Legal

Privacy Policy

Last updated: 1 August 2026

In short

• BiteClub stores the account details you sign up with and the recipes and meal plans you create.
• There is no advertising, no analytics SDK and no tracking of any kind in the app.
• Your data is never sold, and it is not shared with anyone except the service providers listed below.
• You can delete your account, and everything attached to it, from inside the app at any time.

Who is responsible

BiteClub is operated by the developer reachable at michael@rcktsftwr.com. Write to that address for any question about your data or to exercise the rights described below.

What is collected, and why

Account details

Your email address, a display name, and your password — the password is stored only as an Argon2 hash and can never be read back. Your email address is used to verify your account, to send password resets, and to contact you about the service. Verification and reset codes are stored temporarily and expire.

What you put in the app

Your household name and its members, your recipes (titles, steps, ingredients, tags), photos you attach to recipes, your swipe votes, the resulting meal plans, and your shopping lists. This content is shared with the other members of your household — that is the point of the app — and with nobody else.

Recipe photos are stored on Google Cloud Storage. They are served over an HTTPS address that contains a random identifier: the address is not listed or indexed anywhere, but anyone who has the address can open the image, so treat a recipe photo as unlisted rather than secret.

Photos you scan with AI

When you photograph a cookbook page or a screenshot to import it as a recipe, that image is sent to Google's Vertex AI (Gemini) to extract the text, and the extracted recipe is saved to your household. BiteClub uses Vertex AI's global endpoint, so this processing can take place on Google infrastructure outside the European Union. Google acts as a processor on our behalf under its Cloud data processing terms and does not use the image to train its models. We also keep a count of your scans in order to enforce the free-tier allowance.

Subscriptions

If you buy BiteClub Pro, Apple handles the payment. BiteClub never sees your payment details. What we store is the identifier Apple gives the transaction, the product bought, when it expires, and whether it is set to renew — the minimum needed to know whether your household has Pro.

Technical logs

Our servers keep short-lived request logs, which include IP addresses, to operate the service and to investigate errors and abuse.

What is not collected

BiteClub contains no advertising, no analytics or attribution SDK, no third-party tracker, and no cross-app or cross-site tracking. The app does not ask for your contacts, your location or your camera roll — photos reach the app only through the system picker, one image at a time, when you choose one. The app does not send push notifications.

Who else processes your data

• Google Cloud — recipe image storage (Frankfurt, Germany) and AI recipe extraction (global, see above).
• Brevo — sending transactional email such as verification codes and password resets.
• Apple — App Store purchases and subscription status.
• Our hosting provider — the BiteClub servers and database, located in Germany.

Each acts as a processor under contract and only for the purposes above.

How long it is kept

Your account and content are kept until you delete them. Deleting your account deletes it immediately and permanently: your account record, your votes, your sessions and your saved credentials all go with it. If you were the last member of your household, the household and all of its recipes, meal plans and shopping lists are deleted too. If other members remain, the household and its recipes stay with them, no longer attributed to you.

Deleting your account

In the app, open Profile and tap Delete account. There is no undo, and no waiting period. Note that deleting your account does not cancel an active subscription — cancel that in Settings › Apple Account › Subscriptions, since only Apple can. You can also email michael@rcktsftwr.com and ask us to do it.

Your rights

Under the GDPR you can request access to your data, correction of it, deletion of it, restriction of its processing, and a copy of it in a portable form; you can object to processing and withdraw consent; and you can complain to a data protection authority. Email michael@rcktsftwr.com and we will respond within one month.

Children

BiteClub is not directed at children and we do not knowingly collect data from children under 16. If you believe a child has created an account, email us and we will delete it.

Changes

If this policy changes materially, the date at the top changes with it and the new version is published on this page.