ReciReel Privacy Policy
Last updated: June 9, 2026
Effective date: June 9, 2026
1. Who We Are
ReciReel is developed and operated by Justin Burkard (“we,” “us,” “our”).
Data Controller: Justin Burkard Email: support@recireel.com Website: https://recireel.com
We are the data controller responsible for your personal data under applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act as amended by the CPRA (collectively, “CCPA”).
We do not currently have a Data Protection Officer. For any data protection inquiries, contact us at support@recireel.com.
2. What This Policy Covers
This privacy policy explains what personal information ReciReel collects, the legal basis for processing it, how we use it, who we share it with, how long we keep it, and what rights you have. It applies to all users of the ReciReel iOS app.
3. Information We Collect
3.1 Information You Provide Directly
| Category | Data Elements | Purpose |
|---|---|---|
| Account information | Email address, display name | Account creation, authentication, communication |
| Recipe imports | Supported recipe URLs and source content you submit | Recipe extraction and structuring |
| Notes and customizations | Personal notes on recipes, serving adjustments | Personalizing your recipe library |
| Cook session data | Recipes you cook, serving adjustments, completion status | Cook mode functionality |
| Support communications | Messages you send to us | Responding to your questions or issues |
3.2 Information Collected Automatically
| Category | Data Elements | Purpose |
|---|---|---|
| Local notifications | Cook-timer reminders scheduled on your device (if enabled) | Cook-timer reminders, handled on your device — no push token is collected or transmitted |
| Purchase data | Subscription status, product identifier, transaction identifier (via StoreKit 2) | Entitlement verification, feature access |
3.3 Information We Do NOT Collect
We want to be explicit about what we do not touch:
- No location data. We never request or access your location.
- No third-party tracking or advertising analytics. We do not use third-party analytics SDKs, ad networks, data brokers, or cross-app behavioral tracking.
- First-party operational telemetry is disabled for production launch unless this policy and App Store privacy details are updated first. Any future telemetry must be privacy-safe and must not include raw recipe text, private notes, pantry photos, advertising identifiers, Health data, payment data, or other private user fields.
- No advertising identifiers. We do not collect the IDFA or any advertising identifier.
- No contacts or address book. We never access your phone’s contact list.
- No photos or camera. We do not access your camera or photo library.
- No browsing history. We only process the specific recipe URLs you choose to paste into the app. We have no visibility into your general web browsing.
- No cookies or web tracking technologies. The app does not use cookies, web beacons, pixels, or similar tracking technologies.
3.4 Health Data
ReciReel does not request, read, write, collect, store, or transmit data from health apps at launch. Nutrition information shown in the app is an estimate for cooking convenience and is not medical advice.
If we add any health-data integration in the future, we will update this policy and App Store privacy details before shipping it, and the feature will require separate permission.
4. Legal Basis for Processing (GDPR)
We process your personal data under the following legal bases as defined by Article 6(1) of the GDPR:
| Legal Basis | Applies To |
|---|---|
| Performance of a contract (Art. 6(1)(b)) | Account creation, recipe importing, saved recipe management, cook mode, subscription entitlement, and support — all core features necessary to deliver the service you signed up for |
| Consent (Art. 6(1)(a)) | Local cook-timer notifications, marketing communications (if any), and any future opt-in feature that requires separate consent |
| Legitimate interests (Art. 6(1)(f)) | Service security, fraud prevention, enforcing our terms of service, improving the app based on aggregated non-personal usage patterns |
| Legal obligation (Art. 6(1)(c)) | Responding to lawful requests from authorities, tax and financial record-keeping related to subscriptions |
Where we rely on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing performed before the withdrawal.
Where we rely on legitimate interests, we have assessed that our interests do not override your fundamental rights and freedoms. You may object to processing based on legitimate interests at any time by contacting us.
5. How We Use Your Information
We use your information solely to provide and operate the ReciReel service:
- Account management: Your email and name identify your account and allow us to communicate with you about your account.
- Recipe extraction: The content you submit for an import — the source URL, page text and captions, and, for video imports, the source video file and frames extracted from it — is sent to our backend, which uses Google Gemini AI to extract and structure recipe content. See Section 7.1 for details.
- Source attribution: When available, ReciReel stores and displays source URLs, source platform, creator names, and creator handles so imported recipes preserve credit and can be traced back to the original source.
- Entitlement management: Subscription status determines which features you can access.
- Nutrition estimates: Recipe nutrition estimates are shown for cooking convenience only and are not medical advice.
We do not:
- Sell your personal information to anyone.
- Use your information for advertising or ad targeting.
- Share your information with data brokers.
- Use your information for profiling for purposes unrelated to the service.
6. Automated Decision-Making
ReciReel uses Google Gemini AI to extract and structure recipe content from the items you submit. This involves automated processing of the content you submit — the source URL, page text and captions, and, for video imports, the source video file and frames extracted from it — to generate structured recipe data (ingredients, steps, nutrition estimates).
This automated processing:
- Applies only to the specific items you choose to import.
- Does not make decisions that produce legal effects or similarly significant effects on you.
- Produces recipe data that you can review and delete within the app.
Nutrition estimates generated by AI are approximations. They should not be relied upon for medical-grade dietary decisions.
7. Third-Party Services
7.1 Third-Party AI Processing (Google Gemini)
Third-Party AI Processing (Google Gemini). When you import a recipe from a link or shared video, ReciReel transmits the content you submit — the source URL, page text and captions, and, for video imports, the source video file and frames extracted from it — to Google’s Gemini AI to extract and structure a recipe (ingredients, steps, timing, and nutrition estimates). Google acts as our data processor for this task under a data processing agreement that includes Standard Contractual Clauses for international transfers, and we do not permit Google to use this content to train its AI models. We send only the content for the specific item you choose to import; we do not send your account profile, saved library, notes, or purchase data. Any source video temporarily fetched to process your import is held only in temporary working storage for the duration of processing and is deleted immediately after the recipe is generated — ReciReel does not maintain a permanent archive of source videos. We do not sell or rent your content or personal information to anyone, and we do not use it for advertising. You can review and delete every AI-generated recipe within the app at any time.
Source attribution is separate from AI processing. ReciReel may show the original source URL, source platform, creator name, or creator handle when available so users know where an imported recipe came from and creators can request review or removal if needed.
7.2 Apple (App Store and StoreKit)
- App Store and StoreKit: Your subscription and payment information is handled entirely by Apple through the App Store. ReciReel does not see, process, or store your payment card details, billing address, or Apple ID credentials. Apple’s Privacy Policy governs their handling of this data.
7.3 Local Notifications
ReciReel uses local notifications only — for example, cook-timer reminders. These are scheduled and delivered entirely on your device. We do not use Apple Push Notification Service (APNs) or any remote push service, and no push token is collected, generated, or transmitted to us or any third party.
7.4 No Other Third Parties
We do not use any third-party analytics services, advertising networks, crash reporting services, or social media SDKs. We do not embed any third-party tracking code in the app.
8. Paid Shopping Links
The app may include clearly marked paid links for ingredients, optional ingredients, grocery items, or kitchen equipment mentioned in recipes. If you use those links, ReciReel may earn a small commission at no extra cost to you. When you tap a paid link, the destination website’s own privacy policy applies to your interaction with that site.
- Paid links are visually distinguished and disclosed near the shopping action.
- Paid-link relationships never influence which recipes are recommended to you, how they are ranked, or how they are displayed.
- We do not receive personally identifiable information from affiliate partners about your purchases.
9. International Data Transfers
ReciReel is operated from the United States. If you are located outside the United States (including in the European Economic Area, United Kingdom, or Switzerland), your personal data will be transferred to and processed in the United States.
For transfers of personal data from the EEA/UK/Switzerland to the United States, we rely on:
- Standard Contractual Clauses (SCCs) approved by the European Commission, where applicable.
- The EU-U.S. Data Privacy Framework, to the extent our processors (such as Google) are certified under it.
By using ReciReel, you acknowledge that your data will be processed in the United States, which may have different data protection standards than your country of residence. We take reasonable measures to ensure your data receives an adequate level of protection.
10. Data Retention
| Data Type | Retention Period |
|---|---|
| Account data (email, name) | Retained while your account is active. Permanently deleted upon account deletion. |
| Recipes, notes, source links, and customizations | Retained while your account is active. Permanently deleted upon account deletion. |
| Cook session data | Retained while your account is active. Permanently deleted upon account deletion. |
| Subscription/entitlement data | Retained while your account is active plus up to 90 days after account deletion for financial record-keeping and dispute resolution. |
| Support communications | Retained for up to 24 months after resolution, then deleted. |
| Imported source content (auxiliary signals) | Retained only as long as needed for recipe extraction quality and source traceability. Raw source media is not retained long-term. |
After account deletion: All personally identifiable data is permanently removed from our systems. Aggregated, non-identifiable data (such as total recipe count statistics) may be retained.
Subscription cancellation vs. account deletion: Canceling your subscription through the App Store does not delete your account or data — it changes which features you can access. To delete your data, you must separately delete your account through the app.
11. Your Rights
11.1 Rights for All Users
Regardless of where you are located, you can:
- Export your data. Save the account data ReciReel stores for you as a JSON file at any time from the Profile tab.
- Delete your account. Permanently delete your account and all stored data from the Profile tab. This action is irreversible.
- Manage notifications. Enable or disable ReciReel’s local notifications through iPhone Settings.
11.2 Additional Rights Under GDPR (EEA, UK, Switzerland Residents)
If you are located in the European Economic Area, United Kingdom, or Switzerland, you have the following additional rights under the GDPR:
- Right of access (Art. 15): Request a copy of the personal data we hold about you.
- Right to rectification (Art. 16): Request correction of inaccurate personal data.
- Right to erasure (Art. 17): Request deletion of your personal data (“right to be forgotten”).
- Right to restrict processing (Art. 18): Request that we limit how we use your data in certain circumstances.
- Right to data portability (Art. 20): Receive your personal data in a structured, commonly used, machine-readable format (JSON export).
- Right to object (Art. 21): Object to processing based on legitimate interests or direct marketing.
- Right to withdraw consent (Art. 7(3)): Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing.
- Right to lodge a complaint: You have the right to lodge a complaint with your local data protection supervisory authority. A list of EEA supervisory authorities is available at edpb.europa.eu.
To exercise any of these rights, contact us at support@recireel.com. We will respond within 30 days (or sooner as required by applicable law). We may ask you to verify your identity before processing your request.
11.3 Additional Rights Under CCPA/CPRA (California Residents)
If you are a California resident, the California Consumer Privacy Act as amended by the CPRA provides you with the following rights:
- Right to know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business or commercial purposes for collecting it, and the categories of third parties with whom we share it. This right is not limited to a 12-month look-back period for data retained longer than 12 months.
- Right to delete: You may request deletion of your personal information, subject to certain exceptions.
- Right to correct: You may request that we correct inaccurate personal information.
- Right to opt out of sale or sharing: We do not sell or share your personal information as defined by the CCPA. We do not sell personal information to third parties for monetary or other valuable consideration. We do not share personal information for cross-context behavioral advertising.
- Right to limit use of sensitive personal information: We only use sensitive personal information (your email address) as necessary to provide the service.
- Right to non-discrimination: We will not discriminate against you for exercising any of your CCPA rights.
Categories of Personal Information Collected (CCPA Disclosure):
| CCPA Category | Examples | Sold or Shared? |
|---|---|---|
| Identifiers | Email address, display name | No |
| Commercial information | Subscription status, purchase history (via Apple) | No |
| Internet or electronic network activity | Content you submit to import a recipe (source URL, page text and captions, and, for video imports, the source video file and extracted frames) | No |
| Other personal information | Pantry items, meal plans, recipe notes, cook session data | No |
Automated Decision-Making Technology (ADMT): We use Google Gemini AI to extract recipe content from the items you submit to import. This processing does not make significant decisions about you. You can review and delete all AI-generated recipe content within the app.
To exercise your CCPA rights, contact us at support@recireel.com. We will verify your identity and respond within 45 days.
12. Children’s Privacy
ReciReel is not designed for, directed at, or intended for use by children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe a child under 16 has created an account, please contact us at support@recireel.com and we will promptly delete the account and all associated data.
In the United States, we comply with the Children’s Online Privacy Protection Act (COPPA), which applies to children under 13. Our age threshold of 16 exceeds COPPA requirements and aligns with GDPR standards.
13. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encrypted data transmission (TLS/HTTPS) for all communications between the app and our servers.
- Encrypted data storage at rest on our servers.
- Access controls limiting who can access personal data.
- Regular security reviews of our systems.
While we take reasonable steps to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
14. Changes to This Policy
If we make material changes to this privacy policy, we will notify you through the app before the changes take effect and update the “Last updated” date at the top of this document. Your continued use of ReciReel after the effective date of the revised policy constitutes acceptance of the changes.
Minor clarifications, formatting changes, or updates that do not materially affect your rights will be updated without separate notice.
We encourage you to review this policy periodically.
15. Contact Us
If you have questions about this privacy policy, your data, or wish to exercise any of your rights, contact us at:
Justin Burkard Email: support@recireel.com Website: https://recireel.com
For GDPR-related inquiries, you may also contact your local data protection supervisory authority.