Contents
Munchii is an app for saving, cooking and sharing recipes. This policy explains what personal data we collect, why, and what you can do about it. We've tried to write it in plain English rather than legalese.
1. Who we are
Munchii ("we", "us") is the data controller for the personal data described here. You can reach us at privacy@munchii.app for anything privacy-related.
2. What we collect
| Category | Examples | Source |
|---|---|---|
| Account data | Email address, username, display name, profile photo, sign-in provider (Apple, Google or email) | You, at sign-up |
| Profile & preferences | Language, favourite cuisines, cooking level, kitchen style, bio | You, during onboarding and in settings |
| Content you create | Recipes, ingredients, steps, photos, menus, drafts, comments, likes, saves, follows | You, in the app |
| Capture data | Photos you scan and audio you record to create a recipe | Your camera, photo library or microphone — only when you choose |
| Technical data | Device model, OS version, app version, crash logs, coarse usage events | Automatically |
We do not collect precise location, contacts, health data or advertising identifiers.
3. Why we use it
- To run the app — create your account, store your recipes, show your feed, deliver notifications. Legal basis: performance of a contract.
- To turn captures into recipes — read a scanned photo or transcribe a recording into structured ingredients and steps. Legal basis: performance of a contract, at your request.
- To keep Munchii safe — investigate reports, enforce our Community Guidelines, prevent abuse and spam. Legal basis: legitimate interests.
- To fix and improve things — diagnose crashes, understand which features are used. Legal basis: legitimate interests.
- To contact you — service messages such as security or policy changes. Marketing email only if you opt in. Legal basis: legitimate interests / consent.
We do not sell your personal data, and we do not run advertising in the app.
4. Photos, voice and AI processing
Two Munchii features send content off your device for processing:
- Scan a recipe. The image you choose is uploaded and analysed to extract a title, ingredients and steps.
- Record a recipe. Your audio is uploaded, transcribed to text, and the text is structured into a recipe.
This processing may be carried out by third-party AI providers acting as our processors under contract. We instruct our providers not to use your content to train their general-purpose models. Source images and audio are deleted after processing completes and the resulting draft is saved to your account — see section 6 for periods. If you'd rather not use these features, you can always write a recipe manually instead.
Camera, photo library and microphone access are requested only at the moment you use the relevant feature, and you can revoke them in iOS Settings at any time.
5. Who we share it with
- Other users — anything you publish: your username, profile, published recipes, comments and likes. Drafts and private recipes are never shown to others.
- Infrastructure providers — Google Firebase (authentication, database, file storage, crash reporting) hosts your account and content on our behalf.
- AI processing providers — as described in section 4.
- Authorities — only where we're legally required, or to protect someone's safety.
Some providers operate outside the EEA. Where that happens, transfers rely on an adequacy decision or EU Standard Contractual Clauses.
6. How long we keep it
| Data | Retention |
|---|---|
| Account & published content | Until you delete it, or you delete your account |
| Unfinished drafts | Cleared automatically after 30 days of no activity |
| Scanned images & voice recordings | Deleted after the recipe draft is created; at most 30 days |
| Crash & diagnostic logs | Up to 12 months |
| Moderation records | Up to 24 months after a report is closed |
Deleting your account removes your profile, recipes, drafts, comments and uploads. Backups are purged within 30 days.
7. Your rights
If you're in the EEA or UK you have the right to access, correct, delete, restrict or object to our processing of your data, to data portability, and to withdraw consent where we rely on it. Email privacy@munchii.app and we'll respond within one month. You can also complain to your local data protection authority — in the Netherlands, the Autoriteit Persoonsgegevens.
Most of this you can do yourself in the app: edit your profile, delete individual recipes, or delete your account under You → Settings → Delete account.
8. Security
Data is encrypted in transit (TLS) and at rest by our hosting providers. Access to production systems is limited to people who need it and protected by multi-factor authentication. No system is perfect; if a breach affects you, we'll notify you and the relevant regulator as required by law.
9. Children
Munchii is not intended for children under 13, and under-16s should have a parent or guardian's permission where local law requires it. If you believe a child has created an account, contact us and we'll remove it.
10. Cookies on this website
www.munchii.app is a static marketing site. It sets no tracking or advertising cookies and runs no third-party analytics. Fonts are loaded from Google Fonts, which receives your IP address in order to serve them.
11. Changes to this policy
If we make a material change we'll update the date at the top and notify you in the app before it takes effect.
12. Contact
Privacy questions: privacy@munchii.app
Everything else: support@munchii.app