Privacy Policy

Effective Date: August 21, 2026 · Last Updated: August 21, 2026

1. Who We Are

Tablestock ("Tablestock," "we," "us," or "our") is the publisher of the Tablestock mobile application (the "App"). The App is operated by Tablestock LLC, a Kentucky limited liability company, which is the controller of the personal information described in this Privacy Policy.

Mailing address: 3044 Breckenridge Ln Ste 102 #402, Louisville, KY 40220, United States

Contact: support@tablestock.app

This Privacy Policy explains what information the App collects, how it is used, and what choices you have. It applies to the Tablestock App on iOS and Android and to any related support communications. It does not apply to the practices of Apple, Google, or any other third party whose services you use to obtain or run the App.

2. Summary

Tablestock is built to be local-first. In its current version, the App does not require you to create an account, does not sync your data to our servers, and does not know who you are unless you contact us directly (for example, by emailing support). Most of what you enter into the App — recipes, notes, photos, versions — stays on your device.

3. Information We Collect

3.1 Content You Create

Recipes, recipe notes, versions, photos, tags, and any other content you enter into the App ("User Content") is stored locally on your device. We do not receive, transmit, or store copies of your User Content on any server we control.

3.2 Purchase Information

The App is offered as a one-time paid purchase through the Apple App Store and/or Google Play. All payment processing is handled entirely by Apple and Google under their own respective privacy policies and terms. Tablestock does not receive, process, or store your payment card number, billing address, or other payment credentials. We may receive limited, non-identifying transaction confirmation data (for example, that a purchase occurred) from Apple’s and Google’s developer reporting tools.

3.3 Diagnostic and Crash Data

The App does not include any third-party analytics or crash-reporting software, and we do not track how you use the App.

If the App crashes, Apple’s and/or Google’s own built-in, platform-level diagnostics (Xcode and App Store Connect crash reports and MetricKit on iOS; Android vitals on Google Play) may automatically collect an anonymized crash log and basic device and operating-system information and make it available to us — but only if you have enabled diagnostic sharing in your device’s own settings, or, for beta testers using TestFlight, as part of TestFlight’s standard beta-testing data sharing. We do not operate or control this reporting ourselves; it is provided directly by Apple and Google as part of their developer platforms, and it never includes your recipes, notes, photos, or other User Content. We use this information only to identify and fix bugs.

3.4 Support Communications

If you email us (for example, at support@tablestock.app), we retain that correspondence — including your email address and whatever you choose to tell us — in order to respond to you and to keep a record of the interaction.

3.5 Feedback and Beta/Pilot Participation

If you take part in a Tablestock beta, pilot, or tester program, we may collect the email address you provide to enroll, your responses to feedback surveys or interviews, and any testimonial or permission form you choose to sign. Participation in these programs is voluntary, and you may withdraw at any time by emailing us. We may also offer a feature within the App that lets you submit feedback, suggestions, or bug reports to us directly, whether or not you are enrolled in a beta or pilot program. Any information you choose to include — such as a description of an issue or an optional contact email — is used only to review and respond to your feedback and to improve the App.

3.6 Information We Do Not Collect

We do not collect: your name, unless you give it to us; your precise geolocation; your contacts; advertising identifiers; browsing history outside the App; biometric information; or any data for the purpose of building an advertising profile. We do not sell or share personal information, we do not use third-party advertising networks, and we do not engage in cross-context behavioral advertising.

4. How We Use Information

We use the limited information described above only to:

• Respond to support requests and correspondence;
• Diagnose and fix crashes or bugs, using the anonymized platform-level diagnostics described in Section 3.3, if any;
• Administer beta, pilot, and tester programs you have chosen to join;
• Detect, prevent, and address fraud, abuse, or violations of our Terms of Service; and
• Comply with legal obligations.

We do not use your information for targeted advertising, and we do not build profiles about individual users.

5. Legal Bases for Processing (EEA, UK, and Switzerland)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, we process personal information only where we have a lawful basis to do so. Our legal bases are:

• Performance of a contract (Article 6(1)(b) GDPR) — to provide the App and to respond to support requests relating to your use of it;
• Legitimate interests (Article 6(1)(f) GDPR) — to diagnose and fix defects, to maintain the security and integrity of the App, and to keep records of support interactions. We have assessed that these interests are not overridden by your rights and freedoms, in part because the App collects so little information;
• Consent (Article 6(1)(a) GDPR) — for voluntary participation in beta, pilot, or testimonial programs, and for platform-level diagnostic sharing that you enable in your own device settings. You may withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal; and
• Compliance with a legal obligation (Article 6(1)(c) GDPR) — where we are required by law to retain or disclose information.

6. Sharing of Information

We do not sell or rent personal information. We share information only with:

• Apple and Google, as the platforms that distribute the App and process payments, under their own privacy policies;
• Service providers who help us operate (for example, email hosting), which are bound to use the data only to provide that service to us and not for their own purposes;
• Professional advisors, such as attorneys and accountants, where reasonably necessary and subject to duties of confidentiality;
• A successor entity, in connection with a merger, acquisition, financing, reorganization, or sale of all or substantially all of our assets, subject to the protections of this Privacy Policy; and
• Legal authorities, where required by law, subpoena, court order, or other valid legal process, or where we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

7. Data Retention and Your Control

Because User Content lives on your device, you control it directly: you can edit, export, print, or delete it at any time within the App, and uninstalling the App removes locally stored data (subject to your device’s own backup settings, such as iCloud or Google device backups, which are governed by Apple’s and Google’s policies rather than ours).

Support correspondence is retained only as long as reasonably necessary to resolve your inquiry and to maintain a support record, and in no event longer than twenty-four (24) months after the matter is closed, unless a longer period is required by law or is necessary to establish, exercise, or defend a legal claim. Beta and pilot program records, including survey responses, are retained for the duration of the program and for up to twelve (12) months afterward. You may request deletion of your correspondence or program records at any time by emailing us.

8. Children’s Privacy

The App is not directed to children, and we do not knowingly collect personal information from children. Consistent with the U.S. Children’s Online Privacy Protection Act ("COPPA"), we do not knowingly collect personal information from children under 13. In the European Economic Area and the United Kingdom, we do not knowingly collect personal information from anyone below the applicable age of digital consent, which ranges from 13 to 16 depending on the country.

If you believe a child has provided us information through support correspondence or a beta program, contact us at support@tablestock.app and we will delete it promptly. A parent or guardian may also contact us to review, or request deletion of, any information we hold about their child.

9. Security

You are responsible for the security of your own device, including maintaining a device passcode or biometric lock and keeping your operating system up to date, since your User Content is stored on that device rather than with us. We rely on the security protections built into iOS and Android for data stored locally on your device. For the limited information we hold ourselves — principally support correspondence — we use reasonable administrative and technical safeguards, including access controls and encrypted transport. No method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security for any information you send us directly, such as by email.

If we become aware of a breach of security affecting personal information we hold, we will notify affected individuals and any applicable regulator as and when required by law.

10. Your Privacy Rights — All Users

Regardless of where you live, you may contact us at support@tablestock.app to:

• Ask what personal information we hold about you (which, as described in Section 3, is generally limited to support correspondence and any beta program records);
• Ask us to correct information that is inaccurate;
• Ask us to delete that information; or
• Ask a question about this Privacy Policy.

We will respond within the timeframe required by applicable law. We may need to ask you for information sufficient to verify your identity before acting on a request — typically, confirmation from the email address associated with the correspondence in question. We will not charge you a fee for a first request, and we will not discriminate against you for exercising any privacy right.

11. Additional Rights for California Residents

This section applies to residents of California and supplements the rest of this Privacy Policy. It is provided under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the "CCPA").

11.1 Categories of Personal Information

In the twelve (12) months preceding the Effective Date of this Privacy Policy (a period that encompasses the entirety of our operations, which began in August 2026), we have collected the following categories of personal information, as those categories are defined by the CCPA:

• Identifiers — an email address, and any name you choose to give us, if you contact support or enroll in a beta program. Source: you. Purpose: to respond to you and to administer the program. Disclosed for a business purpose to: our email hosting provider.
• Commercial information — non-identifying confirmation from Apple or Google that a purchase of the App occurred. Source: Apple and Google. Purpose: business record-keeping. Not disclosed to any third party.
• Internet or other electronic network activity information — anonymized crash logs and basic device and operating-system information, where platform-level diagnostic sharing is enabled in your device settings. Source: Apple and Google. Purpose: to diagnose and fix defects. Not disclosed to any third party.

We do not collect any other CCPA category of personal information. We do not collect sensitive personal information, and therefore we do not use or disclose sensitive personal information for any purpose that would give rise to a right to limit its use.

11.2 No Sale or Sharing

We have not sold personal information, and we have not shared personal information for cross-context behavioral advertising, in the twelve (12) months preceding the Effective Date of this Privacy Policy (a period that encompasses the entirety of our operations, which began in August 2026), and we do not do so now. We have never sold or shared the personal information of consumers we know to be under 16 years of age.

Because we do not sell or share personal information, an opt-out preference signal such as Global Privacy Control has no information to act upon. We nonetheless honor such signals to the extent they are applicable to any future processing.

11.3 Your California Rights

• Right to know — to request the categories and specific pieces of personal information we have collected about you, the categories of sources, the business or commercial purpose for collecting it, and the categories of third parties to whom we disclose it;
• Right to delete — to request deletion of personal information we have collected from you, subject to statutory exceptions;
• Right to correct — to request correction of inaccurate personal information we maintain about you;
• Right to opt out of sale or sharing — which we honor by default, as described in Section 11.2;
• Right to limit use of sensitive personal information — which does not apply, because we do not collect it; and
• Right to non-discrimination — we will not deny you goods or services, charge you a different price, or provide you a different level or quality of service because you exercised a privacy right.

11.4 How to Exercise These Rights

Email support@tablestock.app with the subject line "California Privacy Request." We will acknowledge your request within ten (10) business days and respond within forty-five (45) days, which we may extend by an additional forty-five (45) days where reasonably necessary, in which case we will tell you. We will verify your request by corresponding with you at the email address associated with the information you are asking about.

You may use an authorized agent to submit a request on your behalf. We will ask the agent for written permission signed by you, and we may ask you to verify your identity with us directly.

12. Additional Rights for Residents of Other U.S. States

A growing number of U.S. states — including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island, and others — have comprehensive consumer privacy laws. If you are a resident of a state with such a law, you may have the right to:

• Confirm whether we process your personal data, and access that data;
• Correct inaccuracies in your personal data;
• Delete personal data you provided or that we obtained about you;
• Obtain a copy of your personal data in a portable, readily usable format, where technically feasible; and
• Opt out of the processing of your personal data for targeted advertising, for sale, or for profiling in furtherance of decisions that produce legal or similarly significant effects. We do not engage in any of these activities.

To exercise any of these rights, email support@tablestock.app. We will respond within forty-five (45) days, subject to any extension permitted by your state’s law.

12.1 Right to Appeal

If we decline to take action on your request, we will tell you why. You may appeal that decision within a reasonable period by replying to our response or by emailing support@tablestock.app with the subject line "Privacy Appeal." We will respond to your appeal in writing within forty-five (45) days, explaining the reasons for our decision. If your appeal is denied, you may contact your state Attorney General to submit a complaint.

13. Additional Rights in the EEA, UK, and Switzerland

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights under the EU General Data Protection Regulation, the UK GDPR, or the Swiss Federal Act on Data Protection, as applicable:

• Access — to obtain confirmation of whether we process personal data about you and a copy of that data;
• Rectification — to have inaccurate personal data corrected and incomplete data completed;
• Erasure — to have personal data erased in the circumstances set out in Article 17 GDPR;
• Restriction — to restrict processing in the circumstances set out in Article 18 GDPR;
• Portability — to receive personal data you provided to us in a structured, commonly used, machine-readable format, and to have it transmitted to another controller where technically feasible;
• Objection — to object at any time, on grounds relating to your particular situation, to processing based on our legitimate interests; and
• Withdrawal of consent — to withdraw any consent you have given, at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, email support@tablestock.app. We will respond within one (1) month, which we may extend by up to two (2) further months where the request is complex or numerous, in which case we will tell you within the first month.

You also have the right to lodge a complaint with your local data protection supervisory authority, or with the UK Information Commissioner’s Office at ico.org.uk. We would appreciate the chance to address your concern first.

13.1 EU and UK Representative

Article 27 of the GDPR requires certain controllers established outside the European Union to designate a representative within it. We have not designated a representative, in reliance on the exemption in Article 27(2)(a), because our processing of personal data relating to individuals in the European Economic Area is occasional, does not include the large-scale processing of special categories of data or of data relating to criminal convictions and offences, and is unlikely to result in a risk to the rights and freedoms of individuals — reflecting that the App is local-first, requires no account, and that the only personal data we ordinarily receive is support correspondence a user chooses to send us. We keep this assessment under review, and we will designate a representative and update this Privacy Policy if the nature or scale of our processing changes. You may contact us directly at support@tablestock.app about any matter relating to our processing of your personal data.

14. International Data Transfers

Tablestock LLC is located in the United States. Your User Content remains on your device and is not transferred anywhere by us. The limited information we do receive — principally support correspondence — is processed in the United States.

Where we receive personal data from the European Economic Area, the United Kingdom, or Switzerland, we rely on the European Commission’s Standard Contractual Clauses (and the UK International Data Transfer Addendum, where applicable) in our agreements with service providers, together with appropriate supplementary measures, to provide a lawful basis for the transfer. You may request a copy of the relevant safeguards by emailing us.

15. Automated Decision-Making

We do not use your personal information to make any decision about you by automated means, and we do not engage in profiling that produces legal effects concerning you or similarly significantly affects you.

16. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last Updated" date above and, where appropriate, notify you through the App or our website before the change takes effect. We will not apply a materially different practice to information previously collected without an appropriate legal basis or, where required, your consent.

17. Contact Us

Questions about this Privacy Policy, or about your data:

Email: support@tablestock.app

Mail: Tablestock LLC, a Kentucky limited liability company, 3044 Breckenridge Ln Ste 102 #402, Louisville, KY 40220, United States