Privacy Policy — Tanie Gotowanie

STATUS: DRAFT. Content is based on an actual code audit of the app (2026-08-13) — it describes data that is really collected, not assumptions. The [TO BE CONFIRMED BEFORE PUBLICATION] field for the Data Controller needs to be filled in. This is not legal advice — legal review is recommended before publication, in particular of sections 4 and 5 (current provider DPAs). Polish law governs this document; the Polish version is authoritative in case of discrepancy.

Effective date: [TO BE SET — app store launch day]

Last updated: 2026-08-13

1. Data Controller

The data controller is [TO BE CONFIRMED BEFORE PUBLICATION: company/individual name, address, tax ID].

Contact for personal-data matters: kontakt@taniegotowanie.pl.

2. What data we process

Account data (only if you choose to create an account — the app also works fully in guest mode):

• Email address and password (never stored by us in plain text — handled by Supabase Auth), or data from Google/Apple sign-in (identifier, name, possibly a profile photo).

Profile and preference data (for registered accounts, mostly optional):

• Date of birth — only if you want to see promotions/recipes containing alcohol (age gate).
• Marketing consent (yes / no / not yet chosen), together with a timestamp.
• Number of adults and children in the household, weekly grocery budget, selected stores, diet type, preferred cuisines, allergens, meal types.
• Favorite and tracked products (catalog identifiers only, no free text).
• Meal plans, shopping lists, savings history.
• The content of feedback messages sent through the in-app feedback form.

Technical data:

• Installation/device identifier (Android ID / iOS identifierForVendor) — used only in guest mode, to correctly anchor the free trial period even after reinstalling the app; not collected for signed-in accounts.
• Push notification token — only if you enable notifications.
• Standard server logs (IP address, request timestamps), processed by our infrastructure (Cloudflare) for every request to the app.
• Crash/error diagnostics (device model, OS/app version, error trace) — production builds only, and only if crash reporting is active; passwords, auth tokens and your email address are automatically stripped from these reports before they are sent.

Data stored only locally on your device (never sent to our servers):

• Profile photo (avatar).
• Your own recipes, including any added by scanning a photo — text recognition from the photo happens entirely on-device.
• Local notification history, language and appearance settings.

Voice data (cooking mode, optional feature, requires a separate microphone permission):

If you use voice commands in cooking mode, your voice is processed by your phone's built-in operating-system speech-recognition service (Apple or Google) — our app never receives or stores the recording or the transcript, only the recognized command (e.g. "next", "pause"). The OS provider may process the audio on its own servers under its own privacy policy.

Subscription data:

If you purchase Premium, transaction data (subscription identifier, status, dates) flows from the store operator (App Store/Google Play) to our subscription-management provider, RevenueCat, and from there to our system — limited to subscription status only. Payment-card data is handled directly by Apple/Google and never reaches us.

Family mode (Premium feature, optional): the family group name and, for each member, display name, assigned store, shopping progress, and votes cast on recipes.

The app does not collect location data (GPS) and does not track you across other apps.

3. Purposes and legal bases (GDPR Art. 6)

• Providing the service (account, plan, shopping list) — Art. 6(1)(b) (contract).
• Premium subscription and billing — Art. 6(1)(b).
• Marketing communication (if consent was given) — Art. 6(1)(a) (consent; can be withdrawn at any time in Settings).
• Security, fraud prevention, legal obligations — Art. 6(1)(f) / (c).

4. Processors

We entrust data to the following providers (under data-processing agreements — DPAs):

• Supabase — database (PostgreSQL) and authentication; infrastructure hosted in the EU (Ireland). [TO BE CONFIRMED: exact DPA terms]
• Cloudflare — API hosting (Workers), caching (KV), file storage (R2); global edge network, data-at-rest location depends on account settings. [DPA]
• RevenueCat — Premium subscription handling and verification.
• Sentry — crash/error detection (production builds only).
• Apple / Google — sign-in (OAuth), in-app subscription billing; for voice commands, speech recognition is performed by the device's operating system.

We use AI models (Google Gemini) only internally, to prepare and maintain the recipe database (tagging, translation, tip generation) — they do not process data you enter while using the app.

5. Transfers outside the EEA

Some providers (Cloudflare, RevenueCat, Sentry, Apple, Google) may process data outside the European Economic Area (including the USA), based on Standard Contractual Clauses (SCCs) approved by the European Commission or another appropriate GDPR-compliance mechanism. [TO BE CONFIRMED: verify each provider's current transfer mechanism before publication.]

6. Retention period

• Account data and related data (preferences, plans, shopping lists, savings history) — for as long as you hold an account.
• Marketing consent — until withdrawn.
• If you request account deletion (by writing to kontakt@taniegotowanie.pl), we will complete it within 30 days.

7. Your rights (GDPR)

You have the right to: access your data, rectify it, erase it ("right to be forgotten"), restrict processing, port your data, object to processing, and withdraw marketing consent at any time (Settings → Privacy). You may also lodge a complaint with the Polish data protection authority (Prezes UODO).

To exercise your rights, write to kontakt@taniegotowanie.pl.

8. Guest mode

You can use the app without creating an account ("guest mode"). Guest data is stored only locally on the device and is not automatically migrated to an account if you sign in later.

9. Children

The app is not directed at children under 16.

10. Changes to this policy

We will announce material changes at least 14 days in advance via an in-app notice.