Privacy policy

Updated September 29, 2026

MenuCostFlow is operated by Jianbo Ying, an individual operator in Shanghai, China. Contact privacy@menucostflow.shop about your data.

What we use and why

We use your email address, sign-in records and session identifiers to provide access and protect your account. We store the ingredients, prices, recipes and price-change snapshots you save to your private workspace. CSV files are parsed for import; the original uploaded file is not kept as a file.

Your recipes and prices are not public. We do not sell them, use them for advertising, or use them to train AI. We access account information only as needed to operate the service, investigate faults or handle your requests. Please avoid including personal or sensitive information in recipe names or uploads.

Service providers and international processing

Cloudflare hosts the application and database. Purelymail handles sign-in and support email. When purchases are available, Creem handles checkout as merchant of record; we receive identifiers, subscription status and payment/refund details needed for billing and access, not full payment card numbers. These providers and our operator may process information outside your country. We do not promise storage exclusively in the United States.

Cloudflare also provides website performance statistics, such as page loading times and Core Web Vitals. Its performance beacon does not track you across other customers' websites. We do not send recipe contents or ingredient prices as analytics events.

Provider policies: Cloudflare, Purelymail and Creem.

Retention and deletion

While your account remains open, we retain your saved workspace, archive and price history. Canceling Pro does not delete those records. You can export your active workspace and archive, then delete your account from the workspace. Complete any active subscription or unresolved checkout handling first.

Account deletion removes account details, sessions, sign-in records, recipes, archive and history from the application database. Minimal billing records are detached from the deleted account and kept for reconciliation, disputes and applicable legal obligations. This does not delete records Creem holds independently as merchant of record. Contact us to request a copy or review of retained billing information.

Database recovery copies can retain deleted information for up to 30 days under Cloudflare D1's recovery window. Recovery copies are restricted to recovery purposes; a restoration must reapply completed deletion requests. Support correspondence is kept while handling your request and any related dispute or legal obligation. You may ask us to delete correspondence that is no longer needed.

Your choices

Use the workspace export and deletion controls, or email the privacy address for access, correction, deletion or other applicable rights. We may need to verify that the request belongs to you. We do not use a privacy request as permission to send marketing.

Cookies, children and changes

We use necessary sign-in and security cookies, not advertising pixels or cross-site analytics. See our cookie notice. This service is for business operators and is not directed at children. We will update this page when our practices change and notify account holders of material changes where required.