Privacy policy

SavorBook is a free recipe manager and meal planner. This page explains what personal data it processes and why.

Who is responsible

SavorBook support, based in Portugal. Questions and requests about personal data go to [email protected].

What data and why

• Account. Email, name, a password hash and the interface language. With Google sign-in, also the Google account’s name, email and profile picture. Needed to provide the service (GDPR Article 6(1)(b)).
• Content. Recipes, photos, meal plans, shopping lists, notes and AI instructions. Stored because storing them is the service (Article 6(1)(b)).
• Recipe import with AI. The text of a recipe being imported, the request typed with it and the AI instructions are sent to an AI provider. Screenshots are read on the SavorBook server and deleted right after, and only the recognised text leaves it (Article 6(1)(b)).
• Support chats. Messages and pictures. A problem report also records the page, browser, language and screen size (Article 6(1)(b)).
• Running the service securely. IP address and browser of signed-in devices, server logs and backups (Article 6(1)(f), the legitimate interest in a working, secure service).
• Improving the service. Poll answers and simple usage counts such as sign-ins (Article 6(1)(f), the legitimate interest in knowing what to improve).

SavorBook shows no advertising, uses no third-party trackers or analytics, sells no data and makes no automated decisions with legal effect. It sets only the cookies it needs to work, so it asks for no consent.

Who else receives data

• A hosting provider in Germany
• AI providers in the United States, for recipe imports
• An email delivery provider in the United States
• Google, when signing in with Google
• Services you connect yourself, such as a messaging bot, with only what you send to them

Transfers outside the European Economic Area rely on the EU standard contractual clauses or the EU-US Data Privacy Framework. A copy of the safeguard used for a provider is available on request at [email protected].

How long data stays

Account data, content, support chats and poll answers stay until the account is deleted, and are deleted with it. Technical records, such as import drafts, AI request logs and backups, are deleted on a schedule within 90 days, so deleted data can remain in a backup for up to 90 days. An account whose email was never confirmed is deleted after a day. AI providers may keep a request for a limited time under their own terms.

Rights

The GDPR gives the right to access, copy, correct and delete personal data, to receive it in a portable format, to restrict its processing and to object to it. Recipes, plans and lists can be exported from Settings, Import and export. To delete the account or make any other request, write to [email protected]. A request may need a check that it comes from the account holder. There is also the right to complain to the Portuguese data protection authority, CNPD.

An email address is needed to create an account.

Changes

The date at the top changes with this policy.