Privacy Policy

Last updated

Who we are

Lonc is made by , . For the purposes of the EU General Data Protection Regulation (GDPR) we are the data controller for the limited processing described below.

Privacy questions: . Everything else: .

What stays on your phone

Recipes, cookbooks, notes, ratings, cooking history, meal plans, shopping lists, pantry contents and all your settings are stored in the app's own storage on your device. Photographs and scans you attach to a recipe are copied into the app's private folder, so a recipe keeps its original picture even if you later delete it from your camera roll.

None of this is uploaded to us. If your phone is backed up to iCloud, that content is included in your own backup — that is Apple's service, not ours, and we have no access to it.

What we send to an AI vendor

Lonc uses OpenAI to turn links, photographs and handwriting into structured recipes. This is stated plainly before your first import, and you have to agree to it before anything is sent.

• Importing a link: we send the address of that page and the text we read from it. For social posts we also send the post's preview image.
• Importing photos or a scan: we send those images.
• Nutrition estimates and the "make it healthier" suggestion: we send the ingredients of that one recipe.

Nothing else is transmitted: not your other recipes, not your shopping list, not your meal plan, not your photo library, and no advertising or device identifier.

OpenAI processes the content to produce the recipe and returns it to us. We pass it to your phone and keep no copy on our server. We use OpenAI's API, where submitted content is not used to train their models.

You can withdraw this permission at any time in Settings. With it off, every other part of Lonc keeps working — you add recipes by typing them in.

Our server, and what it logs

Our server exists only to relay imports to OpenAI. It stores nothing: no recipes, no images, no user profiles, no database at all. Its logs record the time, the type of request and whether it succeeded or failed — never the contents of your request. Standard connection data such as your IP address is processed transiently to deliver the response and is not used to build a profile of you.

Subscriptions and payments

Lonc Plus is sold through Apple's In-App Purchase. Your payment is handled entirely by Apple; we never see your card details, your name or your billing address. We receive only the confirmation that a valid subscription exists for the Apple ID using the app. Restoring a purchase on a new phone goes through Apple, not through us. Apple's own privacy terms apply to that transaction.

What we never do

• No advertising anywhere in Lonc, and never while you are cooking.
• No analytics or tracking SDKs, no advertising identifiers, no cross-app tracking.
• We do not sell or share your data with anyone.
• No account, email address or phone number is required to use the app.

Permissions we ask for

• Camera — only to photograph cookbook pages and handwritten notes when you choose to scan.
• Photo library — only to read the photos you specifically pick for an import.
• Notifications — so kitchen timers still go off when the screen is locked, and so we can tell you a background import has finished. These are local notifications; no device token ever leaves your phone.
• Microphone — only if you record a voice note on a recipe.

Each is asked for at the moment it is first needed, and the app works without any of them.

Legal basis and retention

Sending an import to OpenAI relies on your consent (Article 6(1)(a) GDPR), given before your first import and withdrawable at any time in Settings. Operating the relay server and keeping it secure relies on our legitimate interest in providing a working service (Article 6(1)(f)).

We retain nothing from an import once the recipe has been returned to your phone. Technical server logs are kept for up to 30 days and then deleted. OpenAI retains API content for a limited period for abuse monitoring under its own terms, and not for training.

International transfers

OpenAI processes data in the United States. Those transfers are covered by the European Commission's Standard Contractual Clauses, included in OpenAI's data processing agreement with us.

Your rights

You have the right of access, rectification, erasure, restriction, objection and data portability under the GDPR. In practice, because we hold no copy of your content, you exercise most of these on the device itself:

• Export: Settings → Data & storage → Export exports all your recipes as a text file you can keep or move elsewhere.
• Erasure: Settings → Data & storage → Delete everything removes every recipe, image, list and setting from the device immediately and permanently. Deleting the app has the same effect.

If you believe we have handled your data improperly, you may write to us at , and you have the right to lodge a complaint with your national supervisory authority — in Slovenia, the Information Commissioner (ip-rs.si).

Children

Lonc is not directed at children under 13 and we do not knowingly collect information from them.

Changes to this policy

If we change how Lonc handles your data, we will update this page and change the date at the top. A change that widens what is sent from your phone will be presented in the app for your agreement before it takes effect.

Contact