Cook with Maki ("Maki", "the App") is a recipe app for the Instant Pot, operated by Bram Nouwen (sole proprietorship, business number 1017.615.815). We take your privacy seriously and process your personal data in accordance with the General Data Protection Regulation (GDPR). This Privacy Policy explains what data we collect, why, and how we protect it.

Data controller: Bram Nouwen, Hassaluthdreef 12A/1, 3500 Hasselt, Belgium. Contact: privacy@cookwithmaki.com.

1. Why we process your data

We process your personal data for the following purposes and legal bases:

• Providing our service (recipe management, shopping lists, meal planning) - based on contract performance (Art. 6(1)(b) GDPR)
• Operating and securing the App - based on legitimate interest (Art. 6(1)(f) GDPR)
• Account registration and management - based on contract performance (Art. 6(1)(b) GDPR)
• Analyzing usage to improve the App - based on your consent for analytics cookies (Art. 6(1)(a) GDPR)
• Responding to your questions - based on contract performance (Art. 6(1)(b) GDPR)
• Informing you about changes to our services - based on legitimate interest (Art. 6(1)(f) GDPR)

2. What data we collect

We collect the following categories of personal data:

• Email address (account registration and login)
• Display name (profile, optional)
• Recipes you create or import
• Shopping lists and household settings
• Preferences (language, unit system, pot size, diet, allergies)
• Usage behavior on the App (with consent, via analytics cookies)
• Server logs (IP address, browser, operating system) - automatically collected

3. How long we keep your data

Your data is kept as long as necessary for the purpose it was collected. Specific retention periods:

• Account data (email, name, recipes, preferences): until you delete your account (+ 30 days)
• Analytics data (usage behavior): 1 year after last interaction
• Server logs (IP address, browser info): 1 year
• Contact inquiries (name, email, message): 2 years after communication

4. Who we share data with

We work with the following processors to provide the App:

• Supabase: database and authentication - EU (Frankfurt)
• Vercel: hosting and infrastructure - EU/US
• PostHog: product analytics - EU - only with your consent
• Google Analytics via Google Tag Manager: website analytics - US (Data Privacy Framework) - only with your consent
• Google Gemini: AI recipe extraction - US (Data Privacy Framework)
• OpenAI: recipe translation - US (Data Privacy Framework)
• Upstash: rate limiting - EU

For US-based services, data transfers are based on the EU-US Data Privacy Framework. You can verify participating companies at dataprivacyframework.gov.

We do not sell data to third parties and do not show advertising.

Logged-in users who consent to analytics: when you consent to analytics cookies, we identify your analytics profile with your email address and display name to understand how registered users use the App. You can withdraw consent at any time via the cookie settings.

5. Your rights (GDPR)

You can contact us at privacy@cookwithmaki.com to exercise the following rights:

• Right of access and copy of your personal data
• Right to rectification of incorrect data
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time
• Right to lodge a complaint with the Data Protection Authority

Belgian Data Protection Authority: Drukpersstraat 35, 1000 Brussels. Tel: +32 (0)2 274 48 00. Email: contact@apd-gba.be

6. Cookies

The App uses cookies for authentication, preferences, and analytics (with your consent). For detailed information about which cookies we use, see our Cookie Policy.

7. Security

We take appropriate technical and organizational measures to protect your data, including SSL/TLS encryption and restricted access for authorized personnel.

8. Changes to this policy

We may update this Privacy Policy periodically. Changes will be posted on the App.

9. Contact