Privacy Notice

Who is responsible

Arnold Olah operates SnapCook and is the data controller for personal information processed to provide this service. Paddle acts as Merchant of Record and handles purchases under its own privacy notice.

Information we use and why

• Account email, authentication identifiers and securely handled login credentials: to create accounts, sign you in and protect access.
• Fridge, pantry and freezer photos, typed ingredients, recipe requests and generated recipes: to produce meal suggestions and cooking pictures.
• Diet choices, allergies, servings and cooking-time preferences: to tailor recipes and remember your choices. Allergy information may reveal health data; it is optional. Do not submit sensitive information you do not want processed.
• Favorites and associated pictures: to keep recipes you choose to save.
• Recipe-pack usage and subscription identifiers, status and billing dates when payments are enabled: to apply plan allowances and manage access.
• Waitlist email addresses: to send the Premium availability notification you requested.
• Technical logs, IP addresses, device/browser information and support correspondence where collected: to troubleshoot, secure the service and respond to requests.

Account and recipe processing is necessary to perform our contract with you. Security and troubleshooting rely on legitimate interests; required recordkeeping relies on legal obligations. Optional notifications rely on your consent. Where health information requires explicit consent under applicable law, that consent must be obtained; entering an allergy does not waive your privacy rights.

Who receives information

Lovable Cloud provides hosting, authentication and storage. Kitchen photos, ingredients and relevant preferences are sent through Lovable's AI Gateway to AI providers to generate recipes; recipe image descriptions are sent for picture generation. Avoid photos containing faces, documents or other unnecessary personal details.

Paddle receives information needed for selling the subscription, managing billing, payments, taxes, invoicing and refunds. We do not store full payment-card numbers. See Paddle's privacy notice. Information may also be shared with contracted support or analytics providers where used, professional legal/accounting advisers and authorities where legally required. We do not sell your personal information.

International transfers

Hosting, AI and payment providers may process information outside Sweden and the EEA. Transfers must use applicable safeguards, such as European Commission adequacy decisions or Standard Contractual Clauses, where required by data-protection law.

Retention and security

Account information, saved recipes and remembered preferences are retained while needed to provide your account. Usage and subscription records are retained as needed to administer access and meet legal obligations. Waitlist information is kept as needed for the requested notification. Data is deleted or anonymised when no longer needed, subject to necessary legal, security and backup retention.

Uploaded kitchen photos are processed for recipe generation; the app does not save the original uploads to its recipe-image bucket. Generated pictures are stored privately and displayed through signed links. A link's expiry does not itself delete the stored picture. Service providers may retain processing logs under their own applicable terms.

We use appropriate technical and organisational safeguards, including encrypted connections, account authentication and owner-scoped access controls. No system can guarantee absolute security.

Cookies and browser storage

Essential cookies or browser storage support sign-in and session persistence. Browser storage also remembers your language choice. These can be removed through your browser settings, which may sign you out or reset preferences. This app does not implement an optional analytics or marketing-cookie consent system; non-essential tracking requiring consent must not be enabled without it.

Your rights

Under GDPR, where applicable, you may request access, correction, erasure, restriction, portability or object to processing, and withdraw consent without affecting earlier lawful processing. Direct privacy requests to Arnold Olah, the controller. We respond within one month, subject to lawful extensions. Deleting a favorite is available within your account; account deletion is available on the Account & billing page after any renewing subscription has been cancelled and paid access has ended. Required billing records may be retained.

You may complain to Sweden's supervisory authority, Integritetsskyddsmyndigheten (IMY), or your local data-protection authority. Paddle-related payment privacy requests can be directed to Paddle under its own notice.

Contact

For privacy requests, contact Arnold Olah, the data controller, at support@snapcookai.com.