1. Our Commitment
Recipee processes personal data in accordance with the EU General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. This page summarises your rights, the lawful basis on which we rely, and how to contact us about your data.
For the full description of what data we collect and how we use it, see our Privacy Policy. For details on cookies and tracking technologies, see our Cookie Policy.
2. Data Controller
Recipee is the data controller for the personal data processed through the recipee.app website and application. Contact us at [email protected] for any data-protection-related enquiries.
3. Lawful Basis for Processing
We process personal data on one or more of the following lawful bases under Article 6 GDPR:
- Contract (Art. 6(1)(b)) — to provide the Recipee service to you (recipes, costing, production, labels, billing).
- Legitimate interests (Art. 6(1)(f)) — to secure the service, prevent fraud, and improve product performance through aggregated usage data.
- Consent (Art. 6(1)(a)) — for optional analytics and marketing cookies on our public marketing pages. You can withdraw consent at any time via the Cookie Policy.
- Legal obligation (Art. 6(1)(c)) — to comply with tax, accounting, and other applicable laws (for example, retaining invoice records).
4. Your Rights as a Data Subject
Under GDPR you have the following rights regarding your personal data. We respond to verified requests within one month.
- Right to be informed — to know what data we hold about you and how it is used (this page and the Privacy Policy).
- Right of access — to receive a copy of the personal data we hold about you.
- Right to rectification — to have inaccurate or incomplete data corrected.
- Right to erasure("right to be forgotten") — to request deletion of your personal data, subject to legal retention requirements.
- Right to restrict processing — to ask us to pause processing of your data while a query is resolved.
- Right to data portability — to receive your data in a structured, machine-readable format, or have it transmitted to another controller where technically feasible.
- Right to object — to processing based on legitimate interests, including profiling and direct marketing.
- Rights related to automated decision-making — to not be subject to a decision based solely on automated processing that produces legal effects on you.
5. How to Exercise Your Rights
Email [email protected] from the address associated with your account. To protect your data we may ask you to verify your identity before fulfilling a request. There is no charge for a standard request, but we may refuse or charge a reasonable fee for requests that are manifestly unfounded or excessive.
6. Sub-Processors and International Transfers
Recipee uses the following sub-processors to operate the service. Some are based outside the UK/EU; transfers are made under appropriate safeguards (Standard Contractual Clauses or equivalent).
| Sub-processor | Purpose | Region |
|---|---|---|
| Clerk | Authentication and user identity management | United States |
| Convex | Application database and real-time backend | United States |
| Stripe | Payment processing and subscription billing | United States / Ireland |
| Google (Tag Manager & Ads) | Marketing analytics and ad measurement (consent-gated, public pages only) | United States |
| Metricool | Visitor analytics (consent-gated, public pages only) | European Union |
7. Data Retention
We retain personal data only for as long as necessary to provide the service or to meet legal obligations. Account data is deleted on request, subject to invoicing and tax retention requirements. Aggregated, non-identifying analytics data may be retained longer for product-performance purposes.
8. Right to Complain
If you believe your data has been handled in breach of GDPR, you have the right to lodge a complaint with a supervisory authority. In the UK, that is the Information Commissioner's Office (ICO). In the EU, contact the data-protection authority in your member state.
We would appreciate the opportunity to address your concerns first — please reach out to us before lodging a complaint.
9. Contact Us
For any GDPR-related question, contact us at [email protected].
This page is effective as of 11 May 2026.