Privacy Policy

1. Data Controller

The data controller responsible for Your Personal Data is:

• GenSOFT s. r. o.
• Športová 608/4, Viničné 900 23
• Slovak Republic
• IČO: 57 162 981
• Email: andrej@receptoai.com

If You have concerns about how We process Your data, You have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov SR) at dataprotection.gov.sk, or with the supervisory authority in Your country of residence.

2. Interpretation and Definitions

2.1 Interpretation

Capitalized terms have the meanings assigned to them in this Policy.

2.2 Definitions

• Account means the unique profile created for You to access the Service.
• Application means the web application titled "Recepto AI."
• Company, We, Us, or Our means GenSOFT s. r. o., the operator of Recepto AI.
• Device means any device used to access the Service.
• Personal Data means information that identifies or can reasonably be linked to an individual, as defined under the EU General Data Protection Regulation (GDPR).
• Dietary Preference Data means information You provide relating to Your dietary preferences, allergies, cuisine preferences, or food requirements. This data is not classified as special category health data under GDPR Article 9, as it reflects personal lifestyle choices rather than medical conditions.
• Usage Data means data collected automatically through use of the Service, including device information, activity logs, and analytics data.
• User Content means recipes, ingredients, text, or other inputs You upload or submit through the Service.
• Website means the Recepto AI web application.
• You means the individual using the Service or the organization on whose behalf the Service is used.

3. Types of Data We Collect

We collect the categories of data described below.

3.1 Personal Data You Provide

We may collect the following Personal Data when You create an Account or use the Service:

• Full name
• Email address
• Profile photo (optional)
• Optional profile details You provide

3.2 Dietary Preference Data

To provide personalized recipe recommendations, We collect:

• Dietary preferences (e.g., vegetarian, vegan, keto)
• Food allergies and intolerances
• Cuisine preferences
• Cooking skill level
• Language preferences

Note: This data reflects Your personal lifestyle choices and is processed under the legal basis of contract performance (to provide You with personalized recipes) and Your consent. We do not use this data for medical purposes.

3.3 User Content

User Content includes:

• Recipes You create or generate
• Saved recipes
• Ingredient lists and inputs
• Ingredient search terms You type in the recipe creation and discovery flows (stored together with Your user ID, where You are signed in, to improve ingredient suggestions and search quality)

3.4 Usage Data

We automatically collect:

• Device type, operating system, and browser version
• IP address
• Time stamps and activity logs
• Feature usage analytics
• Performance data

This data helps Us secure, improve, and optimize the Service.

3.5 Cookies and Tracking Technologies

The Website uses cookies, local storage, and similar technologies. We use:

• Strictly necessary cookies: Required for authentication and core functionality. These cannot be disabled.
• Analytics cookies: Help Us understand how the Service is used. These are only set with Your consent.

You can manage or withdraw Your cookie consent at any time using the "Cookie settings" link in the site footer or in Preferences, which reopens the consent banner. For more details, see our Cookie Policy.

3.6 Publicly Visible Profile and Community Data

When You use social features such as public user profiles, display names, profile pictures (avatars), following other users ("Cookmates"), published recipes, ratings and recipe questions, We collect and display the data You choose to publish:

• Display name
• Profile picture or avatar (assigned randomly or uploaded by You)
• Published recipes and saved recipes You choose to make visible
• Ratings and recipe questions You submit
• Following relationships (Cookmates)

This information is visible to other users and may be publicly accessible on the internet, indexed by search engines and shared through public links. Do not publish anything You would not want to be public. You may delete Your published content or change Your avatar at any time from Your account settings, although copies may temporarily remain in caches or backups.

4. How We Use Your Data

We use the collected data for the following purposes:

4.1 To Provide and Improve the Service

• AI-powered recipe generation
• Personalized recipe recommendations
• Recipe saving and organization
• Account management
• Service stability and debugging

4.2 To Improve AI Models

We may use anonymized or aggregated recipe data and usage patterns to improve Our AI models and enhance the accuracy of recipe recommendations. Such use is strictly anonymized and not linked to Your identity. You may opt out of AI training at any time by switching off the "Help improve our AI" toggle in Preferences, or by contacting Us at andrej@receptoai.com. This consent is off by default and opting out will not affect Your use of the Service.

4.3 Communications

We may contact You about:

• Updates and new features
• Service-related notifications
• Customer support responses

4.4 Legal and Compliance

We may use Your data to:

• Detect or prevent fraud
• Comply with law enforcement obligations
• Protect Our rights

5. Legal Bases for Processing (GDPR)

We process Your data on the following legal bases:

• Contract performance (Art. 6(1)(b) GDPR): To provide the Service, including personalized recipe generation based on Your preferences.
• Consent (Art. 6(1)(a) GDPR): For analytics cookies, marketing communications, and AI model training using Your data. You may withdraw consent at any time.
• Legitimate interests (Art. 6(1)(f) GDPR): For service improvement, security, and fraud prevention, where Our interests do not override Your rights.
• Legal obligations (Art. 6(1)(c) GDPR): To comply with applicable law.

6. How We Share Personal Data

We may share Personal Data:

6.1 Service Providers

With vendors who support the Service, such as:

• Cloud hosting and database providers (EU-based servers)
• Analytics providers
• AI service providers
• Authentication services

6.2 Business Transfers

As part of corporate transactions such as mergers, acquisitions, or asset sales.

6.3 Legal Compliance

With law enforcement or regulators when legally required.

6.4 With Your Consent

Where You direct Us to share information.

6.5 Publicly Visible Content

Content You publish through community features - including Your display name, avatar, published recipes, ratings and recipe questions - is shared with other users and may be publicly accessible on the internet, indexed by search engines and shared through public links. See Section 3.6 for the categories of data involved.

6.6 Aggregated or Anonymized Data

We may share aggregated or non-identifiable data for analytics, research, or business purposes. We do not sell Your Personal Data.

6.7 Analytics Provider

With Your consent (see Our Cookie Policy), We use Google Analytics 4, provided by Google Ireland Limited (for EEA users) / Google LLC. Google receives information about Your use of the Service - pages viewed, button clicks, approximate location (country/city level), device and browser type. We have enabled IP anonymization, and We do not send Google any of Your account data (name, email or content). Google may process this data in the United States under the EU-US Data Privacy Framework and Standard Contractual Clauses. You can withdraw Your consent at any time via "Cookie settings" in Our footer, which clears analytics data from Your browser.

7. User Content and License Rights

By submitting User Content, You grant the Company a worldwide, royalty-free, sublicensable license to use, store, process, reproduce, modify, and create derivative works from Your User Content solely to operate, maintain, and improve the Service.

This license is revocable. Upon deletion of Your Account, We will cease using Your User Content within 30 days, except where retention is required by law or for anonymized data already incorporated into AI models.

Content You actively publish through community features (such as public recipes, ratings and recipe questions) is visible to other users and may be publicly accessible on the internet, as described in Section 3.6. We do not otherwise publicly share Your private recipes or content without Your express consent.

8. Retention of Data

We retain Your data for the following periods:

• Account and Personal Data: For as long as Your Account is active, plus 30 days after deletion to process the request.
• Dietary Preference Data: Until You delete it or delete Your Account.
• Usage Data: Up to 24 months from collection, unless needed for security investigations.
• Ingredient search terms: Automatically deleted after 90 days, or immediately upon deletion of Your Account.
• Backups: Up to 90 days as part of standard retention practices.
• Legal holds: Data may be retained longer where legally required (e.g., tax records for 10 years under Slovak law).

We delete or anonymize data when no longer needed unless legally required to retain it.

9. International Data Transfers

Your information may be transferred to and processed on servers outside the European Economic Area (EEA). When We transfer data outside the EEA, We ensure appropriate safeguards are in place, including:

• EU Standard Contractual Clauses (SCCs) approved by the European Commission
• Transfers to countries with an EU adequacy decision

Our primary data processing occurs within the EU. AI processing may involve transfers to the United States, protected by SCCs. If You consent to analytics, Google Analytics 4 also processes usage data in the United States under the EU-US Data Privacy Framework and SCCs. You may request a copy of the applicable safeguards by contacting Us.

10. Your Privacy Rights

Under the GDPR, You have the following rights:

• Access: Request a copy of Your Personal Data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of Your Personal Data ("right to be forgotten")
• Data portability: Export Your data in a machine-readable format
• Withdraw consent: Where processing is based on consent, withdraw it at any time
• Object to processing: Object to processing based on legitimate interests
• Restrict processing: Request limitation of processing in certain circumstances
• Lodge a complaint: File a complaint with the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov SR) or Your local supervisory authority

You may exercise these rights directly in the app: go to Preferences → Privacy and your data to download a machine-readable copy of Your data ("Download my data"), permanently delete Your Account and all associated data ("Delete my account"), or reopen the cookie banner to change or withdraw Your cookie consent ("Cookie settings"). Consent toggles for marketing emails and AI improvement are on the same page. You may also contact Us at andrej@receptoai.com. We will respond within 30 days.

11. Deleting Your Personal Data

You may request deletion of:

• Your Account and all associated data
• Saved recipes
• Dietary preferences
• Profile data

Deletion requests are processed within 30 days. Some data may persist where legally required (see Section 8).

12. Security

We use administrative, technical, and physical safeguards to protect Your data, including encryption in transit and at rest. However, no online system is entirely secure.

13. Children's Privacy

The Service is not intended for children under 16 years of age (in accordance with the Slovak implementation of GDPR Article 8). We do not knowingly collect personal information from children under 16. If You are a parent and believe Your child has provided Us with Personal Data, please contact Us to request deletion.

14. Third-Party Links

The Service may contain links to third-party websites or services. Their privacy practices are their own, and We do not control or endorse them.

15. Changes to This Privacy Policy

We may update this Policy from time to time. Updates become effective when posted. We will notify You by email or through the Application for material changes at least 14 days before they take effect.

16. Contact Us

If You have questions or requests related to this Privacy Policy, You may contact Us:

• GenSOFT s. r. o.
• Športová 608/4, Viničné 900 23, Slovak Republic
• Email: andrej@receptoai.com