Privacy Policy

Last updated: September 2, 2026

Overview

Braai ("we", "our", "us") operates the website braai.ai and the Braai BBQ Planner. This Privacy Policy explains how we collect, use, and protect your information.

Information We Collect

Account Information

We collect your email address for authentication and account recovery, your display name for personalization, and your self-reported experience level to tailor AI-generated cooking advice to your skill level. This information is stored securely in our database hosted by Supabase.

Cook Data

When you use the cook planning and tracking features, we store your cook plans, temperature logs, and timeline data to provide you with a personalized experience.

Cook Support Access

One designated Braai support operator can use Braai's protected cook support page to help with a cook. The operator can see only the selected user's cooks, timelines, temperature logs, and support chat. The operator cannot see account credentials, billing, security settings, profile preferences, equipment, probes, media, shares, or normal chat history.

Each support session is short-lived. We record the operator, the affected cook, the action, the outcome, and server timestamps. We send support chat text directly to OpenAI to generate cook advice. The cook support page does not load product analytics, session replay, advertising scripts, or consumer error-reporting tools.

ChatGPT Application

When you use Braai as a ChatGPT or MCP app, ChatGPT sends your tool inputs to our MCP server. These inputs can include protein, grill, serve time, temperature, BBQ questions, and a saved cook ID. The server can query Supabase and OpenAI to produce a response. Draft timelines and unsaved trackers stay in the current conversation. They are not saved to your Braai account and cannot be retrieved later. If you connect your account, the app can read or change your saved cooks only for the tool action that you request.

We do not require full conversation transcripts, and we do not store raw user prompts in application logs. We can keep credential-safe operational records such as the tool name, outcome category, and timing. These records do not contain bearer credentials or raw prompts.

Web Plate Previews

The Braai web app can generate a plate preview from details that you provide. This is a web-only feature. It is not a ChatGPT or MCP tool. The web app sends the details to Google Gemini, stores the generated image in Supabase Storage, and returns an image URL. If you are signed in, the web app can store a render record in your account so you can find the image later.

Analytics & Session Replay

We use PostHog for product analytics, Google Analytics (GA4) for website traffic analysis, and Vercel Analytics and Speed Insights for pageview tracking and Web Vitals performance monitoring to understand how users interact with braai.ai. This includes page views, feature usage, performance metrics (such as page load times and interaction responsiveness), and anonymized interaction data. Vercel Analytics is cookie-free and GDPR-compliant by default. We also use session replay (via PostHog) to record anonymized replays of user interactions (clicks, scrolls, and page navigation) to identify usability issues. Sensitive fields such as passwords are automatically masked in recordings. PostHog and Google Analytics may set cookies or use local storage to track sessions across page visits. Vercel Analytics is cookie-free by default. Analytics data is stored in the United States and is used solely for product improvement. We also use UTM parameters to understand how users discover braai.ai (e.g., from the ChatGPT app, social media, or blog posts).

These analytics and session replay tools do not run on the cook support page.

You can opt out of analytics tracking at any time from your Settings page under the Privacy tab.

Third-Party Services

We use the following third-party services:

  • Supabase — Database hosting, authentication, and serverless functions. See Supabase Privacy Policy.
  • OpenAI — Powers our AI-generated cook timelines and BBQ advice. See OpenAI Privacy Policy.
  • Google Gemini — Powers plate preview images in the web app. The MCP and ChatGPT tools do not use this feature. See Google Privacy Policy.
  • Vercel — Frontend hosting, pageview analytics, and performance monitoring (Speed Insights). See Vercel Privacy Policy.
  • Polar — Subscription and payment processing. See Polar Privacy Policy.
  • PostHog — Product analytics and feature usage tracking. See PostHog Privacy Policy.
  • Google Analytics — Website traffic analysis and acquisition reporting. See Google Privacy Policy.
  • Ghost — Newsletter delivery for The Friday Fire weekly email. When you subscribe to our newsletter, your email address is shared with Ghost for email delivery and subscriber management. See Ghost Privacy Policy.

Data Security

We use industry-standard security measures including encrypted connections (HTTPS), row-level security policies in our database, and secure authentication via Supabase Auth. We do not sell your personal data to third parties.

Data Retention

Cook plans, temperature logs, and account data are retained for the lifetime of your account. Self-service account deletion permanently removes your Braai Auth identity, user-owned database records, and user-owned stored images after the deletion checks finish. Linkable PostHog people, events, and recordings are also removed or irreversibly de-linked. We may retain non-linkable aggregate analytics for up to 12 months and minimal keyed operational records needed to prevent a deleted billing identity from being recreated. Conversation-only MCP results are not stored in a Braai account. Cooks and temperature readings that you save through an authenticated MCP tool follow the same retention rules as data saved in the web app. Web plate preview images are retained to keep returned image URLs working. Authenticated users can request deletion of saved web plate preview images with their account data. Anonymous users can contact us with the image URL to request deletion.

Cook support chat content is removed after 30 days. We retain deidentified support security audit records for up to 365 days. If either account is deleted sooner, we remove support chat content and direct account references while keeping the deidentified security record for the rest of its retention period.

Deleting Braai cancels active recurring Polar subscriptions before Braai data is removed. Polar may retain payment records under its own legal obligations. Braai deletion does not unsubscribe you from The Friday Fire in Ghost because that is a separate newsletter choice; use the unsubscribe link in any newsletter email.

Children's Privacy

Braai is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us at hello@braai.ai and we will delete it.

Your Rights

You can manage your email, password, sessions, and self-service account deletion from your Account settings. If you cannot access your account or deletion needs support, contact us at hello@braai.ai.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

Contact

If you have questions about this Privacy Policy, contact us at hello@braai.ai.