Privacy policy

Who we are

MakEat ("we") runs the website makeat.app and the MakEat mobile app. We are responsible for the personal data described in this policy. For any question about it, write to support@makeat.app.

Data we collect

Account data: your email address, your name, an optional profile photo, and how you sign in (an email code, an email and password, Google or Apple).

Your content: the links, videos, PDFs, photos and text you import, the recipes you create or edit, your meal plans and your grocery lists.

Cooking preferences you choose to share: your goal, diet, food allergies or intolerances, household size, kitchen equipment, favourite recipe sources and how you heard about us. Diet and allergies can reveal health or religious information. Giving them is optional and you can remove them at any time in Settings.

Subscription data: your plan and its status. Card details are handled by Stripe, Apple or Google and never reach our servers.

Technical data: device and browser type, app version, language and push notification tokens, and, only if you agree, usage analytics and session recordings.

How we use it

We use your data to run your account and sync it across your devices; to import, structure, translate and convert your recipes; to adapt AI-generated recipes to your diet and allergies; to manage your subscription; to answer your support requests; to send service notifications, such as when an import is ready; to keep MakEat secure; and, with your consent, to understand how MakEat is used so we can improve it.

Under the GDPR, we rely on our contract with you to provide the service, on your consent for analytics and for optional health-related preferences, and on our legitimate interest in preventing fraud and abuse.

AI processing

Imports, recipe generation, nutrition estimates, translations and Thermomix conversions are processed by Google's Gemini models. We send only what each task needs: the content you import and, when generating a recipe, your diet and allergy constraints. We never send your name, your email or your account identifier with it.

Cookies and analytics

The website uses strictly necessary cookies for your login session, your language and your "stay signed in" choice.

With your consent, we use PostHog, hosted in the EU, to measure usage and record sessions. These are tied to an internal ID, never to your name or email. You can accept or refuse in the cookie banner. Vercel Analytics and Speed Insights measure page performance without cookies, and hCaptcha protects sign-up and login from bots.

Who we share it with

We never sell your data or use it for advertising. We share it only with the providers that run MakEat on our behalf, for the purposes above: Supabase (database, login and file storage), Vercel (website hosting), Google (Gemini AI, Google sign-in and push notifications), Stripe (web payments), Apple and Google (app store purchases and sign-in), RevenueCat (mobile subscription management), PostHog (analytics) and hCaptcha (bot protection).

We may also disclose data when the law requires it.

International transfers

Some of these providers process data outside the European Economic Area. When they do, the transfer is covered by a European Commission adequacy decision or by its standard contractual clauses.

How long we keep it

We keep your data for as long as your account exists. When you delete your account, your profile, preferences, recipes, meal plans, grocery lists and uploaded files are erased right away, and copies in our encrypted backups disappear as those backups expire. Payment records are kept by Stripe, Apple or Google for as long as tax and accounting laws require.

Your rights

You can access, correct, export or delete your data, object to or restrict some processing, and withdraw your consent at any time. Edit your profile and preferences in Settings, delete your account from the app or the website, or write to support@makeat.app. We answer within one month.

If you think we haven't handled your data properly, you can also complain to your local data protection authority.

Children

MakEat is not meant for children under 16. We don't knowingly collect their data. If you believe a child has given us personal data, contact us and we'll delete it.

Security

Data is encrypted in transit and at rest. Each account can only read its own data, and shared recipe links can be revoked at any time.

Changes to this policy

If we change this policy in a meaningful way, we'll update the date at the top of this page and let you know in the app or by email.