Privacy Policy

Last updated: 29 June 2026

The short version: we collect only what we need to run the service. We don't sell your data. Your recipes are yours. You can request a copy or deletion of everything at any time.

1. Who we are (data controller)

recipe2table is operated by Declan Clancy, an individual based in Ireland, who is the data controller for all personal data processed through this service. For any privacy questions, email hello@recipe2table.com.

As a small sole-trader business, we are not required to appoint a Data Protection Officer. All privacy enquiries are handled directly by Declan Clancy.

2. What data we collect

When you sign in with Google we receive:

When you use the app we also store:

Everything in this list is collected for one purpose: to provide and improve your recipe2table experience — saving the recipes you want, personalising them to your kitchen, and letting you pick up where you left off across devices. All of it is visible to you in the app, editable by you, and deletable by you at any time (individually in the relevant screen, or all at once by deleting your account — see sections 10 and 11).

Tootie chat. When you chat with Tootie (our in-app cooking assistant), we store your conversation history — the messages you send and Tootie's replies — so you can return to past conversations. You can view your conversations from the chat history panel and delete any of them there at any time. We keep only your most recent conversations (older ones are pruned automatically). We also keep a short automatic summary of each recent conversation so Tootie can pick up where you left off; deleting a conversation deletes its summary, and you can wipe all summaries at once with "Clear chat memory" in Settings → Tootie's Notes. The messages you send are processed by Anthropic to generate Tootie's replies (see section 4).

Food store. If you tell Tootie what you have in your fridge, freezer, cupboard, or leftovers — or add items manually — we store that list, with the date each item was added, so Tootie can suggest meals that use what you already have and help reduce food waste. Items are removed automatically once their typical shelf life has passed. You can view, edit, and remove these items at any time from the Food store panel in chat.

Tootie's notes. To give you better suggestions over time, Tootie may keep a short free-text note of your tastes, household, and cooking style. You can read this note, edit it, switch it off, or clear it entirely in Settings at any time. Because such a note can incidentally capture health-related preferences (for example, "avoids dairy"), it is covered by the same explicit-consent basis as your dietary preferences below.

Dietary preferences and special requirements. If you choose to set dietary preferences (for example, gluten-free, diabetic, lactose intolerant, coeliac) or enter a "Special Requirements" note, this information may relate to your health. Health data is a special category under GDPR Article 9 and requires explicit consent. By actively enabling a dietary toggle or entering text in the Special Requirements field, you give your explicit consent for us to store and use that information solely to personalise recipes for you. You can remove these preferences at any time in Settings.

Creator programme data. If you apply to the Creator Programme, we additionally store the creator handle and any social media handles (Instagram, YouTube, TikTok, Facebook) you choose to provide.

We do not collect passwords, payment card numbers, or browsing history outside the app.

3. Why we process your data (lawful basis)

Under Article 6 of the GDPR, we rely on the following lawful bases:

4. AI recipe parsing

When you add a recipe via URL, text, or photo, the content is sent to Anthropic (the makers of Claude AI) for parsing. For recipes imported from video (for example, TikTok or Instagram), audio may be sent to OpenAI (Whisper) for transcription. These third parties process the content to extract the recipe structure and return the result to us.

The source URL is kept alongside the parse record for cost accounting and to help us investigate a specific import if you contact support about it. An uploaded photo becomes part of the recipe it produces and is kept with it, the same as any other recipe photo. For pasted text, we keep a short excerpt (up to 200 characters) as a private note on the recipe. Audio is transcribed and then discarded — the audio itself is never retained, only the resulting text. All of this is deleted when you delete the recipe, or immediately when you delete your account (see section 11). Anthropic's privacy policy applies to the parsing itself: anthropic.com/privacy. OpenAI's policy applies to audio transcription: openai.com/policies/privacy-policy.

If you use the "Use My Preferences" or Chef Intelligence features, the dietary preferences and special requirements you have saved may also be sent to Anthropic to personalise the recipe. This processing is covered by the consent you gave when enabling those preferences.

Tootie chat. When you chat with Tootie, the messages you send — together with relevant context you have saved (your dietary preferences, pantry items, Tootie's notes, and the names of recipes in your library) — are sent to Anthropic to generate Tootie's reply. This is the same processor and the same safeguards as recipe parsing above. We retain your conversation as chat history (see section 2); Anthropic does not retain it for its own purposes beyond returning the reply.

Voice messages. Voice messages are transcribed in real time and the audio itself is never stored — only the resulting text becomes part of your chat history, the same as anything typed.

5. Payments

Payments are processed by Stripe, Inc., a PCI-DSS certified payment processor. When you purchase a subscription or credit pack you are taken to Stripe's hosted checkout. We receive confirmation of payment and your subscription status; we never see or store your card details. Stripe's privacy policy applies: stripe.com/privacy.

6. Who else we share your data with

We share data only with the service providers necessary to operate recipe2table. None of them may use your data for their own purposes beyond the services they provide to us:

We do not sell your data. We do not share it with advertising networks, analytics companies, or data brokers.

7. Where your data is stored and international transfers

Your personal data is stored on Hetzner servers in Nuremberg, Germany, within the European Union. Anthropic and OpenAI are US-based processors; any data sent to them for AI parsing is subject to their published privacy policies and applicable data transfer terms. Google and Stripe are global processors with established EU data transfer mechanisms.

8. Local storage

The app stores data on your device using browser local storage (not cookies). This includes your recipes for offline access, your preferences, and a session token to keep you signed in. We do not use advertising cookies or cross-site tracking. We do not display a cookie consent banner because we do not set non-essential tracking cookies.

9. Session tokens

After sign-in we issue a secure JWT (JSON Web Token) stored in your browser's local storage. This token identifies your session and is not shared with third-party sites. It is valid for up to two years and is renewed automatically while you remain active, so you stay signed in across visits; signing out or deleting your account removes it from your device.

10. Your rights under GDPR

As a person in the EU you have the following rights in relation to your personal data:

To exercise any right not covered by the in-app tools, email hello@recipe2table.com. We will respond within one month as required by GDPR.

You can also lodge a complaint with the Data Protection Commission of Ireland at dataprotection.ie.

11. Data retention

We retain your personal data for as long as your account is active. If you delete your account, all personal data (profile, recipes, collections, preferences, photos, pantry, Tootie's notes, and Tootie chat history) is permanently deleted immediately from the live service.

We keep a daily off-site backup of the database and recipe photos so that recipes deleted by accident (yours or a technical fault on our side) can be restored on request. This backup is used only for that purpose — it is never queried or processed for any other reason. A copy of your data made before you deleted your account or a recipe may persist in this backup for up to 100 days before it is automatically purged.

Payment and transaction records are retained as required by Irish tax law (section 886, Taxes Consolidation Act 1997). When you delete your account these records are anonymised — your personal identifiers are removed so the record can no longer be linked to you — rather than erased, because we are under a legal obligation to keep the financial figures. They contain only the minimum data necessary for that purpose.

What we retain from parsing your recipes (source URLs, photos, a short text excerpt) is described in section 4, and is deleted on the same schedule as the rest of your data.

12. Children

recipe2table is not directed at children. You must be 16 or older to use the service, in line with EU digital age requirements. We do not knowingly collect personal data from anyone under 16.

13. Changes to this policy

If we make significant changes we will update the date at the top of this page and notify you via the app. Continued use of the service after changes constitutes acceptance.

14. Contact

For any privacy-related questions or requests: hello@recipe2table.com

Declan Clancy, Ireland

← Back to recipe2table