Privacy Policy

Operator and scope

This Privacy Policy is provided by Nihil-o LLC (“Company,” “we,” “us,” or “our”) and applies to the Scroll-To-Stove application, the website at https://scrolltostove.com, and any related features and services that reference this Policy (collectively, the “Services”). This Policy describes how the Company collects, uses, discloses, and protects information through the Services. It is effective as of 2026-07-01 and applies to information collected through the Services from that date forward. By using the Services, each user acknowledges that personal information will be handled as described in this Policy.

Information collected

An account identifier created automatically on first launch and linked to the user’s App Store account — no email address, password, or username is collected; recipes, ingredients, images, collections, carts, and order history; links submitted and the page content used to extract recipes; subscription status and purchase history; selected grocery store and approximate location, used to find nearby stores for checkout; device identifier, device model, OS version, and app version; usage events, diagnostics, and session recordings. Payment card details are never collected by the Company; they are handled by the purchase platform or payment processor completing the transaction. Limited hashed events are shared with our advertising-measurement provider. Contacts are not collected.

Information is provided directly when a user first launches the app, saves or imports recipes, or places an order. The Services automatically record device, usage, and diagnostic data. Our providers return payment and subscription status and store products for submitted ingredients.

Use of information

The Company uses collected information to operate user accounts and the Services’ features, process imported recipes, handle subscriptions and prevent fraud, find nearby stores and build grocery carts at the user’s selected store, measure its advertising, improve the Services, comply with legal obligations, and respond to support and privacy requests.

Disclosure to providers

The Company discloses personal information to the providers that operate the Services: cloud hosting, authentication, and database providers; payment and subscription processors; a grocery-commerce integration partner; a content-processing provider; and analytics and advertising-measurement providers. These providers receive personal information to host and operate the Services, authenticate users, process imported recipes, process payments and subscriptions, build grocery carts at the user’s selected store, analyze and improve the Services, measure the Company’s advertising, and comply with legal obligations. The Company may also disclose information where required by law or to protect the Services, its rights, and its users.

Advertising and analytics

The Company does not sell personal information. Limited hashed events are shared with its advertising-measurement provider solely to measure its advertising; this sharing is described in this Policy and accepted as part of the terms of service. The Company uses analytics to understand usage and improve the Services. Rights required by applicable law are honored as described in the Privacy rights section.

Cookies and embedded tools

The app sets no cookies. Embedded provider tools support authentication, analytics (an app-generated device identifier, usage events, and session recordings), subscription entitlements, and advertising measurement and attribution (hashed events; the device advertising identifier only with system permission). Payment transactions are completed through the purchase platform or payment processor, under that provider’s own policies.

User choices

Users may edit or delete their content in the app and may delete their account in Settings, which permanently removes their personal information. Device settings govern the app’s access to location, notifications, and the advertising identifier. Data practices are otherwise uniform for all users and are accepted as part of the terms of service.

Privacy rights

The Company honors requests to access, correct, and delete personal information, and any other rights required by applicable law. Account deletion is available directly in the app’s Settings. Other requests are submitted by email, verified using information associated with the account, and answered within legally required timeframes. Authorized agents may submit requests where applicable law permits, with sufficient proof of authorization. The Company does not discriminate against users for exercising applicable privacy rights.

Retention

Personal information is retained while an account is active and deleted when the account is deleted; content is retained de-identified. Failed imports are deleted immediately. The payment and subscription processors retain records as legally required, and providers delete data under their own policies after the Company’s agreements end. Analytics are retained only as long as needed; backups are deleted on standard schedules.

Security

Personal information is encrypted in transit and at rest, payment card data is handled exclusively by the purchase platform or payment processor, and the Company uses administrative and technical safeguards appropriate to the information it processes.

Age requirement

The Services are for users who are at least 16 years old.

Processing location

Personal information is processed and stored in the United States by the Company’s cloud providers. Providers process information in their own locations, which may be outside the user’s state or country and subject to different data protection laws. By using the Services, each user understands that personal information may be transferred, stored, and processed as described in this Policy.

Changes to this policy

Updated versions are posted with a revised effective date. For material changes, the Company notifies users by an in-app notice before the changes take effect. Continued use of the Services after the effective date constitutes acceptance.

Contact and governing law

Users may contact Nihil-o LLC regarding this Policy, including privacy rights requests, at privacy@scrolltostove.com. This Policy and any dispute relating to information handled through the Services are governed by the laws of Louisiana, without regard to its conflict-of-laws principles.