Privacy policy

1. Controller

Marco Middeldorff

Ruppiner Straße 23

51107 Cologne, Germany

Email: marco@marco-middeldorff.de

2. Profile at first launch

At first launch the app creates an anonymous profile on my server. All you enter is a name, which can also be a nickname. The server assigns you a random user ID and a unique friend code. The app also generates a security code that lets you restore your profile on a new device. The server stores it only as a hash, not in plain text. On iOS you can protect it with Face ID. The check is performed by iOS; I do not receive any biometric data.

You can optionally upload a profile picture. The members of your shared lists, as well as other users who see your published recipes, can see your name and profile picture.

The legal basis is Art. 6 (1) (b) GDPR, as this data is required to use the app.

3. Shopping lists, invitations and synchronization

So that lists can be shared between your devices and with other people, the server stores your lists with items, short notes, markings, optional item photos and supermarket floor plans. Members of a list can see its contents and who last changed an item. You can invite other users to your lists via their friend code. For this the server stores who invited whom to which list and whether the invitation was accepted.

If you share a floor plan via a code, the server stores a copy that anyone with the code can retrieve. If you create personal API keys, for example for shortcuts or Home Assistant, the server stores only their hash, their name and the time of creation and last use.

So that the app also works without an internet connection, a copy of your data is also kept on your device and, if you have one, on your Apple Watch. The legal basis is Art. 6 (1) (b) GDPR.

4. Recipes

The app offers recipes from the Wikibooks cookbook (CC BY-SA license). They are stored on my server; Wikibooks is not contacted in the process. You can also create your own recipes. Published recipes are visible to other users together with your name and profile picture.

You can report recipes and block other users. For this the server stores who reported which recipe and for what reason, and whom you have blocked. Reported recipes may be hidden until they have been reviewed. The legal basis is Art. 6 (1) (b) GDPR for the recipe function and Art. 6 (1) (f) GDPR for moderation; my legitimate interest is protecting users from unlawful or inappropriate content.

5. Camera and barcode scanning

The app uses the camera only if you allow it, to scan barcodes and to take photos of items. The camera image is processed on the device and not transmitted. Only photos that you add to an item are uploaded.

To find the name for a scanned barcode, the app queries the Open Food Facts product database (Open Food Facts, France, privacy policy). The barcode number, your IP address and the app version are transmitted, but no data from your profile. The legal basis is Art. 6 (1) (b) GDPR. You can withdraw camera access at any time in your device settings.

6. Push notifications

If you allow notifications, on iOS the app receives a device token from Apple and sends it to my server. On Android the app registers for notifications directly with my server. The server uses this information to notify you, for example, about new items or invitations. In the app you choose which events you want to receive. On iOS the notifications are delivered through the Apple Push Notification Service (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland). On Android my own server delivers them, without a push service from Google or any other provider. They contain the list name, the name of the member who triggered the notification and the items concerned.

The legal basis is your consent under Art. 6 (1) (a) GDPR, which you can withdraw at any time in your device settings. Tokens that have become invalid are deleted automatically by the server.

7. Server and hosting

My server runs at netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe, Germany, in netcup's data center in Nuremberg. A data processing agreement pursuant to Art. 28 GDPR is in place with netcup.

With every connection the server technically processes your IP address. It uses it only briefly in memory to limit abuse through too many requests and does not store it permanently. The legal basis is Art. 6 (1) (f) GDPR; my legitimate interest is secure and stable operation.

8. Retention and deletion

Your data is stored for as long as you use the app. Under "Settings → Delete all data" you can delete your profile at any time. The server then removes your profile, your memberships, all lists you own, your recipes, reports, blocks, device tokens and API keys. Copies of shared floor plans contain no reference to you. If you delete the app, the data on your device is removed as well.

9. Your rights

You have the following rights towards me regarding the personal data concerning you:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to withdraw consent given, with effect for the future (Art. 7 (3) GDPR)

Because the app works without an email address, I can only identify you by your friend code. Please include it when you write to me. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.

10. Changes to this privacy policy

I will adapt this privacy policy whenever the app or the legal requirements change. The version published here applies at any given time.