ReciReel Privacy Policy
Last updated: April 26, 2026
Effective date: April 26, 2026
1. Who We Are
ReciReel is developed and operated by Justin Burkard (“we,” “us,” “our”).
Data Controller: Justin Burkard Email: support@recireel.com Website: https://recireel.com
We are the data controller responsible for your personal data under applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act as amended by the CPRA (collectively, “CCPA”).
We do not currently have a Data Protection Officer. For any data protection inquiries, contact us at support@recireel.com.
2. What This Policy Covers
This privacy policy explains what personal information ReciReel collects, the legal basis for processing it, how we use it, who we share it with, how long we keep it, and what rights you have. It applies to all users of the ReciReel iOS app.
3. Information We Collect
3.1 Information You Provide Directly
| Category | Data Elements | Purpose |
|---|---|---|
| Account information | Email address, display name | Account creation, authentication, communication |
| Recipe imports | Supported recipe URLs and source content you submit | Recipe extraction and structuring |
| Notes and customizations | Personal notes on recipes, serving adjustments | Personalizing your recipe library |
| Cook session data | Recipes you cook, serving adjustments, completion status | Cook mode functionality |
| Support communications | Messages you send to us | Responding to your questions or issues |
3.2 Information Collected Automatically
| Category | Data Elements | Purpose |
|---|---|---|
| Device identifiers | Anonymous device token for push notifications (if enabled) | Delivering notifications you request |
| Purchase data | Subscription status, product identifier, transaction identifier (via StoreKit 2) | Entitlement verification, feature access |
3.3 Information We Do NOT Collect
We want to be explicit about what we do not touch:
- No location data. We never request or access your location.
- No third-party tracking or advertising analytics. We do not use third-party analytics SDKs, ad networks, data brokers, or cross-app behavioral tracking.
- First-party operational telemetry is disabled for production launch unless this policy and App Store privacy details are updated first. Any future telemetry must be privacy-safe and must not include raw recipe text, private notes, pantry photos, advertising identifiers, Health data, payment data, or other private user fields.
- No advertising identifiers. We do not collect the IDFA or any advertising identifier.
- No contacts or address book. We never access your phone’s contact list.
- No photos or camera. We do not access your camera or photo library.
- No browsing history. We only process the specific recipe URLs you choose to paste into the app. We have no visibility into your general web browsing.
- No cookies or web tracking technologies. The app does not use cookies, web beacons, pixels, or similar tracking technologies.
3.4 Health Data
ReciReel does not request, read, write, collect, store, or transmit Apple HealthKit or other health data at launch. Nutrition information shown in the app is an estimate for cooking convenience and is not medical advice.
If we add Apple Health integration in the future, we will update this policy and App Store privacy details before shipping it, and the feature will require your separate permission through Apple’s Health authorization prompt.
4. Legal Basis for Processing (GDPR)
We process your personal data under the following legal bases as defined by Article 6(1) of the GDPR:
| Legal Basis | Applies To |
|---|---|
| Performance of a contract (Art. 6(1)(b)) | Account creation, recipe importing, saved recipe management, cook mode, subscription entitlement, and support — all core features necessary to deliver the service you signed up for |
| Consent (Art. 6(1)(a)) | Push notifications, marketing communications (if any), and any future opt-in feature that requires separate consent |
| Legitimate interests (Art. 6(1)(f)) | Service security, fraud prevention, enforcing our terms of service, improving the app based on aggregated non-personal usage patterns |
| Legal obligation (Art. 6(1)(c)) | Responding to lawful requests from authorities, tax and financial record-keeping related to subscriptions |
Where we rely on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing performed before the withdrawal.
Where we rely on legitimate interests, we have assessed that our interests do not override your fundamental rights and freedoms. You may object to processing based on legitimate interests at any time by contacting us.
5. How We Use Your Information
We use your information solely to provide and operate the ReciReel service:
- Account management: Your email and name identify your account and allow us to communicate with you about your account.
- Recipe extraction: URLs you submit are sent to our backend, which uses Google Gemini AI to extract and structure recipe content.
- Entitlement management: Subscription status determines which features you can access.
- Nutrition estimates: Recipe nutrition estimates are shown for cooking convenience only and are not medical advice.
We do not:
- Sell your personal information to anyone.
- Use your information for advertising or ad targeting.
- Share your information with data brokers.
- Use your information for profiling for purposes unrelated to the service.
6. Automated Decision-Making
ReciReel uses Google Gemini AI to extract and structure recipe content from the URLs you submit. This involves automated processing of the page content behind those URLs to generate structured recipe data (ingredients, steps, nutrition estimates).
This automated processing:
- Applies only to the specific URLs you choose to import.
- Does not make decisions that produce legal effects or similarly significant effects on you.
- Produces recipe data that you can review, edit, and correct within the app.
Nutrition estimates generated by AI are approximations. They should not be relied upon for medical-grade dietary decisions.
7. Third-Party Services
7.1 Google Gemini AI
When you import a recipe, we send the URL and associated page content to Google’s Gemini AI API to extract and structure the recipe. This means Google processes the URL and page content you submit. Google’s processing is governed by their Google Cloud Privacy Notice and applicable data processing terms.
- We only send the specific URLs you choose to import — no other account data.
- Google’s Gemini API processes data under a data processing agreement that includes Standard Contractual Clauses for international transfers.
- We do not permit Google to use the data we send for training AI models.
7.2 Apple (App Store and StoreKit)
- App Store and StoreKit: Your subscription and payment information is handled entirely by Apple through the App Store. ReciReel does not see, process, or store your payment card details, billing address, or Apple ID credentials. Apple’s Privacy Policy governs their handling of this data.
7.3 Apple Push Notification Service
If you enable notifications, we use Apple Push Notification Service (APNs) to deliver them. An anonymous device token is used. Apple’s privacy policy governs APNs.
7.4 No Other Third Parties
We do not use any third-party analytics services, advertising networks, crash reporting services, or social media SDKs. We do not embed any third-party tracking code in the app.
8. Paid Shopping Links
The app may include clearly marked paid links for ingredients, optional ingredients, grocery items, or kitchen equipment mentioned in recipes. If you use those links, ReciReel may earn a small commission at no extra cost to you. When you tap a paid link, the destination website’s own privacy policy applies to your interaction with that site.
- Paid links are visually distinguished and disclosed near the shopping action.
- Paid-link relationships never influence which recipes are recommended to you, how they are ranked, or how they are displayed.
- We do not receive personally identifiable information from affiliate partners about your purchases.
9. International Data Transfers
ReciReel is operated from the United States. If you are located outside the United States (including in the European Economic Area, United Kingdom, or Switzerland), your personal data will be transferred to and processed in the United States.
For transfers of personal data from the EEA/UK/Switzerland to the United States, we rely on:
- Standard Contractual Clauses (SCCs) approved by the European Commission, where applicable.
- The EU-U.S. Data Privacy Framework, to the extent our processors (such as Google) are certified under it.
By using ReciReel, you acknowledge that your data will be processed in the United States, which may have different data protection standards than your country of residence. We take reasonable measures to ensure your data receives an adequate level of protection.
10. Data Retention
| Data Type | Retention Period |
|---|---|
| Account data (email, name) | Retained while your account is active. Permanently deleted upon account deletion. |
| Recipes, notes, source links, and customizations | Retained while your account is active. Permanently deleted upon account deletion. |
| Cook session data | Retained while your account is active. Permanently deleted upon account deletion. |
| Subscription/entitlement data | Retained while your account is active plus up to 90 days after account deletion for financial record-keeping and dispute resolution. |
| Support communications | Retained for up to 24 months after resolution, then deleted. |
| Imported source content (auxiliary signals) | Retained only as long as needed for recipe extraction quality and source traceability. Raw source media is not retained long-term. |
After account deletion: All personally identifiable data is permanently removed from our systems. Aggregated, non-identifiable data (such as total recipe count statistics) may be retained.
Subscription cancellation vs. account deletion: Canceling your subscription through the App Store does not delete your account or data — it changes which features you can access. To delete your data, you must separately delete your account through the app.
11. Your Rights
11.1 Rights for All Users
Regardless of where you are located, you can:
- Export your data. Download the account data ReciReel stores for you as a JSON file at any time from the Profile tab.
- Delete your account. Permanently delete your account and all stored data from the Profile tab. This action is irreversible.
- Manage notifications. Enable or disable push notifications through iPhone Settings.
11.2 Additional Rights Under GDPR (EEA, UK, Switzerland Residents)
If you are located in the European Economic Area, United Kingdom, or Switzerland, you have the following additional rights under the GDPR:
- Right of access (Art. 15): Request a copy of the personal data we hold about you.
- Right to rectification (Art. 16): Request correction of inaccurate personal data.
- Right to erasure (Art. 17): Request deletion of your personal data (“right to be forgotten”).
- Right to restrict processing (Art. 18): Request that we limit how we use your data in certain circumstances.
- Right to data portability (Art. 20): Receive your personal data in a structured, commonly used, machine-readable format (JSON export).
- Right to object (Art. 21): Object to processing based on legitimate interests or direct marketing.
- Right to withdraw consent (Art. 7(3)): Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing.
- Right to lodge a complaint: You have the right to lodge a complaint with your local data protection supervisory authority. A list of EEA supervisory authorities is available at edpb.europa.eu.
To exercise any of these rights, contact us at support@recireel.com. We will respond within 30 days (or sooner as required by applicable law). We may ask you to verify your identity before processing your request.
11.3 Additional Rights Under CCPA/CPRA (California Residents)
If you are a California resident, the California Consumer Privacy Act as amended by the CPRA provides you with the following rights:
- Right to know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business or commercial purposes for collecting it, and the categories of third parties with whom we share it. This right is not limited to a 12-month look-back period for data retained longer than 12 months.
- Right to delete: You may request deletion of your personal information, subject to certain exceptions.
- Right to correct: You may request that we correct inaccurate personal information.
- Right to opt out of sale or sharing: We do not sell or share your personal information as defined by the CCPA. We do not sell personal information to third parties for monetary or other valuable consideration. We do not share personal information for cross-context behavioral advertising.
- Right to limit use of sensitive personal information: We only use sensitive personal information (your email address) as necessary to provide the service.
- Right to non-discrimination: We will not discriminate against you for exercising any of your CCPA rights.
Categories of Personal Information Collected (CCPA Disclosure):
| CCPA Category | Examples | Sold or Shared? |
|---|---|---|
| Identifiers | Email address, display name, device token | No |
| Commercial information | Subscription status, purchase history (via Apple) | No |
| Internet or electronic network activity | Recipe URLs you import | No |
| Other personal information | Pantry items, meal plans, recipe notes, cook session data | No |
Automated Decision-Making Technology (ADMT): We use Google Gemini AI to extract recipe content from URLs you submit. This processing does not make significant decisions about you. You can review and edit all AI-generated recipe content within the app.
To exercise your CCPA rights, contact us at support@recireel.com. We will verify your identity and respond within 45 days.
12. Children’s Privacy
ReciReel is not designed for, directed at, or intended for use by children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe a child under 16 has created an account, please contact us at support@recireel.com and we will promptly delete the account and all associated data.
In the United States, we comply with the Children’s Online Privacy Protection Act (COPPA), which applies to children under 13. Our age threshold of 16 exceeds COPPA requirements and aligns with GDPR standards.
13. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encrypted data transmission (TLS/HTTPS) for all communications between the app and our servers.
- Encrypted data storage at rest on our servers.
- Access controls limiting who can access personal data.
- Regular security reviews of our systems.
While we take reasonable steps to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
14. Changes to This Policy
If we make material changes to this privacy policy, we will notify you through the app before the changes take effect and update the “Last updated” date at the top of this document. Your continued use of ReciReel after the effective date of the revised policy constitutes acceptance of the changes.
Minor clarifications, formatting changes, or updates that do not materially affect your rights will be updated without separate notice.
We encourage you to review this policy periodically.
15. Contact Us
If you have questions about this privacy policy, your data, or wish to exercise any of your rights, contact us at:
Justin Burkard Email: support@recireel.com Website: https://recireel.com
For GDPR-related inquiries, you may also contact your local data protection supervisory authority.