GelatoLab Privacy

Website and product analytics

The GelatoLab marketing website uses our self-hosted Umami service to count anonymous page visits and selected link clicks. Umami does not use cookies, identify you, or track you across websites. Link-click events record only the page section and destination so we can understand which GelatoLab entry points are useful.

This product app uses separate Umami and PostHog browser analytics. They load only after you choose Accept all. Choosing Necessary only keeps browser pageview and feature-usage tracking off.

Separately, the app server sends PostHog account and organization IDs, plan and subscription status, record IDs, and selected action codes for account, recipe activity, and Community activity. Background checks also send organization type, synthetic delivery-health signals, and aggregate weekly-roundup preparation, send, skip, and failure counts. This limited operational reporting runs independently of your browser choice so we can monitor product, commercial, and reporting health. It does not send email addresses, recipe text, ingredient names, private notes, uploaded files, or search terms.

Your recipes are yours

Recipes are the heart of GelatoLab and we treat them as your intellectual property. We do not sell your recipes, license them to third parties, use their content to train AI models, or use private recipe content for advertising or marketing.

New recipes default to private. A private recipe is visible only to members of your organization. You can choose to share an individual recipe via a private share link, or — if your organization profile is public — publish a recipe to your public org page. These are explicit, opt-in actions; nothing about your recipes becomes visible to anyone outside your organization until you take one.

When you fork a public recipe from another GelatoLab user, your fork is created as a private recipe in your organization. The original author's organization name remains attached to the fork as attribution.

If you opt in to the weekly recipe roundup, an automated process may select recipes that are already public, approved, and published by a public organization. Selection uses the first publication date and recent public reviews and linked Community discussion. It never includes private, unapproved, or image-less recipes, and every subscriber receives the same roundup.

Optional email

The weekly recipe roundup is optional and off by default. You can select it during signup and confirm after verifying your email, or opt in later in Settings. You can opt out in Settings or use the unsubscribe link in any roundup. Resend Contacts, the dedicated roundup Segment, and the roundup Topic record the subscription state and apply global and topic-specific unsubscribes.

AI features and how recipe data is processed

GelatoLab uses OpenAI's API to power several features: AI recipe generation, the cooking assistant in the making flow, recipe import from URLs or photographed notes, and the semantic search index that makes recipes discoverable inside the app.

When you use any of these features — or on a periodic background job that keeps your search index up to date — the relevant recipe text (name, description, ingredients, steps, notes) is sent to OpenAI's API. When you choose photo import, the uploaded image is sent to OpenAI for transcription and is not retained by GelatoLab after analysis. We have configured our OpenAI account so that submitted data is not used to train OpenAI's models. Under OpenAI's API data policy, this data is retained by OpenAI for up to 30 days for abuse monitoring and then deleted.

GelatoLab itself does not train any AI models on your recipes.

Additional services GelatoLab uses

In addition to the services listed in the Turnstone Tech privacy policy, GelatoLab uses:

All of these services process data in the United States.

Who at GelatoLab can see your recipes

We want to be straightforward about this: your recipes are stored in our database, and a small number of authorized GelatoLab staff can technically access that database. We do so only when necessary to:

• provide technical support that you've requested,
• investigate a security incident, suspected abuse, or a bug,
• comply with a valid legal request (such as a subpoena or court order),
• or migrate, back up, or restore data for service continuity.

We do not browse or read private recipes for marketing, advertising, model training, or any commercial purpose unrelated to operating the service. The optional weekly roundup uses only the limited, automated public-recipe selection described above.

Updates and contact

If we change how GelatoLab handles your data — for example, by adding a new AI feature or a new third-party service that processes your recipes — we'll update this page and, where appropriate, notify you before the change takes effect.

Questions about your data, or want to exercise the rights described in the Turnstone Tech Privacy Policy? Email hello@getgelatolab.com.