Privacy Policy

Last Updated: October 17, 2026

Who We Are

Gusteau is a personal AI chef: the website at trygusteau.com and the app at gusteau.ar0.eu, both made and run by Wyzie LLC, a North Carolina limited liability company (wyzie.io). In this policy, "Gusteau", "Wyzie", "we" and "us" mean Wyzie LLC. We decide what is kept about you and why, so we're the ones responsible for it. If you have a question about your data, write to support@trygusteau.com.

What We Keep

Your Account

• Your name and email address, so you can sign in and we can send you sign-in codes and important account messages.
• Your password, stored only in a scrambled (hashed) form. We can't read it, and we never ask you for it by email.
• Google sign-in, if you use it. Google tells us your name, your email address and an ID for your Google account. We never see your Google password.
• When you last signed in, so we can find accounts that were left behind and delete them (see Keeping and Deleting Your Data).
• Where you're signed in: for each sign-in, the kind of browser and device (like "Safari on iPhone"), the rough place it came from (a city and country Cloudflare works out from the connection, never your IP address itself), how you signed in, and when it was last used. You see this list on your Dashboard and can sign any device out. We also remember, in scrambled form, which browsers you've used, so we can email you when a new one signs in, and the time zone your last sign-in came from, so dates in our emails fall on your own day.
• Your plan and usage: when your trial started, whether you subscribe, and how many recipes, chats, photos and ideas you've used, so we can apply your plan's allowances and fair use.
• A code for your card, if you add one to start the free trial. Stripe makes a one-way code for each card (never the card number) and tells us if it is prepaid. We keep the code, and the ID of the account that used it, so one card can't start many free trials. We keep it after you delete your account, for as long as it is needed to stop abuse.

Your Cooking

• The recipes Gusteau writes for you and the ones you save, change, rate or cook.
• Your Plan, Shopping List, Kitchen (pantry), cook log and settings such as how many you cook for and your diet.
• What Gusteau Knows: the tastes and notes you've shared so he can cook the way you like. You can see and change these in the app at any time.
• The recipes you give a heart to, so each recipe's count is right and you can take yours back. Others see only the count, never who gave them.
• Recipe Boards you make or join, the people on them and their roles, and the recipes on them.
• Your family, if you're on a family plan: its name, who is in it and since when, and invitations the owner has sent (the email address invited, kept until the invite is used, canceled or expires after 14 days).
• Dish pictures Gusteau draws for your recipes.
• The rough nutrition estimate Gusteau works out for a recipe, kept with the recipe.
• On your Plan, the time you want to eat a meal and, when you plan to a budget, the budget, how many people it feeds and Gusteau's rough guess at what each meal costs.
• If you turn on Email Me When to Start: when to email you for each planned meal that has a time, the meal's name and a link to its recipe, your time zone and whether your clock is 12 or 24 hour, so the email arrives at the right moment and says the time your way. It is deleted when you switch reminders off, about a day after each reminder's time, or with your account.
• On a shared family shopping list or pantry, the first name of whoever last changed each item (so the family sees "Sam got milk"), and a note of items taken off, kept for 45 days so a device that was offline can't bring them back.

When you're signed in, this is saved to your account so it follows you to every device. Some of it is also kept on your device (in your browser's storage) so the app works quickly and keeps working without a connection.

Allergies, Diets and Health

Some of what you tell Gusteau can say something about your health: allergies and intolerances, a diet you follow for medical or religious reasons, or a goal like eating less salt. Some laws (such as Washington's My Health My Data Act) call this consumer health data. We collect it only when you choose to tell us, and use it only to cook for you: to leave things out of your recipes, plans and lists and to suit them to you. We never sell it, never use it for ads, and share it only with the providers below that need it to answer you (mainly our AI provider) and, if you join a family plan, with your family, who see the diet in your settings so shared meals suit everyone. You can see, change or delete it any time in What Gusteau Knows and your settings, or delete everything from your Dashboard, and you can ask us to stop using it. Our Consumer Health Data Notice says all of this in the form Washington's and Nevada's laws ask for.

Photos and Links You Send

When you show Gusteau a photo (a dish, your fridge, a receipt, a cookbook page or a recipe card) or paste a link, we send it to our AI provider to understand it and answer you. We don't add your photos to your account or show them to anyone else. So nothing is lost if the page reloads or closes while Gusteau works, what you asked (photos included) and his answer wait on our servers for up to a day, then are deleted automatically.

Hands-Free and Timers

Hands-Free in Cook Mode is off until you turn it on, and the microphone is only open while it is on. It uses the speech recognition built into your browser or device to turn what you say into words. Depending on the browser, your voice may be sent to the browser maker's speech service to do that (Chrome, for example, uses Google's); that happens under their privacy policy. Gusteau never receives or keeps your voice: only the words reach the app, on your device, where they are used as commands and then forgotten. When Gusteau reads a step or calls out a timer, your device's own voice does it. Timer names and when they end are kept on your device only.

Sending Your List to a Store

If you choose Send to Store, we send the items you haven't ticked off (their names and amounts) to the store you pick, so it can build your cart. For Instacart, that is all we send; Instacart makes a shopping page from it that you open on their site. For Kroger, we also send the zip code you type, to find your nearest store, and you sign in to Kroger on Kroger's own site to let us add the items to your Kroger cart. We use that permission once, straight away, and don't keep it; the matched products wait on our servers for up to 15 minutes while you sign in, then are deleted. What you do on the store's site is covered by its own privacy policy.

Gifts and Referrals

If you buy a gift of Gusteau Pro, we keep the order: who bought it, the length (a month or a year), the name you sign it with, your note, the email of the person it's for (if you give one) and the day to send it, what was paid, and whether it has been opened and by whom. We email the person at that address once, on the day you chose, and only because you asked us to. Anyone with the gift link can see who it's from, your note and its length, so share it only with the person it's for. If you open a gift, we keep when your Pro runs until and who gave it.

Every account has a Refer a Friend link. Anyone who opens it sees your first name, never your full name or email. When a friend joins through it, we note who referred whom and, to know when your reward is covered, how much the friend has paid and roughly what their use has cost us, until your reward is given. Your Dashboard shows how many friends joined and how many months you've earned, never what they paid. To stop one card earning rewards over and over, we keep a scrambled code for the card that earned one (like the free trial's card code, below).

When You Write or Call

Messages you send to support, by email or with the form on the Support page, arrive in our mailbox. When you use the form signed in, we attach your name, account ID, plan, billing status and its dates, your Stripe customer ID, when you signed up and last used Gusteau, how you sign in, how many recipes you've saved and how much of this month's allowances you've used, so you don't have to explain. Signed in or not, we also attach the kind of browser you're using, its language and time zone, the rough place Cloudflare guesses from your connection, the page you wrote from and which version of the site it was. Each message gets a short reference number so we can find it again. We keep these messages as long as we need them to help you and to keep a record of what we agreed. When you call our support line, we see your phone number and hear what you tell us; we use them only to help you, and may keep a short note of the call for the same reasons.

To help you, the people who run Gusteau can open your account on a private admin page. It shows your name and email, how you sign in, your plan and billing status and dates, your Stripe customer ID, how much of your allowances you've used, which devices are signed in, your family, and gifts you bought. It doesn't show your password (we keep only a scrambled form of it), your card (we never get the number), or your recipes, pantry and lists. From it we can give a plan, start a free week, sign you out everywhere, change the email on an account whose owner lost their inbox, suspend an account that breaks the rules, or delete it when you ask.

Today a person reads and answers every message. If we add an AI assistant to help answer support, it would read your message and the details attached to it, send the parts it needs to xAI to draft a reply, and keep its conversations and drafts for up to 30 days; a person stays responsible and you can always ask for one. The Support Assistant page explains it, and we'll update it and the Support page when it starts.

Payments

Payments are handled by Stripe. Your card details go straight to Stripe; we never see or store your full card number. You add a card on our own card form on your Dashboard: to start the free trial, to pay for a plan or a gift, or to change your card on the Manage Billing page. The card number, expiry date and security code are typed into small fields that Stripe serves inside that form, so they go to Stripe and not to us. The country and ZIP or postal code you enter there go to Stripe with the card, which uses them to accept it and to check for fraud; we receive only an ID for the card, its brand, last four digits and expiry, and whether it is prepaid. Manage Billing shows your card's brand, last four digits and expiry and your invoices, read from Stripe each time you open it; we don't keep a copy. We keep a Stripe customer ID and the state of your subscription (for example, in the free trial, active, renewing on a date, or canceled). When you start the free trial, you add your card on the billing page of your Dashboard, and Stripe charges it when Gusteau Starter starts, billed monthly, after the 7 days (14 when a friend's link gave you two free weeks), or right away if you pick a plan during the trial, unless you cancel. A gift you buy is a one-time payment through Stripe in the same way, and a gift or a referral reward that becomes a credit is kept by Stripe as a balance on your Stripe customer record. Where sales tax or VAT applies, Stripe works it out from the country and ZIP or postal code you gave with your card, and keeps them with your payment details. Stripe also checks each payment for fraud, using details of the card and the device and network it comes from, and may ask your bank to confirm it's you (3D Secure); that happens under Stripe's own privacy policy, and we only see whether the payment went through.

Technical Basics

Like any website, our servers see your IP address and basic details about your browser when you visit. We use them to keep the service running and safe, for example to slow down someone trying lots of passwords, or making many accounts from one network. For that we count tries and new accounts per network address for up to a day, and we keep only a scrambled form of the address. We don't use them to build a profile of you.

Error reports. When something breaks, on our servers or in the app in your browser, a short report goes to Sentry so we can fix it: the error message and where in our code it happened, the page or feature, and the kind of browser and device. We don't put your name, email, IP address or what you cook in these reports.

Visit counts. We use Cloudflare Web Analytics to see how many people visit, which pages they open, which site sent them, and how fast the pages load, by country and kind of browser. It uses no cookies, doesn't follow you around the web, and doesn't tell us who you are.

Emails We Send

We email you only about your account, from noreply@trygusteau.com: sign-in codes, a welcome message, a note when your password changes or a new device signs in, trial and subscription notices (your free trial starting, one hello partway through it with an idea to try, the trial ending soon or canceled, a yearly plan about to renew, once a year on a monthly plan a reminder of what it costs and how to cancel, a payment that failed, a plan that ended), family plan notices (an invitation you send, someone joining or leaving your family, a family ending), a warning if your account has been left unused for a long time, and a confirmation when you delete your account. They're part of running your account, so you can't turn them off while you have one. Cooking reminders are different: we send them only if you switch on Email Me When to Start on your Plan, and switching it off there stops them. Gifts and referrals send a few more, only when they happen: a receipt when you buy a gift, a note before a gift you were given ends and when it has ended, and a note when a friend's referral earns you a free month.

When someone buys you a gift, we send one email to the address they gave us, on the day they chose. If you never open it, we don't email you again.

When a family owner invites you, we send one invitation email to the address they gave us, at their request. If you don't join, we don't email you again, and the invite is deleted after 14 days.

We send cooking tips and news only if you opt in, with an unticked box when you sign up or a switch in your Dashboard. Each one has an Unsubscribe link, and you can switch it off in your Dashboard any time. Our emails have no tracking pixels and no tracked links. Replies go to support@trygusteau.com.

How We Use It

• To run Gusteau: write your recipes, plan your week, remember your tastes and sync your devices.
• To sign you in, keep your account secure and stop abuse.
• To bill your subscription, apply the trial limits, and keep the free trial to one for each person and card.
• To send the emails you ask for, like a cooking reminder or a gift on the day you chose.
• To run gifts and Refer a Friend: open a gift for the right person, and know when a referral reward is earned and that it isn't earned twice.
• To answer you when you write to us.

We don't sell your data. We don't show ads, and we don't share your information with advertisers. We don't use your recipes, messages, photos or tastes to train AI models.

Who Helps Us Run It

A few companies process data for us, only to provide their part of the service:

• xAI, our AI provider. To write and change recipes, suggest ideas, plan your week (with your budget and how many it feeds, if you give them), read photos, estimate nutrition and draw dish pictures, we send xAI what's needed for that request: your message, photos you attach, the recipe in question, and the tastes and kitchen details Gusteau uses to suit you. Under xAI's terms for API customers, xAI doesn't train its models on what we send, and keeps requests and answers for up to 30 days to check for abuse, then deletes them.
• Tavily, a web search service. When you paste a recipe link, or Gusteau looks something up to get a recipe right, the link or search words are sent to Tavily to fetch the page or results. We keep the results for a while (a fetched page for a day, a search for up to a week), filed by the link or the words and never by who asked, so the same search isn't paid for twice.
• Cloudflare, which hosts the website and app, stores your account data, and counts visits (Cloudflare Web Analytics, with no cookies).
• Sentry, which receives error reports when something breaks, as described above, so we can fix it.
• Stripe, for payments, subscriptions and fraud checks on payments.
• Cloudflare Turnstile, a quiet check that you are a person when you ask for a sign-in code. It runs in your browser and sends Cloudflare your IP address and some details about your browser to decide; Gusteau doesn't use it for anything else.
• Google, only if you choose to sign in with Google.
• Instacart and Kroger, only if you choose to send your shopping list to one of them, as described above.
• Resend, our email provider, which delivers sign-in codes and account emails from noreply@trygusteau.com.
• Purelymail, our mailbox provider, which holds the emails you send to us at hey@, support@ and noreply@trygusteau.com.

We may also share information if the law requires it, or to protect people from harm.

What Others Can See

Nothing you make is public unless you share it. A recipe you share by link can be opened by anyone who has that link, and when the link is pasted into a chat or a post, its title, description and photo show in the preview. When you share a recipe with Let Anyone Find It switched on (it's off unless you turn it on), the recipe (its title, description, ingredients, steps, nutrition estimate and photo) is public: search engines such as Google and Bing may list it and show it in their results. It never shows your name or email. You can switch it off from the same Share sheet at any time; we take it out of our list for search engines straight away, and search engines drop it the next time they look, which can take a few days or weeks. A Recipe Board is private until you invite people or turn on link access, and then those people can see it, with the role you gave them.

On a family plan, everyone in the family sees your name, the email you signed up with and the diet in your settings (so family meals suit everyone, allergies included), and everyone can see and change the shared pantry, week plan, shopping list and Family Recipes board, and sees who last changed an item on the list. Your own saved recipes, chats and what Gusteau knows about you aren't shared with the family. The owner pays for the family and can remove members; members can leave any time.

Cookies

The Cookie Policy lists each one in detail. In short: we use two cookies, plus three that are set only while you use what needs them. All of them are needed for what you asked for, so there's nothing to agree to and no banner, and none can be read by scripts on the page. gs_session keeps you signed in, for up to 30 days. gs_device is a random code that remembers this browser between sign-ins, so we can tell you when a device we haven't seen signs in to your account; it lasts up to 400 days and means nothing on its own. If you open a friend's Refer a Friend link, the website also sets gs_ref for up to 30 days, holding their link's code and when you opened it, so your two free weeks and their reward can be matched up when you start. If you send a list to Kroger, the app sets gs_grocery for up to 15 minutes to finish the hand-off. If you choose Sign In with Google, gs_oauth holds a random code for up to 10 minutes, so only you can finish that sign-in. The website (trygusteau.com) and the app (gusteau.ar0.eu) each set their own pair. When you go from one to the other while signed in, a one-time link that works for 60 seconds signs you in there too. There are no advertising or tracking cookies, and no analytics cookies. If you press Update Card on Manage Billing, Stripe's card form also sets two cookies of Stripe's own, for fraud prevention; the Cookie Policy names them.

The app also keeps some things in your browser's own storage (your recipes, lists and settings on that device, a key that identifies your device on Recipe Boards, a note that you've opened Gusteau there before, so he greets you as a returning cook, and copies of the app's own pages and files, so it opens without a connection). The website and the app each keep two more things there: a copy of your name, email and plan while you're signed in, so the page shows you signed in straight away, and whether you've turned their sounds off. Clearing your browser's site data removes them from that device.

Your Rights

Wherever you live, you can ask us to:

• show you what we hold about you, and give you a copy you can take elsewhere (the Download My Data button on your Dashboard does it in one tap: your account, plan, usage, saved cooking, family, gifts, referrals, reminders, hearts, shared links and signed-in devices; Recipe Boards stay on the board, where you can open them);
• correct anything that's wrong (you can also change your name, password and kitchen details in the app yourself);
• delete your data (your Dashboard does it in one step);
• stop a use of your data you don't agree with, or take back a permission you gave.

If you live in the European Economic Area, the United Kingdom, or a US state with a privacy law (such as California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, Nevada, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia or Washington), you have these rights by law too, and you can complain to your local privacy regulator. To protect your account, we confirm a request comes from you, usually by asking you to write from the email on your account. Someone you authorize can ask for you, with your signed permission. If we turn a request down, we'll say why, and you can appeal by replying to us; if you're still unhappy after the appeal, you can contact your state's attorney general. Write to support@trygusteau.com from the email on your account, or use the form on the Support page while signed in. We'll answer within 30 days and won't treat you differently for asking.

We don't sell your personal information, we don't share it for cross-context behavioral advertising, and we don't use it for targeted advertising, as those words are used in California and other state laws. Because we never do, a Global Privacy Control signal from your browser needs nothing more from us, and we treat it as a request not to. In those laws' terms, the kinds of information we collect are identifiers (name, email, account and device IDs), commercial information (your plan and payments), internet activity (how you use Gusteau), rough location (a city and country), sensitive information you choose to give (account sign-in, and allergies or diets), and inferences (your tastes, as What Gusteau Knows); each comes from you or your device, is used only for the purposes above, and is kept as described in Keeping and Deleting. We don't knowingly sell or share the information of anyone under 16. We don't make decisions about you by machine that have legal or similarly serious effects: Gusteau's AI writes recipes, and that's all it decides.

We use your information because it's needed to give you the service you asked for, because we have a real interest in keeping it secure and working, because the law asks us to (for example, tax records), or because you agreed.

Where Your Data Goes

Gusteau runs in the United States and on Cloudflare's global network, and the companies above are mostly based there. If you use Gusteau from elsewhere, your information is processed in those places. Where the law asks, we rely on standard safeguards for sending it across borders.

Keeping and Deleting Your Data

We keep your data while you have an account, so it's there when you come back. Sign-in sessions, and the device details that go with each, last up to 30 days (or until you sign that device out), sign-in codes 10 minutes, a request Gusteau is working on (with its answer) up to a day, and web search results (with no account attached) up to a week. Error reports are kept by Sentry for up to 90 days. A short note of each change someone on our team makes to an account (what was done, to which email address, and when) is kept for 90 days, even if the account is deleted in the meantime. If you don't have a paid plan and haven't signed in for two years, we email you a warning, and a month later we delete the account and everything saved to it. You can delete your account at any time from your Dashboard: you'll be asked to type your email to confirm. Deleting your account cancels any subscription and deletes your account and everything saved to it from our systems, including recipes you shared by link, dish pictures Gusteau drew for you, and boards you own (the people on them lose those boards too). Recipes you added to someone else's board stay on that board, since they're part of it.

The one thing that stays after deleting your account is the scrambled code for a card that started a free trial or earned a referral reward (see above), because deleting it would let someone start another trial or earn the same reward again. It identifies a card, not a person, and we use it for nothing else. A gift you paid for that hasn't been opened yet also stays, no longer linked to your account, so the person you gave it to can still use it; the name and note you signed it with stay on it. We also ask Stripe to delete your customer record (your name, email, billing address and saved cards). Stripe keeps the payments themselves as the law requires, for example for tax and fraud checks. You can also email support@trygusteau.com to ask for a copy of your data, to correct it, or to have it deleted.

Keeping It Safe

Connections to Gusteau are encrypted, passwords are hashed, and sign-in codes expire after 10 minutes. Only the few people who run Gusteau can reach account data, and only to run and support it. No system is perfect, so please use a password you don't use anywhere else. If a breach ever affects your information, we'll tell you and the authorities as the law requires.

Children

Gusteau is for adults and for families cooking together. Children under 13 may not make an account, and we don't knowingly collect their information; a parent can use Gusteau with them on the parent's account. Teens from 13 to 17 need a parent or guardian's agreement. If you think a child has given us their information, write to us and we'll delete it.

Changes to This Policy

If we change this policy, we'll update the date at the top. If the change matters, we'll tell you by email or in the app before it takes effect.

Contact

Questions or requests about your privacy: support@trygusteau.com. Business and legal matters: hey@trygusteau.com. You can also call 315-898-1257, 1 PM to 7 PM Eastern. We have no public mailing address. Gusteau is made and run by Wyzie LLC.

Gusteau is made and run by Wyzie LLC. Questions about this page: hey@trygusteau.com.