Privacy Policy

1. Data we collect

We process only the data necessary for the functioning of the Service and to provide you with a quality user experience.

1.1. Account data

• email address;
• password (we store only a cryptographic hash — the password is never stored in plaintext anywhere in our systems);
• name or nickname, interface language;
• profile photo (optional);
• Google or Apple account identifier — if you sign in through these providers.

1.2. Content you create in the App

• recipes, cooking steps, food photos, notes, ratings, and comments;
• shopping lists, fridge and pantry inventory;
• cooking history, favorite recipes, diet settings, allergen and taste preferences.

1.3. AI assistant (chat)

• texts of your queries and model responses — transmitted to the large language model (LLM) provider for processing;
• query context may include information about your products, diet, allergens, cooking history — to the extent you consciously provide it.

We do not share your AI chats with advertising networks and do not use them for targeted advertising.

1.4. Technical data

• IP address, OS type and version, device model, App version;
• language, time zone;
• unique installation identifier (not linked to the device advertising ID);
• crash logs and diagnostic events — to fix bugs.

1.5. Data we do NOT collect

• precise geolocation (GPS) — without explicit permission and a clear functional need;
• contacts, media gallery (except photos you explicitly choose);
• HealthKit / Google Fit data, biometric data;
• full payment details, bank card numbers — subscription payments are processed exclusively through Apple App Store and Google Play, which have their own privacy policies.

2. Purpose and legal basis for processing

We process personal data for the following purposes:

• Providing core functionality — account management, displaying and saving your content, cross-device synchronization, AI assistant operation.
• Service improvement — error analysis, aggregate behavioral analytics, testing new features. Where possible, data is anonymized.
• Security — detecting and preventing fraud, abuse, and unauthorized access attempts.
• Communication — important service messages (e.g., changes to this Policy, temporary outages), responses to your support requests.
• Legal compliance — responding to lawful requests from law enforcement and other authorized government bodies.

Legal bases for processing (under GDPR Art. 6 / Art. 11 of the Law of Ukraine "On Personal Data Protection"):

• performance of a contract with you regarding the provision of the Service (concluded by acceptance of this Policy and the Terms of Use);
• consent — where separate consent is required;
• legitimate interest — maintaining stability, security, and development of the Service;
• legal obligation.

3. Data sharing with third parties

We do not sell your personal data. We share it only with processors who help us provide the Service, in the minimum necessary scope, and only subject to appropriate data processing agreements.

Categories of recipients:

• cloud infrastructure providers (hosting, databases, CDN, DDoS protection);
• artificial intelligence (LLM) model providers — for the AI assistant;
• Google and Apple authentication services — if you use "Sign in with Google/Apple";
• error diagnostics and product analytics services;
• transactional email providers (registration confirmation, password reset);
• Apple App Store and Google Play — regarding subscriptions, reviews, updates;
• law enforcement and other government bodies — only based on a properly issued request.

Some processors may be located outside of Ukraine and the EU/EEA (including the US and other jurisdictions). By using the Service, you consent to cross-border transfer of your data, including to countries where the level of data protection may differ. Each processor is bound by contractual obligations regarding data security.

4. Retention and deletion

• Account data and your content — while your account is active, plus up to 90 days after deletion (in backups).
• AI chats — up to 12 months in system logs, for debugging, moderation, and model quality improvement. May be processed in anonymized form beyond this period.
• Technical logs and crash logs — up to 90 days.
• Data for legal compliance (accounting, tax, dispute-related) — for the periods required by Ukrainian law, which may exceed the general retention periods.

Account deletion: You may delete your account independently in the App settings or by sending a request to the address specified in the "Contacts" section. Deletion is performed within 30 calendar days of the request. After deletion, only anonymized aggregate data and legally required records may remain.

5. Your rights as a data subject

Under Ukrainian law and the GDPR, you have the right to:

• obtain information about the processing of your data and receive a copy;
• request correction of inaccurate or incomplete data;
• request deletion of your data ("right to be forgotten"), except where retention is required by law;
• restrict processing of your data;
• receive your data in a structured, machine-readable format (right to portability);
• object to processing based on our legitimate interest;
• withdraw previously given consent at any time (this does not affect the lawfulness of processing prior to withdrawal);
• file a complaint with the Ukrainian Parliamentary Commissioner for Human Rights (for Ukraine) or with the relevant supervisory authority in your country of residence (for EU/EEA).

To exercise any of these rights, send a request to the email listed in the "Contacts" section. We will respond within 30 calendar days. Before disclosing or deleting data, we may request additional information to verify your identity.

6. Cookies and local storage

In the App and on related web pages, we use only technical cookies and device local storage for:

• storing authentication tokens (so you do not have to sign in every time);
• storing interface settings — language, theme, onboarding state;
• temporary content caching to improve performance.

We do not use advertising cookies, third-party ad network trackers, or social media pixel trackers.

7. Data security

We implement technical and organizational measures to protect your data:

• all network communication is encrypted with TLS (HTTPS);
• passwords are stored as cryptographic hashes, not in plaintext;
• authentication tokens have limited validity periods;
• database access is restricted, logged, and regularly reviewed;
• we promptly install security updates to our infrastructure.

8. Age requirements

The Service is not intended for persons under 13 years of age. By registering, you confirm that you are at least 13 years old.

For users located in the European Union or European Economic Area (EU/EEA), the minimum age is 16 years, or 13-15 years with documented consent of a parent or legal guardian (in accordance with GDPR Art. 8 and the national legislation of the country of residence).

If we become aware that a user has not reached the minimum age, their account will be deleted without notice, and associated data will be erased, except data we are required to retain by law.

9. Disclaimer: food, health, and AI

9.1. Allergens and food intolerances

We do not guarantee the completeness, accuracy, or timeliness of ingredient lists and allergen information. Manufacturers change product compositions, users publish content with their own recipe variations, AI can and does make errors. You alone are solely and entirely responsible for verifying ingredients and finished dishes for the presence of allergens and intolerable components — by checking product packaging, contacting the manufacturer, or consulting a medical professional. If you have allergies, celiac disease, diabetes, phenylketonuria, are pregnant or breastfeeding, have chronic conditions, or any other medical condition — you must consult a physician before using any recipes from the Service.

9.2. Food safety

You bear full and sole responsibility for compliance with sanitary standards, proper thermal processing, temperature and time controls for storage, defrosting, use of clean utensils and equipment, and personal hygiene during food preparation. Temperatures and times indicated in the Service are not a guarantee of complete pathogen elimination or food safety. We expressly disclaim any responsibility for foodborne illness, contamination, or any adverse health effects resulting from food prepared using content from the Service.

9.3. AI assistant

The AI assistant generates responses based on machine learning models. Such models can and do hallucinate, fabricate facts, provide inaccurate, incomplete, misleading, outdated, or potentially dangerous recommendations, suggest non-existent products, make errors in calculations, temperatures, times, and medical considerations. AI-generated content may contain errors that could result in serious injury or death if relied upon without independent verification. Do not use AI responses as the sole or decisive source of information, especially regarding allergies, medical restrictions, infant and child feeding, food safety, or dietary recommendations. Always verify critical information with independent qualified sources.

9.4. Assumption of risks

9.5. No nutritional guarantees

Any nutritional information, calorie counts, macro- and micronutrient values, portion sizes, or dietary categorizations (e.g., "keto", "vegan", "gluten-free") displayed in the Service are estimates only and may be materially inaccurate. We make no warranty or representation regarding the accuracy of nutritional data. You must not rely on this information for medical, health, or dietary decisions without independent professional verification.

10. User-generated content

"User Content" — any materials you publish, upload, submit, or otherwise make available in the Service: recipes, photographs, notes, reviews, comments, support messages.

10.1. Your representations and warranties

By publishing User Content, you:

• confirm that you own all necessary rights to the Content or have direct permission from the rights holders;
• warrant that the Content does not infringe intellectual property rights, image rights, honor, dignity, or business reputation of any third parties;
• indemnify and hold harmless the Administrator from any claims, lawsuits, demands, and expenses (including legal fees) arising from your Content.

10.2. License to User Content

By publishing User Content, you grant the Administrator a free, perpetual, worldwide, non-exclusive, transferable, and sublicensable license to:

• store, reproduce, copy, adapt, translate, format, and abbreviate the Content;
• publicly display and distribute the Content within the Service and in related materials (App Store and Google Play screenshots, marketing publications, social media, demo materials).

This license is necessary for us to technically provide and promote the Service. You retain ownership of your rights. The license terminates after you delete the Content, with a reasonable period for removal from backups.

10.3. Prohibited Content

You must not publish Content that:

• violates the law, public morals, or third-party rights;
• contains harmful or potentially life-threatening instructions — for example, use of poisonous substances, unverified wild plants, mushrooms, prohibited additives, recipes for alcoholic beverages targeting minors;
• contains racist, xenophobic, Nazi, homophobic, religiously intolerant, violent, sexual, or otherwise offensive materials;
• constitutes advertising, spam, phishing, or links to harmful resources;
• contains personal data of third parties without their explicit consent;
• promotes self-harm, eating disorders, or dangerous "diets".

10.4. No pre-moderation obligation

The Service is not obligated to perform preliminary review (pre-moderation) of User Content. We bear no responsibility for actions, statements, recommendations, or errors of other users. If you discover prohibited Content — please notify us at the contacts below, and we will review the report within a reasonable time.

11. Right to remove content and block access

• to remove any of your User Content (recipes, photos, comments, messages, profile) in whole or in part;
• to block, suspend, restrict, or permanently terminate your access to the Service — for a defined period or indefinitely;
• to delete your account;
• to refuse your registration or re-registration;
• to retain a copy of removed Content to the extent necessary for legal compliance, responding to law enforcement requests, or documenting violations.

Grounds for such actions may include (this list is not exhaustive): violation of this Policy, Terms of Use, or any applicable law; harm to other users, third parties, or the reputation of the Service; technical or business necessity; reasonable suspicion of abuse, fraud, or automated use; or our subjective judgment regarding the appropriateness of such action.

In case of blocking for violation of this Policy or Terms of Use, subscription fees are not refunded in whole or in part. Refunds are also governed by the policies of Apple App Store and Google Play through which payment was made.

This provision does not deprive you of rights granted to you as a consumer by mandatory provisions of the legislation of your country of residence.

12. Limitation of liability

WE EXPRESSLY DISCLAIM ALL WARRANTIES, whether express, implied, or statutory, to the fullest extent permitted by applicable law. No advice or information, whether oral or written, obtained from the Service shall create any warranty not expressly stated herein.

To the maximum extent permitted by applicable law, the Administrator shall not be liable for:

• any direct, indirect, incidental, special, punitive, consequential, or exemplary damages;
• loss of profits, business reputation, opportunities, data, content, time, or health;
• harm to health, life, or property of you, your family members, guests, or any third parties arising from the use of Service materials, including recipes, AI responses, advice from other users;
• actions, inactions, statements, or recommendations of other users;
• errors, inaccuracies, incompleteness, or obsolescence of any content, including AI-generated content;
• temporary or permanent unavailability of the Service, data loss due to failures, cyberattacks, actions of hosting providers and other processors;
• changes in functionality, pricing, or complete or partial discontinuation of the Service;
• any reliance placed by you on any content, information, or materials available through the Service;
• any decisions you make or actions you take based on content from the Service.

AGGREGATE MAXIMUM LIABILITY: The total cumulative liability of the Administrator under any and all claims, causes of action, or theories of liability arising from or related to your use of the Service shall be limited to the amount you actually paid us for the subscription during the 12 months immediately preceding the event giving rise to the liability. For free users, the maximum liability is zero (0) UAH / EUR / USD.

YOU ACKNOWLEDGE THAT THIS LIMITATION OF LIABILITY IS A FUNDAMENTAL ELEMENT OF THE AGREEMENT BETWEEN YOU AND THE ADMINISTRATOR AND THAT THE SERVICE WOULD NOT BE PROVIDED TO YOU WITHOUT SUCH LIMITATIONS.

This limitation does not apply where it is expressly prohibited by mandatory law, particularly regarding intentional harm, gross negligence, or mandatory consumer rights that cannot be waived by agreement.

13. Service modifications and discontinuation

The Administrator reserves the right to modify, suspend, or permanently discontinue the Service (or any part thereof), including any features, functionality, content, or APIs, at any time, with or without notice, and without any liability to you. We are under no obligation to maintain, support, update, or provide any corrections, patches, or fixes to the Service.

You agree that the Administrator shall not be liable to you or any third party for any modification, suspension, or discontinuation of the Service. No refund, credit, or compensation of any kind shall be due to you as a result of any such modification, suspension, or discontinuation, except as may be required by mandatory applicable law.

14. Changes to this Policy

We may modify this Policy at any time. We will notify you of material changes in the App (banner, push notification) or by email to the address in your account no later than 14 days before the changes take effect.

Continued use of the Service after the changes take effect constitutes your acceptance of the updated version. If you do not agree with the changes — you have the right and obligation to stop using the Service and delete your account.

The date of the last revision is indicated at the beginning of this document.

15. Governing law and jurisdiction

This Policy is governed by the substantive law of Ukraine, without regard to conflict of law principles. Any disputes, claims, or demands arising from or in connection with this Policy shall be subject to the jurisdiction of the competent courts of Ukraine at the place of registration of the Administrator.

For users who are consumers and reside in EU/EEA countries, the mandatory consumer protection provisions of their country of residence that cannot be waived by agreement additionally apply; such users also have the right to bring proceedings in the courts of their country of residence.

16. Contacts

Personal data controller:

Individual Entrepreneur Govras Viacheslav Serhiiovych
Ukraine
Email for data-related requests, complaints, and inquiries: govras99@gmail.com

Requests regarding the exercise of your rights, data deletion, or complaints are processed within 30 calendar days of receipt. Before disclosing or deleting data, we may request additional information to verify the requester's identity.