Who We Are
Recipal is operated by Henrik Dymke, Schneeglöckchenstraße 13, 10407 Berlin, Germany. If you have any questions about this privacy policy, contact us at hello@getrecipal.com.
Data We Collect
When you use Recipal, we collect the following types of data:
- Account data — your email address, provided when you sign in with Apple or Google.
- Recipe and collection data — recipes, notes, and collections you create or import within the app.
- Device data — device type, operating system version, and app version. This is used for support and to ensure compatibility.
- Push notification token — if you enable notifications, we store a device token to deliver them.
- Usage data — anonymised app lifecycle events (e.g. app opened, session started) collected via PostHog to help us understand how the app is used and improve it.
We do not directly collect or store IP addresses, though third-party services we use may receive them as part of normal network communication.
How We Use Your Data
- To provide and operate the Recipal service
- To sync and back up your recipes securely across your devices
- To send push notifications if you have opted in
- To manage your subscription via RevenueCat
- To analyse usage patterns and improve the app (PostHog)
- To provide customer support
We do not use your data for advertising and we do not sell your data to third parties.
Third-Party Services
Recipal uses the following third-party services that may process your data:
- Supabase — our backend database provider. Your recipes, account data, and push tokens are stored securely on Supabase infrastructure.
- PostHog — analytics platform. We use PostHog to collect anonymised app lifecycle events. Autocapture and session replay are disabled. PostHog Privacy Policy.
- RevenueCat — subscription management. RevenueCat processes your subscription status and may collect device identifiers and purchase data. RevenueCat Privacy Policy.
- Apple Sign In / Google Sign In — authentication providers. We receive your email address from these services when you sign up or log in.
- Expo — push notification infrastructure. Device tokens are registered with Expo to deliver notifications.
Legal Basis for Processing (GDPR)
If you are based in the EU or EEA, we process your data on the following legal bases:
- Contract performance — processing necessary to provide the Recipal service you've signed up for.
- Legitimate interests — anonymised analytics to improve the app, provided this does not override your rights.
- Consent — push notifications, which you can withdraw at any time in your device settings.
Data Retention
We retain your data for as long as your account is active. If you request account deletion, your personal data and recipes will be permanently removed from our systems. Anonymised analytics data may be retained for longer.
Your Rights
Under GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict certain processing
- Data portability
- Lodge a complaint with a supervisory authority
To exercise any of these rights, contact us at hello@getrecipal.com.
Children's Privacy
Recipal is not directed at children. We do not knowingly collect personal data from anyone under the age of 13.
Changes to This Policy
We may update this policy from time to time. We'll notify you of significant changes through the app or via email. The date at the top of this page reflects the most recent revision.