Privacy Policy

Draft — to be reviewed before release. This text has not yet been checked by a lawyer or data protection expert and is not legal advice. It will be replaced by a reviewed version before Leekday is released.

Last updated: 19 October 2026 (draft version 2026-10-19-draft)

1. Who is responsible

The controller under the EU General Data Protection Regulation (GDPR) is [operator name, address, Austria]. Contact for privacy questions: [privacy contact email].

2. What we collect

• Account data: your email address, a securely hashed password or your Google account identity, and sign-in records such as the time of your last sign-in.
• Profile data: display name, sex, year of birth, height, weight, activity level, goal, diet, food allergies, cooking preferences, cuisines and dislikes.
• Health data: your weight, allergies and diet are health-related data under Article 9 GDPR.
• Planning data: meal plans, recipes, favourites, pantry items, shopping lists and your household memberships.
• Photos you choose to scan of your fridge or pantry.
• Usage and security data: counts and cost of AI requests, rate-limit records, failed sign-in attempts and security events.
• IP address: used to limit how often the app's servers can be called, including the sample day you can see before signing up, and for security. Supabase also records it in its access logs.
• Before you sign up: if you try the sample day during the first questions, your answers on allergies, diet, cuisines and your calorie target are sent to our server to pick a sample day from a ready-made library. They are not stored and no AI is used.

We do not use your data for advertising, and we do not sell it.

3. Why we use it and on what legal basis

• To provide the app and your account (Article 6(1)(b) GDPR, contract).
• To plan meals around your body, goal, diet and allergies. Because this uses health data, we ask for your explicit consent when you sign up (Article 9(2)(a) GDPR). You withdraw this consent by deleting your account (Profile → Privacy → Delete account); this does not affect processing done before.
• To show you a sample day before you sign up (Article 6(1)(b) GDPR, steps you asked for before an agreement). The answers you sent are used only for that one request and not kept.
• To keep the service secure, prevent abuse and send security alerts (Article 6(1)(f) GDPR, our legitimate interest in a safe service).
• To meet legal obligations (Article 6(1)(c) GDPR).

4. Who processes data for us

We use these service providers (processors). Each works only on our instructions under a data processing agreement.

• Supabase (Supabase Inc.): database, sign-in, file storage and server functions. Our project is hosted in the EU, in Frankfurt, Germany.
• Anthropic (Anthropic PBC, USA): the AI model Claude creates meal plans and recipes and reads pantry photos. It receives the planning details it needs (for example diet, allergies, calorie target and pantry items), not your email address.
• Google Gemini (Google LLC / Google Ireland): creates pictures of dishes from recipe titles. It receives no personal data about you.
• Resend (Resend Inc., USA): sends account emails such as sign-up confirmation, password reset and security alerts. It receives your email address and the content of those emails.
• Google Sign-In (Google): only if you choose to sign in with Google. Google tells us your email address and name.

Transfers to providers outside the EU are protected by the EU–US Data Privacy Framework where the provider is certified, or by the European Commission's standard contractual clauses.

5. How long we keep data

• Account, profile and planning data: until you delete your account.
• Pantry photos: deleted right after the scan has been read. Photos left over from an interrupted upload are deleted the next time someone in your household scans. The scan's list of found items is deleted after 7 days.
• Security and rate-limit records, including IP addresses: kept only as long as needed for security, at most [retention period].
• When you delete your account, your personal data is deleted. Households you share are handed over to their longest-standing member; your name is removed from them. Dish pictures, which contain no personal data, are kept.

6. Households

Members of a household see the household's plans, pantry and shopping lists, and, for each other member: their display name, their diet, all of their food allergies and their portion size in shared plans. Diet and allergies are health data, so only invite people you trust. Members do not see your email address, weight, height, year of birth or goal.

7. Leekday administrators

A small number of administrators, invited by the owner and required to use two-factor authentication, can see in the admin panel: your account email, the date you signed up, how many plans you have and the cost of your AI requests. They use this to run the service and to help you. They do not see your profile details, allergies or plans.

8. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• export your data in a machine-readable format (Profile → Privacy → Export my data). The export includes your AI usage and its cost and your account's security events. Rate-limit records and failed sign-in attempts are not part of the export; they are available on request;
• correct inaccurate data (most of it you can edit in the app);
• delete your data and account (Profile → Privacy → Delete account);
• restrict or object to processing;
• withdraw your consent at any time, with effect for the future, by deleting your account (Profile → Privacy → Delete account);
• lodge a complaint with a data protection authority, in particular the Austrian Data Protection Authority (Datenschutzbehörde, www.dsb.gv.at) or the authority where you live or work.

To use these rights, contact us at [privacy contact email].

9. Security

Data is encrypted in transit. Your session is stored in the iPhone's Keychain. Access to your data is limited by strict access rules, and you can turn on two-factor authentication.

10. Children

Leekday is not meant for people under 16.

11. Changes

If we change this policy in an important way, we will tell you in the app and, where needed, ask for your consent again.