This privacy policy describes how Recipe Realm ("we", "us") collects, uses and shares your information when you use the website at https://reciperealm.ro (the "Service"), and explains your rights over that data.
We use your personal data to provide and improve the Service. By using the Service you agree to the collection and use of information in accordance with this policy.
Definitions
For the purposes of this policy:
- Account means the unique account created for you to access the Service.
- Company ("we", "us", "our") refers to Recipe Realm, operated from Romania.
- Cookies are small files placed on your device by a website; see our cookies policy for details.
- Personal data is any information that relates to an identified or identifiable individual.
- Service provider means any third party that processes data on our behalf.
- Usage data is data collected automatically, generated by the use of the Service or its infrastructure (for example the duration of a page visit).
- You means the individual accessing or using the Service.
Data we collect
While using the Service we may ask you for information that can be used to contact or identify you:
- Account data: username, email address and a hashed password. Optionally your phone number, country, city, a short description and an avatar image you upload.
- Sign in with Google: your Google user id, name, email and profile picture, used only to create or link your account.
- Content you create: the recipes you generate (name, ingredients, special requirements), your favorite recipes and ingredients, and prompts if you are an administrator.
- Payment data: when you buy the Pro plan, Stripe processes your card details. We never see or store your card number; we only receive confirmation that the payment succeeded.
- Usage data: IP address, browser type and version, device information, the pages you visit, the time and date of your visit and the time spent on pages. We also keep a record of your active login sessions (device and IP) so you can review and revoke them from your profile.
How we use your data
We use personal data for the following purposes:
- To provide and maintain the Service, including monitoring its usage.
- To manage your account and give you access to the features available to registered users.
- To generate recipes, images and videos: the recipe name, ingredients and special requirements you enter are sent to OpenAI's models to produce the recipe text, photo and video.
- To process your Pro plan purchase through Stripe and keep your plan active.
- To contact you by email about your account, security updates or password resets.
- To keep the Service secure: detecting abuse, enforcing usage limits and letting you revoke sessions you do not recognise.
- To understand how the Service is used and improve it.
Who we share data with
We do not sell your personal data. We share it only with the service providers needed to run the Service:
- OpenAI, which generates recipe text, images and videos from the inputs you provide.
- Amazon Web Services (S3), which stores generated images, videos and uploaded avatars.
- Stripe, which processes payments for the Pro plan.
- Google, when you choose to sign in or link your account with Google.
- Public authorities, if required by law or in response to valid legal requests.
- Other users: your username, avatar, description and the recipes you generate are visible to other users. Your favorite ingredients are visible only if you enable that in your profile settings.
Retention
We keep your personal data only for as long as your account exists or as needed for the purposes described above. Usage data and login session records are kept for a shorter period unless needed for security or legal reasons.
Recipes you generate remain part of the public recipe collection. If you delete your account, we remove your personal data but may keep the recipes in anonymised form.
International transfers
Our service providers (OpenAI, Amazon Web Services, Stripe, Google) may process data on servers located outside Romania and the European Economic Area. We only work with providers that offer adequate safeguards for your data, such as standard contractual clauses.
Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data (most of it directly from your profile settings).
- Delete your account and personal data.
- Receive a copy of your data in a portable format.
- Object to or restrict certain processing.
- Withdraw consent at any time, for example by unlinking your Google account or rejecting cookies in your browser.
- Lodge a complaint with your data protection authority (in Romania, ANSPDCP).
Security
Passwords are stored hashed, connections use HTTPS, and access tokens expire automatically. You can review and revoke your active sessions from the Security tab of your profile. No method of transmission over the Internet is 100% secure, so we cannot guarantee absolute security.
Children's privacy
The Service is not addressed to anyone under the age of 13 and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will remove it.
Links to other websites
The Service may contain links to websites we do not operate. We have no control over their content or privacy practices and recommend reviewing the privacy policy of every site you visit.
Changes to this policy
We may update this policy from time to time. Changes are published on this page with an updated date, and significant changes are announced on the Service before they take effect.
If you have any questions about this policy, you can contact us by email: daliran.hussein@gmail.com