Privacy Statement

About this statement

This privacy statement explains which personal data we process when you use SmaakApp or the smaak.app website, why we do so, and what rights you have.

We follow the General Data Protection Regulation (GDPR) in doing so.

Who is responsible

SmaakApp is a product of Koppes Media. SmaakApp is a product name, not a company in its own right; Koppes Media is the controller for the data processed in the app and on the website.

Koppes Media · Snoekbaarsstraat 35, 1432 PE Aalsmeer, the Netherlands · Chamber of Commerce 42148618 · privacy@smaak.app

What data we process

We process the following categories of data:

• Account data: your email address, your password (stored hashed) and your language and theme preference.
• Recipe content: the links, texts and photos you add, and the recipes generated from them.
• Subscription and payment data: your plan, its status and a payment reference. Your card or account details are processed by our payment provider; we do not store them.
• Usage and technical data: device and browser details, IP address, log files and which features you use.
• Communication: the messages you send us when you get in touch.

Why we process it

We use your data to:

• create your account and run the app;
• generate recipes, allergen tags, course classification and translations;
• handle subscriptions and payments;
• answer your questions and provide support;
• prevent and detect abuse, fraud and malfunctions;
• improve the app based on aggregated usage;
• show ads on the Free plan;
• meet legal obligations, such as the retention period for invoices.

On which legal bases

• Performance of the contract: everything needed to deliver the app, including the AI processing of your recipes and handling your subscription.
• Legitimate interest: security, abuse prevention and product improvement. We weigh that interest against your privacy each time.
• Consent: optional analytics, personalised advertising and newsletters. You can withdraw consent at any time.
• Legal obligation: including keeping invoices for the tax authorities.

AI processing

To produce recipes, allergen tags and the course classification, we send the content you add (links, texts and photos) to Google’s Gemini API. Translations into Dutch, English and German run through Microsoft’s Azure AI Translator. This happens solely to return the result to you.

Under both providers’ business terms, your content is not used to train their models. Photos are not kept longer than needed after processing.

No automated decision-making takes place that produces legal effects for you.

Ads on the Free plan

The Free plan shows ads. Those ads are not based on the content of your recipes.

Our advertising partner may place cookies or similar identifiers. Where consent is required for that, we ask for it first. On a paid plan you see no ads.

Sharing with third parties

We never sell your data. We do use service providers that process data on our behalf. A data processing agreement is in place with each of them.

Transfers outside the EEA

We try to keep data within the European Economic Area. Where a service provider processes data outside it, this is based on an adequacy decision of the European Commission or on the EU Standard Contractual Clauses, with additional measures where needed.

How long we keep data

• Account and recipes: as long as your account exists. After you delete your account we erase them within thirty days; backups lag behind by up to ninety days.
• Invoices and payment data: seven years, because of the statutory tax retention period.
• Log files and technical data: up to twelve months.
• Support messages: up to twenty-four months after the case is closed.

Security

We protect your data with encryption in transit (TLS) and at rest, hashed passwords, role-based access on a least-privilege basis, and regular backups.

We select our providers partly on their security measures. If you discover a vulnerability, please report it to privacy@smaak.app.

Your rights

Under the GDPR you have the following rights:

• access to the data we hold about you;
• rectification of incorrect data;
• erasure of your data;
• restriction of processing;
• objection to processing based on legitimate interest;
• portability of your data;
• withdrawal of consent given earlier.

How to exercise them

You can delete your account and all your data yourself in the app. For the other requests, email privacy@smaak.app; we respond within one month.

If you disagree with how we handle your data, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Cookies and similar techniques

This website places no tracking cookies of its own accord. Your language and theme preference are kept in your browser’s local storage; that data stays on your own device.

If you consent, we load Google Analytics to measure how the site is used. If you decline, Google Analytics is not loaded and nothing reaches Google. Your choice is remembered and can be changed again at the bottom of any page.

In the app we use functional cookies to keep you signed in. Analytics and advertising cookies are only placed with your consent, which you can withdraw later.

Children

SmaakApp is not aimed at children under 16 and we do not knowingly collect their data. If you believe a child created an account without permission, contact privacy@smaak.app and we will delete the account.

Changes to this statement

We may update this privacy statement. The current version is always on this page, with the date of the last change at the top. We will notify you of significant changes by email or in the app.

Contact

Koppes Media · Snoekbaarsstraat 35, 1432 PE Aalsmeer, the Netherlands

Chamber of Commerce 42148618

Privacy questions: privacy@smaak.app