Last updated: 20 July 2026
Koji (koji.kitchen) is operated from Australia. Data ownership is a design principle of the product, and this policy follows from it: we collect what the service needs to work, and we don’t sell your personal data. Contact for anything privacy-related: hello@koji.kitchen.
To run the service. AI features (the assistant, recipe import, meal-plan generation) send the relevant parts of your data to a third-party AI provider to generate responses. When you give feedback on an AI suggestion, we use that feedback — together with a copy of what the AI said — to review the quality of these AI features and improve them. We use your email address to send you service-related communications — things like account and security notices, billing, and important updates about the product. We don’t sell your personal data.
Improving pairing recommendations.When you rate a drink pairing (for example “loved it”, or noting what you actually poured), we store that feedback against your account and use it to improve the suggestions we make to you. Where you tell us what you drank, we may classify it — for example identifying it as a smoky whisky or an off-dry Riesling — to understand which flavours you enjoy. The lawful basis for this is our legitimate interest in improving the service (and, for the personalisation of your own recommendations, the performance of our contract with you).
What we never do with sensitive information. Any information that could reveal your health (such as an allergy) or your religious or philosophical beliefs (such as a Halal, kosher or belief-based vegan diet) is used only to personalise your own experience, under the separate explicit consent you give when you add dietary information. It is never included in any shared or published statistics, and it is never sold.
Anonymous, aggregated insights.We produce aggregated statistics about which drinks and dishes go well together — for example “these two flavours are frequently rated highly together”. These aggregates contain no information that identifies you: figures are grouped so that each one reflects enough different people that it cannot be traced back to any individual, small groups are suppressed, and sensitive information (above) is excluded before aggregation. Because this information is anonymous and cannot be linked back to you, it falls outside data-protection law, and we may share or publish it — for example in a conference talk, blog post or research article. We do not sell it.
Free-text notes you leave are stored with your account and used only to improve your own recommendations. Please don’t include health details or other sensitive information in notes; where we use notes to improve our shared insights, we do so only after automatically extracting non-sensitive, general descriptions and discarding the original text.
We rely on a small set of trusted service providers, each acting only on our instructions, in these categories:
Our full list of named sub-processors, and the safeguards for any overseas transfers, is available on request — email hello@koji.kitchen.
Nothing, unless you share it. Share links make the linked recipe, plan, or list visible to anyone with the URL. Household groups see only the items you (or your auto-share settings) put into the group.
You can export all of your data (Settings → Data) and delete your account at any time; deletion removes your personal data and anonymises residual usage records. You have rights of access and correction under the Australian Privacy Act 1988 (including the Australian Privacy Principles), and if you’re in the EEA or UK, the equivalent GDPR rights — including portability, which the export feature exists to honour. Complaints can go to us first, or to the Office of the Australian Information Commissioner (OAIC).
Visiting koji.kitchen sets no cookies at all. Signing in sets the session cookies needed to keep you signed in — strictly necessary, nothing else. Our analytics are cookieless and aggregate, and there is no cross-site tracking of any kind. This is why you won’t see a cookie banner here.
We keep your account and food data for as long as your account is active. When you delete your account we remove your personal data and anonymise any residual usage records, so what remains can’t be tied back to you. We also de-identify usage and AI-activity logs after 24 months — the records stay for aggregate analytics but can no longer be linked to you. Files you upload for recipe import are deleted within about 48 hours of processing. Billing records are kept as long as financial and tax rules require, and backups age out on a rolling cycle.
If this policy changes materially we’ll email account holders before the change takes effect. This policy was last updated on 20 July 2026.