Privacy Policy
1. Controller
The controller responsible for processing personal data in the Endo-Food app and this website is:
Robert Haas
Käthe-Kruse-Str. 16
80997 Munich
Germany
Email: robert.1158.haas@gmail.com
2. Data we process
2.1 Account data
On registration we store your email address and a unique user ID. When signing in with Apple, we receive only the data you explicitly share (typically anonymous or plain email, and optionally your name).
2.2 Profile data
You can optionally add a display name, a handle (e.g. „@anna"), a short bio and a profile picture. This data is visible to other registered Endo-Food users inside the app.
2.3 Content
You create content in the app such as recipes, ingredient lists, tolerance ratings, notes and cycle data. This is encrypted in transit and stored on servers of our processor Google in Belgium (europe-west1). You retain full control over visibility (private, household, followers, public).
2.4 Media
Uploaded images (profile picture, recipe photos) are compressed and stored on servers of our processor Google in the United States (us-east1). Delivery is global via a CDN. The transfer to the United States is covered by Standard Contractual Clauses and the EU-US Data Privacy Framework. No biometric analysis is performed.
2.5 AI processing
When you use AI functions (e.g. recipe generation, ingredient assessment), your inputs are sent to Google's Gemini model. We forward only the request, not your identity or other profile data. Google processes those requests according to its own privacy notice and data-processing agreements; processing happens in region europe-west1 (Belgium).
2.6 Technical data
On each app session we collect technical data such as device type, iOS version, app version, crashes and general diagnostic telemetry. This is processed anonymously to keep the app stable.
3. Purposes and legal bases
- Performance of contract (Art. 6(1)(b) GDPR): providing core functionality — account, content storage, device sync.
- Legitimate interests (Art. 6(1)(f) GDPR): app security, error diagnosis, abuse protection (App Check).
- Consent (Art. 6(1)(a) GDPR): optional AI features, public visibility of your content.
4. Recipients of your data
We use the following processors with whom we have agreements under Art. 28 GDPR:
- Google Ireland Ltd. (Firebase / Google Cloud): authentication, database (Firestore in europe-west1), AI models (Vertex AI Gemini in europe-west1), crash reporting (Crashlytics), abuse protection (App Check). Cloud Storage (profile pictures and recipe photos) is hosted in us-east1. Auth runs globally. Transfers to the United States are covered by Standard Contractual Clauses and the EU-US Data Privacy Framework.
- Apple Inc.: app identification and distribution via the App Store, Sign in with Apple, App Attest. See apple.com/privacy.
5. Retention
Your data is kept while your account exists. If you delete your account, your personal data is irreversibly removed within 30 days. Content you've shared with household members or the public may remain in their backups.
Anonymous telemetry for error diagnosis is retained for up to 90 days.
6. Your rights
Under GDPR you have the right to:
- Access (Art. 15) — find out what data we hold about you
- Rectification (Art. 16) — correct inaccurate data
- Erasure (Art. 17) — delete your account and data, see Delete account
- Restriction (Art. 18)
- Data portability (Art. 20) — receive your data in a machine-readable format
- Objection (Art. 21)
- Lodge a complaint with a supervisory authority (Art. 77)
To exercise these rights, contact us at robert.1158.haas@gmail.com.
7. Account deletion
You can delete your account from inside the app at any time (Profile → Delete account) or via our website — see Delete account. Once confirmed, all data is irreversibly removed within 30 days.
8. Cookies and tracking on this website
This website does not use tracking cookies, analytics tools or advertising pixels. Technically necessary cookies are only set if you, for instance, save a language preference.
9. Changes to this policy
We may adapt this policy when features or legal frameworks change. The current version is always available at this URL.