Privacy Policy
Last updated: October 5, 2026. Read our Terms and Conditions.
Akatosh Labs (“we,” “us,” or “our”) operates this website (the “Site”). This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use our Site and related services.
This policy applies to U.S. residents, including California residents, and is intended to comply with applicable privacy laws, including the California Consumer Privacy Rights Act (CPRA).
1. Information We Collect
We collect the following categories of personal information:
Information You Provide Directly
- Contact information such as email address and mobile phone number
- Account information used for authentication through our centralized account system
- User-submitted content, including form submissions, shopping list data, and photographs (such as recipe images)
- Support communications, such as emails sent to us
Information Collected Automatically
- Authentication tokens stored in cookies to maintain login sessions
- IP address, device information, and system logs collected for security, debugging, fraud prevention, and account integrity
- AutoHaul service activity, including retailer page information and interaction data needed to operate AutoHaul, troubleshoot issues, and maintain compatibility with supported retailers
- Metadata from user-submitted photographs, including EXIF data such as geolocation, device model, and capture date, used to provide location-based features and improve service quality
- Collaborative shopping list activity: when you join a shared shopping list, we create a temporary participant identity (a randomly generated display name and avatar, not tied to your account) and record your check-off activity and presence in order to synchronize the list among participants in real time
We do not use analytics tools or behavioral tracking technologies.
2. Authentication and Accounts
User accounts are managed through a centralized account API operated by Akatosh Labs. Authentication may occur via:
- Email and password, or
- One-time passcodes (OTP) sent via email or SMS
Although authentication is handled by a shared system, all account data is governed by this Privacy Policy.
3. Cookies and Similar Technologies
We use cookies strictly for essential purposes, including:
- Storing authentication tokens
- Maintaining secure login sessions
We do not use cookies for:
- Advertising
- Analytics
- Cross-site tracking
You may disable cookies in your browser, but doing so may prevent access to authenticated features.
4. SMS Messaging
If you provide a mobile phone number, we may use it to send non-promotional SMS messages related to your account and service usage, including:
- One-time passcodes (OTP) for authentication
- Shopping list status notifications (such as creation, failure, or in-progress updates)
- Transaction or purchase confirmations
SMS messages are sent only in response to user-initiated actions. You may opt out of SMS messages at any time by replying STOP, or request assistance by replying HELP or contacting us at help@akatoshlabs.com.
5. Payments
We do not store payment card or banking information.
Payments are processed entirely by third-party payment providers such as Apple Pay or Stripe. Their use of your personal information is governed by their own privacy policies.
6. Embedded Third-Party Content
The Site may embed content or links from third-party platforms such as Amazon or Instacart.
When you interact with embedded third-party content, those services may collect information directly from you. We do not control their data practices and encourage you to review their privacy policies.
7. Affiliate Links and Sponsored Content
Some links on the Site may be affiliate links (for example, Amazon or Instagram affiliate programs). If you click these links and make a purchase, we may receive a commission.
We may also display sponsored content — paid brand placements shown within recipe and shopping-list ingredients, identified by a "Sponsored" disclosure. To decide which placements are relevant, we process the ingredient names shown on the page (and, if available, your dietary preference) on our own servers. This matching is contextual — based on what is on the page, not on tracking your behavior across sites or apps.
We do not receive personal information about you from affiliate programs, we do not sell or share personal data with sponsors or advertisers, and we do not use advertising cookies or third-party ad-tracking to serve sponsored content.
8. How We Use Personal Information
We use personal information to:
- Provide and maintain the Site and services
- Authenticate users and manage accounts
- Create and manage shopping lists and related features
- Operate AutoHaul, including retailer-page automation, troubleshooting, and reliability monitoring
- Improve recipe content quality through user-submitted images
- Analyze photo metadata to offer location-based features and recommendations
- Send authentication codes and transactional notifications
- Communicate with users and respond to support requests
- Detect, prevent, and investigate security incidents or abuse
- Comply with legal obligations
9. How We Share Information
We do not sell personal information.
We may share personal information with:
- Service providers, such as cloud infrastructure and database providers
- Payment processors, solely to complete transactions
- Messaging providers used to deliver authentication and transactional SMS
- Legal authorities, if required by law or to protect our rights
All service providers act on our behalf and are required to protect personal information.
Separately, you may choose to share your own content with others. If you enable collaborative sharing on a shopping list, we generate an unguessable invite link that you control. Anyone you share that link with can view the list's contents and see the activity of participants on the list. This sharing is entirely at your direction, and you can disable it at any time.
10. Data Retention
We retain personal information only as long as necessary to:
- Provide services
- Meet legal, security, and operational requirements
Users may request deletion of their data as described below.
Collaborative shopping list session data (participant identities, presence, and check-off activity on a shared list) is retained for a limited period — currently up to 30 days — after which it is automatically deleted.
AutoHaul service activity and reliability data is retained only as long as reasonably necessary to operate the feature, troubleshoot issues, maintain compatibility with supported retailers, and meet security or operational requirements.
11. Your California Privacy Rights (CPRA)
If you are a California resident, you have the right to:
- Know what personal information we collect and how it is used
- Request access to your personal information
- Request deletion of your personal information
- Correct inaccurate personal information
- Opt out of the sale or sharing of personal information
(Note: we do not sell or share personal data.)
Exercising Your Rights
You may submit requests by emailing:
help@akatoshlabs.com
We may verify your identity before fulfilling requests.
12. Children’s Privacy
This Site is intended for users 18 years of age or older. We do not knowingly collect personal information from children under 13.
13. Data Security
We implement reasonable administrative, technical, and organizational safeguards to protect personal information. However, no system can be guaranteed to be 100% secure.
14. Changes to This Policy
We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised “Last updated” date.
15. Contact Us
If you have questions or concerns about this Privacy Policy, contact us at:
help@akatoshlabs.com