1. Who we are
cookAIfood (cookaifood.com, the "Service") is operated by cookAIfood, Spain. We are the controller of the personal data described here. Contact for anything about your data: [email protected].
2. What data we process, why, and on what legal basis
| Data | Why | Legal basis (GDPR Art. 6) |
|---|
| Account data: username, email address, password (stored hashed), account status, creation date | Create and secure your account; send confirmation and password-reset emails | Contract (6(1)(b)) |
| Your requests and results: what you type or choose when creating recipes or menus, the recipes and images generated, credits and usage | Provide the generation service and your history | Contract |
| Photos you upload (the "recipe from a photo" feature) | Describe the visible ingredients so we can create a recipe. Please upload only photos of food or ingredients and do not include people. | Contract |
| Public profile and published recipes: your username and the recipes you publish. Recipes created on the free plan are published automatically. | Show recipes in the public gallery and on your profile | Contract (publishing function) |
| Purchase data: package, amount, date, payment status, payment reference; for crypto payments the currency, address and transaction id | Process your payment, keep accounting records, handle refunds and disputes | Contract; legal obligation (6(1)(c)) for accounting |
| Affiliate data: your referral code, who you referred (username), commissions, balance, cash-out requests | Run the affiliate programme and pay commissions | Contract; legal obligation |
| Support messages: name, email and message text | Answer your request | Contract; legitimate interest (6(1)(f)) |
| Technical and security data: IP address and request data processed by our hosting and CDN, rate limiting, reCAPTCHA signals on the sign-up page | Keep the Service secure and prevent abuse | Legitimate interest |
| Analytics: pages visited, device and approximate location via Google Analytics | Understand and improve the Service | Consent (6(1)(a)); only if you accept analytics cookies |
| Product update emails, if you receive them | Send news about the Service | Consent (6(1)(a)); you can withdraw at any time using the unsubscribe link |
We do not sell your personal data. We do not use it for automated decisions that produce legal effects on you.
3. Who receives your data
We use these providers to run the Service:
- OpenAI (United States): receives your recipe requests and, if you use the photo feature, your uploaded photo, to generate text and to describe the image.
- Replicate (United States): receives image prompts derived from recipes to generate food images.
- Stripe (Ireland and United States): card payments and your email at checkout. Card numbers never reach our servers.
- NOWPayments: cryptocurrency payments.
- Cloudflare (United States, global network): content delivery, security and performance, including cookie-free visit statistics (Cloudflare Web Analytics), which do not track you across sites.
- Google: Google Analytics (only with your consent) and reCAPTCHA on the sign-up page. When you click "Find nearby" we only open a Google Maps link. Fonts and icons are served from our own server.
- Amazon Web Services (Amazon SES, Stockholm region): sending our emails.
- DigitalOcean (United States): server hosting.
- Authorities, courts and professional advisers where the law requires it or to protect our rights.
If you publish a recipe, it is visible to everyone on the internet and may be indexed by search engines. If you were referred by an affiliate, that affiliate can see your username and the commissions earned from your purchases.
4. Transfers outside the European Economic Area
Several providers above are in the United States. Where a provider is certified under the EU-US Data Privacy Framework we rely on the European Commission's adequacy decision for that provider; otherwise, and as a fallback, we rely on the Standard Contractual Clauses (Art. 46 GDPR). You can ask us for information about the safeguards at [email protected].
5. How long we keep data
- Account data, your private recipes, requests and results: until you ask us to delete your account. You can disable your account in your account settings; to have your data erased, email us from your account address.
- Uploaded photos: sent to OpenAI to describe the ingredients and deleted from our server right after they have been processed. We do not keep them.
- Published recipes: while they stay published. If you ask for erasure we remove your name from them.
- Support messages: as long as needed to handle your request and any follow-up.
- Invoices, payment and crypto deposit records: as long as accounting and tax law require.
- Server and security logs: for a limited period needed for security and abuse prevention.
- Analytics: for the period set in our Google Analytics account (up to 14 months).
6. Your rights
Under the GDPR you may ask us to give you access to your data, correct it, erase it, restrict or object to its processing, and receive it in a portable format, and you may withdraw consent at any time without affecting earlier processing. To exercise a right, email [email protected] from your account address. We answer within one month. We may keep data we are legally required to keep, for example invoices. You also have the right to complain to the data protection authority of your country of residence; in Spain this is the Agencia Española de Protección de Datos (www.aepd.es).
7. Cookies
See our Cookie Policy. You can change your analytics choice at any time with "Cookie settings" in the footer.
8. Children
The Service is for people aged 16 or older. We do not knowingly collect data from younger children. If you believe a child has given us data, contact us and we will delete it.
9. Security
We use HTTPS, hashed passwords and access controls, and limit access to production systems. No system is perfectly secure; where the law requires it we will notify you and the authority of a personal data breach.
10. AI-generated content
Recipes and images on cookAIfood are generated by AI models and can be inaccurate, including nutrition values and allergens. See How we use AI.
11. Changes
We will post changes on this page and, for material changes, tell you by email or in the Service. The date at the top shows the latest version.
12. Contact
cookAIfood, Spain. Email: [email protected]. See also the Contact page.