:
- A processor listed in Section 5 needs it to deliver part of the Service.
- You explicitly choose to share content (for example, exporting a recipe or sending it to someone outside the app).
- We are required to do so by law, court order or other valid legal process, or to protect rights and safety.
- We are involved in a merger, acquisition or asset sale, in which case we will notify you and any successor will be bound by this Policy.
8. International transfers
Our processors operate primarily in the United States and the European Union. Where personal information is transferred outside your country, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
9. Data retention
- Account data and content are retained for as long as your account exists.
- Crash logs and analytics events are retained for up to 24 months and then aggregated or deleted.
- When you delete your account, we delete your content and account identifiers within 30 days, except where we are required to retain information by law (e.g. tax and transaction records).
10. Your rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you.
- Correct inaccurate information.
- Delete your account and associated data.
- Export your content in a portable format.
- Object to or restrict certain processing.
- Withdraw consent where processing is based on consent.
- Lodge a complaint with your local data protection authority (EEA / UK users).
You can delete your account directly inside the app under Settings → Account → Delete account, or by visiting /delete-account. For other requests, email info@litappslab.com from the address on your account and we will respond within 30 days.
11. California residents
California residents have the right under the CCPA / CPRA to know what personal information we collect, to delete it, to correct it, and to opt out of any “sale” or “sharing.” We do not sell personal information and we do not share it for cross-context behavioural advertising. To exercise your rights, email info@litappslab.com.
12. Children
Kuskus is not directed at children under 13 (or under 16 in the EEA / UK). We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will delete it.
13. Security
We use industry-standard safeguards: encryption in transit (TLS), encryption at rest on our database, strict access controls and audit logging. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.
14. Changes to this Policy
We may update this Policy from time to time. If we make material changes, we will notify you in the app and update the “Last updated” date above. Continued use of the Service after changes take effect means you accept the revised Policy.
15. Contact
Questions, requests or complaints? Email info@litappslab.com or write to us at:
Lit Apps Lab
30 N Gould St Ste R
Sheridan, WY 82801
United States