Privacy Policy for Spiżarnia

Summary

• The App needs an account (Google or e-mail and password). Recipes, the shopping list and the fridge are stored in the cloud (Google Firebase) so that everyone in your household sees them.
• Screenshots you share with the App are sent to Google's Gemini model, which reads the recipe from them. We delete the original screenshots automatically after about a month.
• No advertising, no analytics and no crash-reporting tools. We do not sell data.
• You can delete your account at any time on the account deletion page.

1. Data controller

The controller of your personal data is Octigo sp. z o.o., ul. Redycka 38/1, 51-169 Wrocław, Poland, which can be reached at marcin.zmigrodzki@octigo.pl.

The company is entered in the Register of Entrepreneurs of the National Court Register (KRS), kept by the District Court for Wrocław-Fabryczna in Wrocław, 6th Commercial Division of the National Court Register, under KRS number 0000360836; tax ID (NIP) 8951978011; share capital PLN 10,000.

2. What data we process and why

Screenshots can contain anything that was on the screen, for example the name of the account that published a post. Share only what you want to save.

Data on your phone

The App keeps a local copy of your household's data (the Firebase cache, so that the App works offline), copies of screenshots until they are uploaded, and simple settings such as whether the tutorial has been shown. If backup is turned on in your phone's settings, Android may include the App's data, including that local copy, in the backup kept in your own Google account. The backup is made and stored by Android and Google, not by us.

What we do not collect

The App does not access your location, contacts, camera, microphone or photo gallery: it receives only the images you choose to share with it. It contains no advertising, no advertising ID, no Google Analytics and no crash reporting.

3. How Gemini reads recipes

When you share screenshots, the App sends them to Google's Gemini model (the Gemini Developer API, through Firebase AI Logic) together with your note, if you add one, and instructions on what to read. Gemini returns the title, ingredients, steps, tags and where the dish photos are on the screenshots. Your e-mail address and name are not sent to Gemini.

Spiżarnia uses the paid tier of the Gemini API. Under Google's Gemini API Additional Terms of Service, Google does not use content sent through paid services to improve its products; it may keep it for a limited period to detect abuse and to meet legal obligations. This processing may take place on Google's servers outside the European Economic Area.

4. Who receives data

• Google, as our processor, runs the services the App is built on: Firebase Authentication; Cloud Firestore (the database, located in the European Union: multi-region eur3, Belgium and the Netherlands); Cloud Storage for Firebase (photos, EU multi-region); Cloud Functions (Warsaw, europe-central2); Firebase Cloud Messaging (notifications); Firebase App Check; Firebase AI Logic and the Gemini API. Some of these services, such as sign-in, notifications and Gemini, may also process data outside the EEA, including in the United States; Google covers such transfers with the European Commission's Standard Contractual Clauses. See Privacy and Security in Firebase and the Google Privacy Policy.
• Google Play processes payments for Premium as a separate controller, under the Google Privacy Policy.
• Your household: the people in your household see your name, the household's recipes, list and fridge, and who added each recipe. The household code gives access to the household, so share it only with people you trust.

We do not sell data or share it with advertisers or data brokers. We may disclose data where the law requires it.

5. Legal bases (GDPR)

• Performance of the service you asked for (Article 6(1)(b) GDPR): the account, households, recipes, reading screenshots with Gemini, notifications and the Premium plan.
• Our legitimate interest (Article 6(1)(f) GDPR) in keeping the services secure and protected from abuse: App Check, technical logs, plan limits, and reviewing reports and blocking accounts that breach the Terms of Service. You may object to this processing at any time.
• Legal obligation (Article 6(1)(c) GDPR): handling notices of unlawful content under the EU Digital Services Act and informing the authorities where the law requires it.

6. How long we keep data

• Account, profile, households and recipes are kept while the account (or the household) exists. A deleted recipe is removed at once, together with its files.
• Screenshots are deleted automatically about a month after the recipe was added (a daily task in the cloud). The dish photos cropped from them stay until the recipe is deleted.
• Plan and purchase data are kept until the account is deleted. Google Play keeps its own purchase records under its own rules.
• Reports and copies of reported content are kept for as long as needed to review the report and any appeal, to protect household members from repeated breaches, and to establish or defend legal claims or answer requests from authorities. Information that an account is blocked is kept while the block lasts. Deleting your account or the reported content does not delete earlier reports.
• Technical logs are kept for up to 30 days.
• Backups: we do not make backups of the database. Deleted data may technically remain in Cloud Firestore's version history for up to one hour.

7. Deleting your account and data

You can delete your account on the account deletion page: sign in the same way as in the App and confirm. The following are deleted immediately:

• your sign-in account, profile and plan, and gift codes created for you;
• households with no other members, with all their recipes, screenshots, dish photos, shopping list, fridge and invite code;
• from shared households: your name, join code and notification tokens; your name is also removed from the recipes added from your account.

What remains: recipes in shared households stay with the other members (without your name), technical logs for up to 30 days, reports you made or that concern you (section 6), and purchase records at Google Play. An active Google Play subscription stops renewing; the current paid period is not refunded.

In the App you can also delete single recipes, leave a household, or delete a household you are the only member of. If you cannot sign in, write to marcin.zmigrodzki@octigo.pl from the e-mail address of your account and we will delete it within 30 days.

8. Your rights

Under the GDPR you have the right to access your data, to have it corrected, deleted or its processing restricted, to object to processing based on our legitimate interest, and to data portability. You can export your recipes yourself: in the App, tap the person icon in "Recipes" › "Save recipes to phone" to get a ZIP file. To exercise any other right, write to marcin.zmigrodzki@octigo.pl; we reply within one month.

You also have the right to lodge a complaint with a data protection authority; in Poland this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl).

9. Permissions the App requests

10. Security

All data is encrypted in transit (HTTPS/TLS). Firebase security rules let only the members of a household read its data and files. Purchases are verified on our server with Google Play, and App Check blocks requests that do not come from the genuine App. No method of transmission or storage is completely secure, but we limit the risk by collecting only what the App needs.

11. Children

The App is not directed to children under 16. We do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.

12. Changes to this policy

We may update this policy, for example when the App gets new features. The new version will be published at this address with a new "Last updated" date; we will announce significant changes in the App or in its store listing.

13. Contact

Octigo sp. z o.o.
ul. Redycka 38/1, 51-169 Wrocław, Poland
KRS 0000360836 · NIP 8951978011
E-mail: marcin.zmigrodzki@octigo.pl