Privacy Policy

Account: your email address and an encrypted password (or the identifier your OAuth provider returns).

Content you create: recipe video links you paste, the extracted recipes, cookbooks, personal notes, shopping list, and language preference.

Usage: simple counters (extraction count, plan tier, timestamps) so we can enforce plan limits and improve the product. We do not build advertising profiles.

Billing: if you subscribe, Paddle collects billing data (name, address for tax, card details) on our behalf. We only receive subscription status, plan, and country — not your card number.

To provide the Service (auth, recipe extraction, storage, translation, shopping list).

To enforce plan limits and prevent abuse.

To communicate essential service messages (password reset, billing receipts, material changes to these terms).

Legal bases (GDPR Art. 6): performance of contract for the core Service; legitimate interests for abuse prevention; consent for optional cookies or marketing where required.

All application data (accounts, recipes, notes, shopping list) is hosted with our backend provider on infrastructure located in the European Union.

Payment data is handled by Paddle in accordance with its own privacy policy (paddle.com/legal/privacy).

AI extraction sends the video URL and any metadata needed to produce the recipe to our AI model provider(s). We minimise what is sent and do not include personal identifiers.

We do not sell personal data. We share data only with the processors we need to run the Service: our backend/hosting provider, our AI model provider(s), our email sender for transactional messages, and Paddle for payments. Each is bound by a data processing agreement.

Account data is retained until you delete your account. When you delete, your recipes, cookbooks, notes, shopping list and profile are removed immediately. Backups roll over within 30 days.

Billing records that Paddle is legally required to keep (e.g. invoices) are retained by Paddle under its own retention rules.

Under GDPR you have the right to access, rectify, erase, port, restrict processing, and object. You also have the right to lodge a complaint with your local data protection authority.

To exercise any right, write to hello@recipeek.app from the address on your account, or use the “Delete account” button in Settings for immediate erasure.

We use a small number of first-party cookies / local storage entries strictly necessary to keep you signed in and to remember your language preference. No advertising cookies.

Data is encrypted in transit (TLS) and at rest by our infrastructure provider. Passwords are hashed. Access to production data is limited to the smallest team required and logged.

If we make material changes we'll email account holders and update the date above. Continued use after the effective date constitutes acceptance.

Privacy questions, requests, or complaints: hello@recipeek.app.