Privacy policy
Last updated: April 22, 2026
This page explains how we handle personal data for the Cook Book mobile app and the cook-book.app website.
Controller
The controller under the GDPR is:
Paul Köhler Rauschener Ring 22a 22047 Hamburg Germany
Email: hello@cook-book.app
Data we process
Account and login: You sign in without a password (email plus a verification code). We store that email and whatever you create in the app, such as recipes and weekly plans, so the service works.
Camera and photos: If you allow it, the app can use the camera or photo library to capture or pick recipe photos (including for AI-assisted import). Nothing is read until you use that flow.
Website cook-book.app: Visits create basic technical records (for example IP addresses in server logs). We use Plausible Analytics: no cookies, no per-visitor ad-style profiles.
No in-app analytics: The mobile app itself does not run product analytics or behaviour tracking.
Purposes and legal bases
Running the app and its features rests on Article 6(1)(b) GDPR (contract with you).
Sensitive device features such as the camera rely on your consent or OS permission under Article 6(1)(a) GDPR.
Legitimate interests (security, abuse prevention, aggregated site statistics) are covered by Article 6(1)(f) GDPR where applicable.
Hosting and external services
App backend and database sit with Hetzner Online GmbH in Germany (EU). Your recipes and plans stay in that EU hosting setup; we do not copy them elsewhere for advertising.
The marketing site is served through Firebase Hosting (Google Ireland Limited), which may see IP addresses and similar technical data while delivering pages.
Recipe import (AI): Photo-to-text uses external AI providers (for example OpenRouter). Only the images for that request leave your device. We configure the pipeline so providers do not use those images to train models.
Retention
We keep personal data only as long as we need it for the purposes above or where the law says we must. Deleting your account removes your personal data and recipes from our database.
Your rights
Where the GDPR applies you may have rights of access, rectification, erasure, restriction, portability, and objection. You can withdraw consent that was the legal basis for processing.
You may also complain to a data protection authority.
Children
Cook Book is not aimed at children under 16. Parents or guardians decide which permissions the device grants.
Changes
When our practices or legal duties change, we update this page. The version posted here is the one that counts.
Questions? Mail hello@cook-book.app .