Privacy policy

Who is responsible

Kokeboka is made by Martin Lande in Norway, who is the data controller. Questions about privacy can be sent to privacy@kokeboka.app.

What we keep

• Your account. When you sign in with Apple, we receive a user ID from Apple, your name and your email address, or a hidden address from Apple if you choose one. You can add a last name, a nickname and a profile photo yourself.
• Your family. The family's name, who is in it, and the profiles you create for family members without their own account, with a name, photo and colour.
• What you make together. Recipes with photos and scanned pages, the dinner plan, who is home for dinner, each person's tastes and goals, dice ratings and the family's activity log.
• Products you ask us to add. The name, the barcode and the photos you take of the product.
• Notifications. A notification token from Apple for your phone and which notifications you want.
• Technical information. The server logs requests with IP address and time, for operations and security.

We use no analytics or advertising networks, and the app does not track you across other apps and websites.

Allergies and health

If you note that someone never eats something because of an allergy, or choose a diet goal, it may say something about their health. It is optional, used only to choose dinner suggestions and can be removed at any time. We process it on the basis of the consent you give by entering it.

What we use it for

Your information is used to provide the service: signing you in, showing your family the same content, suggesting dinners, sending the notifications you have turned on and handling product requests. The legal basis is our agreement with you when you use the app (GDPR Article 6(1)(b)). Logs are used to keep the service secure and running, which is a legitimate interest (Article 6(1)(f)).

Who sees it

• Your family sees the family's content. Within the family only your first name is shown.
• If you share a recipe, the people who receive it see the recipe, but nothing about you.
• Product requests are read by whoever reviews products for Kokeboka. If you tick the box for it, the product photos are shared with Open Food Facts, an open food database, where they become public under an open licence.

Services we use

• Apple for sign-in and notifications.
• Akamai (Linode), which hosts the server in Frankfurt, Germany.
• Backblaze for encrypted backups, stored in the EU.
• Anthropic. When you scan a recipe or send a product request, the photos are sent to Anthropic's AI model Claude, which reads the text. Anthropic is based in the USA. The transfer relies on the EU Standard Contractual Clauses, and Anthropic does not use the data to train its models.
• Open Food Facts. When you look up a barcode, we ask for that barcode there. Nothing about you is sent with it.

How long we keep it

• Your account and what you have added: until you delete it.
• The activity log: 90 days.
• Photos from product requests: until 90 days after the request is handled.
• Backups: up to 12 months.
• Server logs: a limited period.

Deleting your account

You delete your account in the app under Settings → Delete account. This deletes your account, name, email address, profile photo and your membership in your families, with what is yours there, such as tastes, goals and dice ratings. Your Apple sign-in is revoked. Recipes you added stay with the family, without your name. If you own a family, you must hand it over or delete it first. Copies in backups disappear as the backups expire.

Your rights

You can ask for access to, correction, deletion and a copy of your information, and you can object to how it is processed. Write to privacy@kokeboka.app. You can also complain to the Norwegian Data Protection Authority, Datatilsynet.

Children

Children can be part of a family as profiles, which the adults in the family create and manage. Children under 13 should not create their own account.

Changes

If we change this policy, we update the date at the top of the page.