Privacy Notice

Jessica Fredin is the data controller for personal data processed to provide Cooksy. For privacy questions or to exercise your rights, email hello@gocooksy.com.

• Account data: name, email, username, authentication credentials/session identifiers, and your Google name and photo if you use Google sign-in. We use these to create and secure your account and sign you in (performance of our contract; legitimate interests in security).
• Profile and community data: bio, avatar, recipes, photos, comments, ratings, votes, likes, saves and notifications. These provide your profile, cookbook and community features (performance of our contract). Your profile and public recipes, comments and associated attribution can be visible to other people; private recipes are restricted by your sharing settings.
• AI Chef data: ingredients you enter, dietary preferences, selected language and usage timestamps linked to your account. Ingredients, preferences and language are sent to our AI providers to generate suggestions; usage records enforce your plan’s allowance (performance of our contract). Avoid entering sensitive personal information in prompts.
• Membership data: Paddle customer and subscription identifiers, plan, status and billing-period dates. We use these to unlock Premium and manage access (performance of our contract). Paddle handles payment card details through its checkout; Cooksy does not store your full card details.
• Support and technical data: messages you send us and technical records such as IP address, device/browser information and error or security logs processed by the service and hosting providers. These help answer enquiries, diagnose faults, prevent fraud and improve reliability (contract performance and legitimate interests). Records required for tax, accounting or legal compliance are processed on the basis of legal obligation. Optional marketing, if offered, requires your consent where applicable.

We share relevant data with service providers for hosting, account authentication, image storage, AI processing and support. Cooksy uses Lovable Cloud for its hosted service and Lovable’s AI Gateway with OpenAI for AI Chef. AI providers receive the inputs needed to produce your recipe suggestions; their own processing terms also apply.

Paddle, our Merchant of Record, receives account email and identifiers needed for product sales, subscription management, payments, tax compliance and invoicing. Paddle also processes purchase data under its own privacy notice.

We may share data with professional advisers such as legal and accounting advisers, and with authorities where the law requires it. We do not sell your personal data.

Our providers may process data outside the EEA or UK. Where applicable, transfers must use legally recognised safeguards, such as an adequacy decision or Standard Contractual Clauses with appropriate supplementary measures. Contact us for information about the safeguards applicable to your data.

We keep account and service data for as long as your account is active and needed to provide Cooksy. You can delete your own recipes and contact us to request account or data deletion. Support messages are retained while needed to resolve your enquiry and related follow-up; security and usage records only while needed for security and plan enforcement. Subscription and legal records may need to be retained for applicable accounting, tax or legal obligations. When data is no longer needed, we delete or anonymise it; backups and provider records may expire on their separate retention schedules. We assess retention according to the purpose, legal requirements and any unresolved dispute.

Subject to applicable law, you can request access, correction, erasure, restriction of processing and data portability; object to processing based on legitimate interests; and withdraw consent at any time without affecting earlier lawful processing. Email hello@gocooksy.com. We may verify your identity and normally respond within one month, explaining any lawful extension. You may complain to your local supervisory authority, including Sweden’s Integritetsskyddsmyndigheten (IMY), or the ICO in the UK.

We use appropriate technical and organisational measures, including encrypted connections, authentication, access controls and restricted image storage. No online service is completely secure. Keep your password private and tell us promptly if you suspect a security issue.

Cooksy uses browser storage for essential sign-in sessions and your language preference. These are not used for advertising. We do not currently run optional analytics or marketing cookies in Cooksy’s own application. Paddle checkout and sign-in providers may use their own essential storage or cookies under their notices. You can clear or block storage in your browser settings, but this may sign you out or prevent checkout from working. If optional analytics or marketing cookies are introduced, we will offer consent controls before using them where required.

We update this notice as Cooksy changes and show the latest revision date above. We will communicate material changes where required. Please contact hello@gocooksy.com with any questions.