Contents
Munchii is an app for saving, cooking and sharing recipes. This policy explains what personal data we collect, why, and what you can do about it. We've tried to write it in plain English rather than legalese.
1. Who we are
Munchii is run by David Markusse and Niels Koeman, based in the Netherlands, who are jointly responsible (joint controllers) for the personal data described here. In this policy "Munchii", "we" and "us" means the two of us. You can reach us about anything privacy-related at support@munchii.app. You can exercise your rights with either of us through that address.
2. What we collect
| Category | Examples | Source |
|---|---|---|
| Account data | Email address, username, display name, profile photo and sign-in provider: Apple, Google or email/password. If you use Apple's Hide My Email, we receive an Apple relay address. | You and your sign-in provider, at sign-up |
| Profile & preferences | Language, favourite cuisines, cooking level, kitchen style, bio | You, during onboarding and in settings |
| Recipes and posts you create | Recipes, ingredients, steps, photos, menus, drafts and saves | You, in the app |
| Social activity | Follows, followers, likes, comments, blocks and reports you submit | You and other users, in the app |
| Capture data | Photos you scan and audio you record to create a recipe | Your camera, photo library or microphone — only when you choose |
| Technical data | Authentication identifiers and server request/error logs used to operate and troubleshoot the service | Authentication and backend services |
We do not collect precise location, contacts, health data or advertising identifiers.
3. Why we use it
- To run the app — create your account, store your recipes, show your feed, deliver notifications. Legal basis: performance of a contract.
- To turn captures into recipes — read a scanned photo or transcribe a recording into structured ingredients and steps. Legal basis: performance of a contract, at your request.
- To keep Munchii safe — check public material using automated tools, review reports with human reviewers, enforce our Recipe & Safety Guidelines, and prevent abuse and spam. Legal bases: legitimate interests and applicable legal obligations.
- To fix problems — investigate service errors and support requests. Legal basis: legitimate interests.
- To feature your dish photos in marketing — on our website, social media or App Store listing, only with your opt-in permission. Legal basis: consent. You can withdraw permission at any time by emailing support@munchii.app; we stop new marketing use within 30 days.
- To contact you — service messages such as security or policy changes. Marketing email only if you opt in. Legal basis: legitimate interests / consent.
We do not sell your personal data, and we do not run advertising in the app.
4. Photos, voice and AI processing
Two Munchii features send your chosen input off your device for processing:
- Scan a recipe. Apple's Vision framework recognises text on your device. The recognised text is sent through our backend to OpenAI to extract a title, ingredients and steps. This scanning path sends text, rather than the original scan image, to OpenAI.
- Record a recipe. Your audio is sent through our backend to OpenAI for transcription, and the resulting text is structured into a recipe.
These features use OpenAI (OpenAI, L.L.C., USA). Under OpenAI's applicable API terms, API inputs are not used for model training by default. If you'd rather not use these features, you can type a recipe manually instead.
Camera, photo library and microphone access are requested only at the moment you use the relevant feature, and you can revoke them in iOS Settings at any time.
Moderation and reports
We use automated tools, including OpenAI, to check public recipes, photos, comments, usernames and bios for possible rule violations. Public text and images may be sent to OpenAI for these checks. A person reviews reports, appeals and permanent account bans. We review reports within 24 hours, seven days per week.
5. Who we share it with
- Other users — anything you publish: your username, profile, published recipes, comments and likes. Drafts and private recipes are never shown to others.
- Google Firebase — provides authentication, database infrastructure and file storage for your account, recipes and posts.
- Apple and Google — provide authentication when you choose their sign-in options.
- OpenAI — processes recipe text, audio and public material for the AI and moderation purposes described in section 4.
- Authorities — only where we're legally required, or to protect someone's safety.
Some providers process information outside the EEA, including OpenAI in the USA. You can contact support@munchii.app for information about where your data is processed and the safeguards that apply.
6. How long we keep it
| Data | Retention |
|---|---|
| Account, recipes & published posts | Until you delete them, or you delete your account |
| Blocks | Until you unblock the person or delete your account; related report case records have the separate retention period below |
| Reports and moderation case records | 24 months after the case is closed |
| Marketing permission and dish photos selected for marketing | Until you withdraw permission; we stop new marketing use within 30 days of withdrawal |
| Recipes saved by other users | Saves refer to the original recipe, rather than storing independent copies. If the original is deleted or becomes inaccessible, it is no longer available through that saved reference. |
Account deletion removes your profile and authored recipes and comments. Reports and related case records have the separate retention period above. See account deletion support to make a request.
7. Your rights
If you're in the EEA or UK you have the right to access, correct, delete, restrict or object to our processing of your data, to data portability, and to withdraw consent where we rely on it. Email support@munchii.app; we reply within seven days and handle your request within the applicable legal deadline. You can also complain to your local data protection authority — in the Netherlands, the Autoriteit Persoonsgegevens.
You can request human review of moderation decisions involving automated tools. See moderation appeals.
Most of this you can do yourself in the app: edit your profile, delete individual recipes, or delete your account. You can also request account deletion by email.
8. Security
Data is encrypted in transit (TLS) and at rest by our hosting providers. Access to production systems is limited to people who need it and protected by multi-factor authentication. No system is perfect; if a breach affects you, we'll notify you and the relevant regulator as required by law.
9. Children
You must be 16 or older to use Munchii. If we learn that someone under 16 has an account, we delete it. If you think this is the case, contact us.
10. Cookies on this website
The site sets no cookies and loads nothing from third parties.
11. Changes to this policy
If we make a material change we update the date and notify you in the app at least 14 days before it takes effect.
12. Contact
For privacy questions, data requests or any other help, email support@munchii.app.
You can contact us in English or Dutch.