Privacy Policy
Last updated: February 2026
urCooked ("we", "us", "our") operates the urCooked mobile application and website at urcooked.nl. This privacy policy explains how we collect, use, and protect your personal data.
1. Data We Collect
When you use urCooked, we collect:
- Account information: kitchen name, email address, and password (stored as a bcrypt hash)
- Chef profiles: names and optional avatar images for household members
- Content you create: recipes, meal plans, shopping lists, polls
- Images: recipe photos and chef avatars you upload
- Device tokens: if you enable push notifications on the mobile app
- Technical data: error logs and stack traces for debugging (via Sentry)
2. How We Use Your Data
- To provide and operate the urCooked service
- To authenticate your household and manage sessions
- To send push notifications you opt into (new polls, meal reminders)
- To send transactional emails (password resets)
- To process subscription payments via Apple App Store or Google Play
- To monitor and fix errors in the application
3. Third-Party Services
We share data with the following processors to operate urCooked:
| Service | Purpose | Data shared |
|---|---|---|
| Cloudinary | Image hosting | Recipe photos, chef avatars |
| OpenAI | Recipe scanning (AI extraction) | Photos of recipes you scan |
| Firebase Cloud Messaging (Google) | Push notifications | Device tokens, notification content |
| Resend | Transactional email | Email address, kitchen name |
| Sentry | Error tracking | Error logs, stack traces, environment metadata |
| RevenueCat | Subscription management | Kitchen ID, transaction IDs, subscription status |
We do not sell your personal data to any third party.
4. Cookies
We use three cookies:
- session: a JSON Web Token (JWT) to keep you logged in. Essential for the app to function.
- csrf_token: a security token used to prevent cross-site request forgery. Deleted on sign-out.
- lang: stores your language preference (e.g. "nl" or "en").
We do not use tracking cookies or third-party analytics cookies.
5. Data Retention
Your data is stored for as long as your account exists. When you delete your account (via Settings), all your data is permanently removed, including all recipes, meal plans, shopping lists, chef profiles, and device tokens.
6. Your Rights (GDPR)
Under the General Data Protection Regulation (GDPR), you have the right to:
- Access your personal data
- Rectify inaccurate data
- Delete your account and all associated data (available in Settings)
- Data portability: request a copy of your data
- Object to processing of your data
- Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens)
7. Data Security
We protect your data with:
- HTTPS encryption for all connections
- Bcrypt password hashing (passwords are never stored in plain text)
- JWT-based session tokens with expiration
- Rate limiting on authentication endpoints
8. Children
urCooked is not directed at children under 16. We do not knowingly collect personal data from children under 16. Chef profiles for minors should be created and managed by a parent or guardian.
9. Changes to This Policy
We may update this privacy policy from time to time. The "Last updated" date at the top indicates when it was last revised.
10. Contact
For privacy-related questions or to exercise your GDPR rights, contact us at: privacy@urcooked.nl