Legal
Privacy Policy
Last updated: September 28, 2026
This Privacy Policy explains how Kaban Brands Corporation (“Tadka,” “we,” “us”) collects, uses, and shares information when you use the Tadka mobile apps (iOS and Android), the gettadka.app website, and related services (together, the “Service”).
We designed this notice for users in Canada (including Quebec), India, and the United States (including California). Your rights depend on where you live — see the jurisdiction sections below.
Questions or privacy requests: hello@gettadka.app.
Who we are
Tadka is a dinner-decider app that helps households pick one recipe for tonight, with grocery lists and credited Instagram reel embeds. The Service is operated by Kaban Brands Corporation via gettadka.app.
What we collect and why
Account and authentication. Sign-in uses Clerk. On iOS you can continue with Apple or Google; on Android, with Google; on every platform, with an email code. Clerk processes your email address and session credentials so we can keep you signed in. If Apple or Google shares an email that matches an existing Tadka account, Clerk links them so you stay the same user. Inside the app we identify you with a Clerk user id — we do not display or send your email to our analytics provider.
Onboarding quiz and preferences (device storage). On first launch you may answer servings, vegetarian preference, kids-at-the-table, and allergens to avoid. These answers are stored on your device (AsyncStorage) to set filter defaults and hard-exclude matching recipes. You can change allergen exclusions later in Settings.
Allergen and health-adjacent data (sensitive). Allergen selections are used only to filter recipe suggestions based on ingredient and dish-name text. We do not use allergen answers for advertising, sale of data, or unrelated profiling. See “Allergen and quiz data” below.
In-app activity stored on your device. Favorites, thumbs up/down, cooked history, meal-plan picks, filter preferences, dinner-reminder on/off preference, coach-mark “seen” flags, and (when applicable) a local trial-anchor timestamp keyed to your user id. These stay on the device unless you clear app data or uninstall.
Analytics (Mixpanel). We send product events such as app open, quiz completed or skipped, decide/reveal actions, recipe and reel engagement, favorites, ratings, cooked logs, grocery copy, meal-plan share, fridge search (ingredient tokens you typed and result counts), dinner-reminder enable/disable, and paywall / trial / purchase events. Events are identified with your Clerk user id after sign-in (never your email). Super-properties include platform and app version. We disable Mixpanel IP-based geolocation enrichment in our SDK configuration. You can turn this off anytime under Settings → Notifications → Product analytics. While it is off, the app does not send these events.
Quiz analytics. If you complete the onboarding quiz, Mixpanel may receive servings, diet preference, kids flag, and allergen category labels you selected — for product improvement only, not for ads.
Notifications. After you decide a dinner, the app may ask to send one local reminder a day, around 5:00 PM, and never between 9:00 PM and 9:00 AM in your device timezone. Dinner reminders, new-dish alerts, and craving nudges are on until you turn them off in Settings. Occasional check-ins are off until you turn them on. These are not marketing. If you allow alerts, we register an Expo push token, store it on this device, and — when you are signed in — save it on your Clerk user profile so a future sender can reach this device.
Purchases and entitlements. Subscriptions are processed by Apple or Google in the iOS and Android apps. Kaban Brands Corporation does not collect or store card numbers — payment credentials are handled by Apple or Google. We receive subscription status needed to unlock Tadka Premium.
Website waitlist. The gettadka.app waitlist form asks for an email address. If and when that form is connected to a backend, we will use the email you submit only to contact you about the Service. Until then, do not treat a waitlist submission as stored account data.
Instagram / Meta content. Recipe cards embed Instagram reels via Instagram’s official embed player and credit creators from our recipe data. Dish preview images are bundled with the app (downloaded at build time from public post metadata); we do not fetch Instagram thumbnail URLs at runtime. Loading embeds may involve Instagram/Meta receiving technical data (such as IP address and device information) under their policies.
Crash reporting and performance (Sentry). We use Sentry (US data region) to diagnose crashes, JavaScript exceptions, unhandled promise rejections, and sampled performance timings (for example cold start, screen load, and reel WebView load). Reports include app release version, device OS/version, anonymous install id, route/action breadcrumbs, and network online/offline state. We do not send your email, name, Clerk user id, or advertising id to Sentry. We configure the SDK not to send default PII, set user IP to null in reports, and enable Sentry’s project setting to prevent storing IP addresses.
Allergen and quiz data (purpose limitation)
Allergen selections and related quiz answers are health-adjacent information. We collect them for one purpose: to help you filter dinner suggestions away from dishes whose ingredient text appears to match allergens you listed.
Allergen filtering is a best-effort text match — not a medical diagnosis, not a guarantee of safety, and not professional dietary advice. Users with severe allergies must verify ingredients themselves before cooking or eating.
We do not sell allergen data. We do not use it for cross-context behavioral advertising. Limited allergen category labels may be included in analytics events when you complete the quiz, solely to understand product usage.
Third parties we rely on
Clerk — authentication and session management (Apple, Google, and email code), and storage of the Expo push token on your user profile when you are signed in. Apple and Google receive the sign-in request only when you choose those buttons.
Expo — push notification delivery for new-recipe alerts (the device push token only).
Mixpanel — product analytics (events described above).
RevenueCat — subscription entitlements and in-app purchase management on iOS and Android.
Apple App Store / Google Play — billing, receipts, and subscription management.
Instagram / Meta — reel embeds and linked creator content.
Sentry — crash reporting and sampled performance monitoring (anonymous install id; IP scrubbed).
These providers process information under their own terms and privacy policies. We share only what is needed to operate the Service.
Retention
Device-stored preferences and history remain until you clear them, reset the app, or uninstall.
Clerk account data is retained while your account exists and as required for security and legal compliance.
Analytics events are retained according to our Mixpanel project settings and Mixpanel’s practices.
Crash and performance events are retained according to our Sentry project settings and Sentry’s practices.
Purchase and entitlement records are retained by Apple, Google, and RevenueCat as needed to provide subscriptions, prevent fraud, and meet tax or accounting rules.
If waitlist emails are stored after the marketing form is connected to a backend, we keep them until you ask us to delete them or we close the waitlist.
Security
We use reputable vendors for auth and billing, HTTPS for network requests, and platform secure storage mechanisms where our auth provider requires them for sessions.
No method of transmission or storage is 100% secure. Please use a device lock screen and keep your email account secure — an email sign-in code grants access to your Tadka session.
Your rights — Canada (PIPEDA and Quebec Law 25)
Under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), you may request access to personal information we hold about you, and request corrections of inaccurate information, subject to limited exceptions.
If you are in Quebec, Law 25 provides additional rights, including rights relating to access, rectification, withdrawal of consent where processing is based on consent, and de-indexation in applicable cases. Quebec also expects clear consent and heightened care for sensitive information (such as health-adjacent allergen preferences).
Where we rely on consent (for example, optional dinner reminders or voluntary quiz answers), you may withdraw consent for future processing by changing Settings, skipping or clearing preferences, or emailing us — without affecting processing already completed lawfully.
To exercise Canadian privacy rights, email hello@gettadka.app with “Privacy request — Canada” in the subject line. We will respond within the timelines required by applicable law.
Your rights — India (Digital Personal Data Protection Act, 2023)
If you are a data principal in India, the Digital Personal Data Protection Act, 2023 (“DPDP”) provides rights that may include: the right to access information about personal data processing, the right to correction and erasure of personal data, the right to data portability where applicable, and the right to withdraw consent for consent-based processing.
We provide notice of processing through this Policy. Where consent is the basis for processing (such as optional features or voluntary quiz answers), you may withdraw consent via in-app controls or by contacting us. Withdrawal does not affect processing already performed.
Grievance redressal: email hello@gettadka.app with “Privacy request — India / DPDP” in the subject line. We will acknowledge and address grievances through this contact path.
Your rights — United States (including California CCPA/CPRA)
If you are a California resident, the CCPA/CPRA may give you rights to know/access personal information, delete personal information, correct inaccurate personal information, and opt out of “sale” or “sharing” of personal information for cross-context behavioral advertising, subject to exceptions.
We do not sell personal information for money. We do not knowingly share personal information for cross-context behavioral advertising as those terms are commonly understood under the CCPA/CPRA. If that changes, we will update this Policy and provide a required opt-out method.
We do not use or disclose sensitive personal information (such as allergen preferences) for purposes other than those permitted for providing the Service you request.
Your state privacy rights. Residents of other U.S. states may have similar rights under applicable state law. To exercise any U.S. state privacy right, or to appeal a decision on a request, email us with “Privacy request — US” in the subject line and tell us which state you live in. We will not discriminate against you for exercising privacy rights.
U.S. privacy contact: hello@gettadka.app.
Children’s privacy
Tadka is built for families and home cooks, but it is directed at parents and guardians — not at children under 13 acting on their own.
We do not knowingly collect personal information directly from children under 13. If you believe a child under 13 has provided personal information without appropriate parental consent, contact us and we will take steps to delete it.
Changes to this Policy
We may update this Privacy Policy from time to time. We will post the updated version in the app and at gettadka.app/privacy and revise the “Last updated” date.
If changes are material, we will provide additional notice as required by law (for example, in-app notice or email where appropriate).
Contact
Privacy and data-rights requests: hello@gettadka.app.
Please include enough detail for us to verify and fulfill your request (for example, the email on your Tadka account and the nature of your request).