Privacy policy

• Florian Francese, sole proprietor
• Trading under the business name mf2n.dev
• SIREN 939 378 782, Paris Commercial Register
• Address: 60 rue François Ier, 75008 Paris, France
• Dedicated privacy contact: privacy@recetteclic.app

We have not appointed a Data Protection Officer (DPO), as this is not required for our activity (article 37 GDPR). You may nonetheless send any data-related request to privacy@recetteclic.app; we reply within thirty (30) days maximum.

Data you provide

• Identity: first name, last name (or pseudonym), avatar (optional).
• Account: email address, password (hashed, never stored in plaintext), or Apple / Google identifier if you use social login.
• Content: recipes you import or create, sources (URLs, videos, images), social interactions (favorites, comments, likes, follows) if you use the community.
• Communications: content of your support emails.

Data collected automatically

• Technical data: device type, OS version, app version, language, time zone, anonymized install identifier.
• Logs: IP address (anonymized after 24 hours), request date and time, response codes, necessary for security and abuse detection.
• Error diagnostics: error traces (Sentry) without sensitive content.

We rely on the following subprocessors, who act only on our instructions and under GDPR-compliant data processing agreements (DPA):

Any update to this list will be published on this page with 30 days' notice in case of addition of a subprocessor that would access your identifying personal data.

Some of our subprocessors (OpenAI, Anthropic, Resend, Sentry, RevenueCat) are established in the United States. These transfers are framed by:

• Standard Contractual Clauses adopted by the European Commission (Implementing Decision 2021/914).
• Where applicable, certification under the EU-US Data Privacy Framework (Decision (EU) 2023/1795).
• Additional measures: encryption in transit (TLS 1.3), data minimization (no direct user identifier sent to AI providers), prompt deletion at subprocessor.

You may request a copy of the safeguards in place by writing to privacy@recetteclic.app.

Pursuant to articles 15 to 22 of the GDPR, you have the following rights:

• Right of access: obtain a copy of the data concerning you.
• Right to rectification: correct inaccurate data.
• Right to erasure ("right to be forgotten"): delete your account and data.
• Right to restriction: temporarily restrict processing.
• Right to portability: retrieve your recipes in a structured format (JSON).
• Right to object: object to processing based on legitimate interest.
• Right to withdraw your consent at any time, without retroactive effect.
• Right to give directives about your data after death (art. 85 French Data Protection Act).
• Right to lodge a complaint with the CNIL (cnil.fr) if you believe your rights are not respected.

To exercise these rights: write to privacy@recetteclic.app. We reply within thirty (30) days maximum. For simple requests (export, deletion), most actions can be done directly from the app.

The Service is intended for persons aged fifteen (15) or over, in accordance with the digital age of consent set by article 7-1 of the French Data Protection Act. Minors under 15 must obtain prior consent from a parent or legal guardian.

If you are a parent and find that a child under 15 has created an account without your authorization, write to privacy@recetteclic.app: we delete the account within 72 hours.

We implement the following technical and organizational measures:

• Encryption of all communications (TLS 1.3).
• Password hashing (scrypt algorithm via Better Auth).
• Encryption at rest for databases.
• Multi-factor authentication available for administrator accounts.
• Access logging and security alerts.
• Regular security updates.

In case of a data breach likely to result in a high risk to your rights and freedoms, we will inform you individually as soon as possible pursuant to article 34 GDPR, and notify the CNIL within 72 hours (art. 33 GDPR).

We may update this policy. The date at the top of the page reflects the latest change. Material changes will be notified to you by email or in-app notification at least thirty (30) days before they take effect.