Privacy Policy

In short

Your recipes are stored only on your own device by default. We collect a minimum of data to run and improve the app — never for advertising, and we never sell your data. You can delete everything from Settings at any time.

1. Who is the data controller?

MyRecipe is operated by Henrik Wirak Onsrud (Norway). Contact: hello@myrecipeai.net

2. What data we process, and why

Stored only on your device (we have no access)

• Recipes, ingredients, photos, categories, favourites and settings
• The name you optionally enter at startup (only for a personal greeting)

Sent to our services to deliver features you actively request

• Website / social import: the URL you paste is sent to fetch the recipe (Firebase + ScrapeCreators + Google Gemini).
• Photo import (OCR): text recognition happens on-device (Apple Vision); when needed, content is sent for parsing (Google Gemini).
• Voice input: the audio recording is sent for transcription (OpenAI Whisper).
• AI recipes & image search: your messages are sent for generation (Google Gemini), and search terms are sent for image search (Unsplash).
• Recipe sharing: when you share, the recipe is stored temporarily with us (Firebase) so the recipient can open it.

Collected automatically

• Usage analytics: which features are used, anonymous onboarding answers (age range, goals), and a random anonymous ID. Hosted in the EU (PostHog, Frankfurt). We do not collect recipe content, photos, names, email or chat messages for analytics.
• Subscription: purchase and subscription status is handled by RevenueCat and Apple (we never see your card number).
• App version, device type, OS version, and approximate country — used to diagnose issues and prioritise platform support.

3. Legal basis (GDPR Art. 6)

• Contract (Art. 6(1)(b)): providing the app's core features, your account and subscription.
• Legitimate interest (Art. 6(1)(f)): bug-fixing, security, fraud prevention and product improvement via anonymous statistics.
• Consent (Art. 6(1)(a)): where you actively enable analytics or optional features. You can withdraw consent at any time in Settings.
• Legal obligation (Art. 6(1)(c)): retaining purchase records for accounting.

4. Who we share data with (processors)

We use reputable providers that process data only on our behalf:

We do not sell data or share it with ad networks or data brokers.

5. Transfers outside the EEA

Some providers are located in the US. Such transfers rely on the EU Standard Contractual Clauses (SCCs) and/or the EU–US Data Privacy Framework. Usage analytics (PostHog) is stored in the EU.

6. How long we keep data

• On your device: until you delete it or the app.
• Usage analytics: up to 24 months, then deleted.
• Subscription data: while the subscription is active, plus as required by law.
• Shared recipes: until deleted or expired.
• Error / diagnostic data: a limited period for debugging.

7. Your rights

You have the right to access, rectification, erasure, restriction, data portability, and to object to or withdraw consent. Most actions are available directly in the app (Settings → delete account / data). For other requests: hello@myrecipeai.net— we respond within 30 days.

You may lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet, datatilsynet.no). We'd appreciate it if you contact us first.

8. Children

The app is a general cooking app and is not directed at children under 13. We do not knowingly collect personal data from children under 13.

9. Security

Data is transmitted encrypted (HTTPS/TLS) and stored with providers using industry-standard security.

10. Changes to this policy

We update this policy as needed. Material changes will be announced in the app. The date at the top reflects the latest revision.

11. Contact

Have questions about privacy? Contact us at hello@myrecipeai.net