Version 1 • Effective July 7, 2026
Introduction
SourdoughLife ("we", "our", or "us") is operated by Insightflow, LLC (600 1st Ave Ste 102 # 2235, Seattle, WA 98104-2287, United States). We are committed to protecting your privacy. This policy informs you of our practices regarding the collection, use, and disclosure of personal data when you use our Service ("app" or "Service"), and the choices you have.
We collect and use your data only as described in this policy. Where we rely on your consent as a legal basis for processing (e.g., AI photo analysis), we obtain that consent separately through a clear in-app prompt — not through your general use of the Service.
Types of Data Collected
While using our Service, we may ask you to provide us with certain personally identifiable information ("Personal Data") and collect data about your activity. This may include, but is not limited to:
- Personal Data: Personally identifiable information, which may include your email address, first name and last name, and User ID.
- User Content: Information you post to the Service as defined in our Terms of Service. This includes, but is not limited to:
- Recipes and Baking Data: Information you provide when you create a recipe or log a baking process, such as ingredients, environmental conditions, steps, timings, and notes.
- Starter Data: Information you log about your sourdough starter, such as feeding times and ratios.
- Photos: Images you upload, such as photos of your bread for AI analysis or for your personal logs.
- Usage Data: Limited counts we keep to operate the Service and enforce plan limits, such as how many bakes and AI reviews you create each month and your AI token usage.
- Log and Device Data: Our servers automatically record technical information — such as your IP address, device and user-agent details, and request timestamps — for security and operations. This information is kept only for a short period (up to 7 days).
Analytics
We do not use third-party analytics, crash-reporting, advertising, or tracking SDKs in the app. The app makes only functional network requests (for example, sign-in, saving your bakes and recipes, AI features, and payments). Apple's App Store Connect may provide us with aggregate, anonymized analytics and crash reports for users who have opted in to share diagnostics with developers; Apple collects this — we embed nothing — and you can control it in iOS Settings → Privacy & Security → Analytics & Improvements.
Information usage
We use the information we collect to operate, improve, and support the Service.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising (as those terms are used under California law). We disclose your information to third parties only as necessary to operate the Service. We host your data with Amazon Web Services (AWS), and—when you use AI features—we send the relevant content to our AI providers — Anthropic, OpenAI, and AWS — to generate feedback for you. These providers act on our behalf under contract and process your data only to provide the feature, not for advertising. We may use any of these three providers for a given request and may switch among them over time; if we add a different AI provider, we will ask for your renewed consent before any of your content is sent to it.
When you use AI features, the content involved is transmitted to our AI providers (Anthropic, OpenAI, and AWS) solely to generate feedback for you — bread photos and any notes you include for photo review, and your questions and bake context for the schedule assistant. This content is not used to train AI models, under our providers' standard API terms. We do not sell your content. You will be asked for explicit in-app consent before your content is first sent to these providers, including explicit consent for any health, dietary, allergy, medical, or other special-category information you choose to include in AI prompts, photos, notes, or conversations. You may withdraw that consent at any time in Settings → AI Features. See the separate AI Features & Data Use Policy for full details.
We may disclose your information in response to subpoenas, court orders, or other legal requirements; to exercise our legal rights or defend against legal claims; to investigate, prevent, or take action regarding illegal activities, suspected fraud or abuse, violations of our policies; or to protect our rights and property.
In the future, we may sell to, buy, merge with, or partner with other businesses. In such transactions, user information may be among the transferred assets.
Data Retention
We keep your account, recipes, bakes, starter logs, and uploaded photos for as long as your account is active or as needed to provide the Service. You can delete individual content in the app, and you can delete your account at any time. When you delete your account, your content is removed from our active systems promptly; in rare technical-failure cases, residual copies are removed by periodic maintenance. Limited records are retained where the law requires or permits — for example, pseudonymized subscription and transaction records that no longer contain your name, email, or account identifier (Apple transaction identifiers, retained for tax and financial-record purposes for up to seven years), privacy-request records (approximately 30 months), and short-term backups (overwritten within 35 days). See our AI Features & Data Use Policy and Terms of Service for more detail.
Children's Privacy
The Service is intended for users 14 and older. We ask you to confirm that you are at least 14 when you sign up, and we do not knowingly collect personal information from children under 14. If we learn that we have collected personal information from a child under 14, we will delete it.
International Transfers of Information
We and our service providers currently process and store your data in the United States. If you access the Service from outside the United States, your information will be processed in the U.S. As we expand availability to other regions, we will update this policy and provide the additional disclosures and safeguards those laws require.
California Privacy Rights
If you are a California resident, you have the right to know what personal information we collect, to access and delete it, to correct it, and to opt out of its sale or sharing (we do not sell or share your personal information for cross-context behavioral advertising). The Service does not respond to browser "Do Not Track" signals and does not track your activity across third-party websites, and we do not permit third parties to collect information about your online activities over time and across different websites or services when you use the Service. To exercise these rights, contact us at admin@insightflow.life. We will respond within 45 days (extendable by up to another 45 days where permitted, with notice). We will not discriminate against you for exercising these rights.
Canadian Privacy Rights
If you are located in Canada, our collection, use, and disclosure of your personal information is subject to the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and, for Quebec residents, the Act Respecting the Protection of Personal Information in the Private Sector (as amended by Law 25). You have the right to access the personal information we hold about you, to request correction of any inaccuracies, and to withdraw your consent to our processing at any time; withdrawing consent may mean that parts of the Service no longer function. INSIGHTFLOW, LLC's Privacy Officer — the person in charge of the protection of personal information under Quebec's Act respecting the protection of personal information in the private sector, and the individual accountable for our compliance under PIPEDA — can be reached at admin@insightflow.life. If you are not satisfied with our response, you have the right to complain to the Office of the Privacy Commissioner of Canada (OPC); Quebec residents may also complain to the Commission d'accès à l'information (CAI). Your personal information is stored and processed in the United States — including by our AI sub-processors Anthropic and OpenAI — and, while there, is subject to United States law and may be accessible to U.S. courts, law enforcement, and national-security authorities under lawful orders made in the United States. Quebec residents may also request a copy of the computerized personal information they provided to us in a structured, commonly used technological format; you can obtain this at any time using the in-app data export.
Washington Consumer Health Data
Washington residents: our separate Consumer Health Data Privacy Policy, available at https://mysourdough.life/legal/health-data/latest, describes how we handle health-related information you choose to include when using AI features.
Your Consent
Where we rely on consent to process your data (e.g., AI photo analysis and any voluntarily provided sensitive details in AI prompts), we request that consent through a separate, clear in-app prompt. You may withdraw consent at any time without affecting the lawfulness of prior processing or your ability to use other features.
Changes to This Privacy Policy
We may update this policy from time to time. For material changes, we will notify you in the app and/or by email to your registered address before the changes take effect and update the effective date above. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.
Contacting Us
If you have questions regarding this privacy policy, you may email admin@insightflow.life