01 General Information
Kookie is a meal planning app for iOS, developed by Łukasz Chochel. This policy explains what data is processed when you use the app and for what purpose.
The developer does not display ads, does not sell user data, and does not share it with third parties for marketing purposes.
02 Data Stored Locally
The app stores the following data exclusively on your device:
- recipes (name, ingredients, instructions, photos)
- weekly meal plan
- shopping list and checked item state
- ingredient dictionary
- app settings (theme, first day of the week)
- tutorial state
This data is never sent to external servers, is not synced to the cloud, and is not shared with third parties. Deleting the app permanently removes all data from your device.
The app may send local push notifications to your device, informing you about planned meals and your shopping list. Notifications are generated solely on your device based on locally stored data. No data is transmitted to external servers in connection with notifications. You can manage notification permissions in the app Settings and in iOS system settings.
03 Recipe Import from URL
The URL recipe import feature is the only place where data leaves your device. Processing occurs only when you explicitly initiate the import by pasting a URL.
What is transmitted
- the URL you provide
- the content of the webpage at that URL (recipe text)
The app does not transmit any personal data: no name, email, location, or device identifiers.
How processing works
- The app sends the URL to an intermediary server.
- The server fetches the page content directly from the website owner.
- The content is passed to the Claude API (Anthropic) to extract the recipe data.
- The parsed recipe is returned to the app and saved locally on your device.
Data processors
Operator: Supabase Inc., USA. This app's server region: EU (Frankfurt, Germany).
What is logged: only technical metadata — timestamp, HTTP status, execution time, headers. The URL content and Claude's response are neither logged nor stored by Supabase.
Technical metadata is retained for 1 day, after which it is automatically deleted.
Supabase Privacy Policy →Operator: Anthropic PBC, USA / Anthropic Ireland Limited, Ireland (for EEA users).
What is processed: the content of the webpage containing the recipe.
Page content submitted for processing is automatically deleted by Anthropic within 30 days. Under Anthropic's Commercial Terms of Service, data submitted via the API is not used to train AI models.
Anthropic Privacy Policy →Import limit
The app locally tracks the number of URL imports to enforce the free import limit. The counter is stored exclusively on your device.
04 Analytics
The app collects anonymous usage data to understand how the app is used and to improve it. No personal data, recipe content, or device identifiers are collected.
What is collected
- app launch
- adding a meal to the weekly plan (meal type only — no recipe content)
- opening the shopping list
- checking a shopping list item
- importing a recipe from URL
- creating a recipe manually
Events are identified by a randomly generated pseudonymous ID (UUID v4) that is not linked to your identity or device and is permanently deleted when you uninstall the app.
Data processor
Operator: PostHog Inc., USA. Server region used by this app: EU Cloud (Frankfurt, Germany).
Data is processed exclusively on EU servers.
PostHog Privacy Policy →Opt-out
You can disable analytics at any time in the app: Settings → Privacy → Anonymous analytics. The setting takes effect immediately.
05 What We Don't Collect
The app does not collect or process:
06 Legal Basis (GDPR)
For users in the European Economic Area:
| Processing activity | Legal basis |
|---|---|
| Storing data locally on the device | Performance of a contract (Art. 6(1)(b) GDPR) — data necessary for the app to function |
| Transmitting the URL and page content during recipe import | Performance of a contract (Art. 6(1)(b) GDPR) — feature intentionally initiated by the user |
| Collecting anonymous analytics events via PostHog | Consent (Art. 6(1)(a) GDPR) — the user gives consent during onboarding; can be withdrawn in Settings → Privacy |
Data is not used for automated decision-making or profiling.
07 International Data Transfers
Data processed during recipe import and anonymous analytics events may be transferred to the USA, where Supabase Inc., Anthropic PBC, and PostHog Inc. are headquartered. Transfers are made on the basis of Standard Contractual Clauses (SCCs) approved by the European Commission or other appropriate safeguards in compliance with GDPR.
The server infrastructure used by this app (Supabase and PostHog) is located in the EU region (Frankfurt, Germany).
Processing by Anthropic is carried out under SCCs via Anthropic Ireland Limited (EEA).
08 Your Rights
EEA users have the following rights under GDPR:
Since the app does not store user data on the developer's servers, most requests can be fulfilled directly by deleting data from your device or uninstalling the app.
Users have the right to lodge a complaint with a supervisory authority. In Poland, this is the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.
09 Security
All communication between the app and the intermediary server takes place exclusively over an encrypted HTTPS connection. The developer applies appropriate technical and organizational measures to protect the data being processed.
10 Children
The app is not directed at children under the age of 13 and the developer does not knowingly collect data from children in that age group.
11 Policy Changes
The developer will notify users of material changes to this policy — in particular those concerning the scope of data processed or new data processors — by releasing an app update on the App Store. Changes will take effect on the date indicated in this document. For changes affecting consent-based processing (analytics), continued use of the analytics feature will require renewed consent in Settings → Privacy.