Privacy Policy
Last updated: 4 April 2026
1. Introduction
Kitchen Counter("we", "our", or "us") operates the Kitchen Counter mobile application and the website at https://kitchencounter.app. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our services.
This Privacy Policy explains how we process your personal data when you use our services. Our lawful basis for processing is described in Section 10 below.
Kitchen Counter is operated by [Data Controller Name], [Address]. The data controller for the purposes of the UK GDPR is [Data Controller Name]. Contact us at support@kitchencounter.app for any data protection queries.
2. Data We Collect
We collect the following personal data when you create an account and use the app:
- Account information: email address and display name
- Preferences: dietary preferences (e.g. vegetarian, gluten-free)
- App content: favourite recipes, shopping lists, pantry items, and meal plans
- Device information: device type (e.g. iOS or Android)
- IP address: collected automatically by Firebase for security and authentication purposes
We do not collect precise location data, contacts, or any data beyond what is listed above.
3. How We Use Your Data
Your data is used for the following purposes:
- App functionality: to provide core features such as saving recipes, managing shopping lists, tracking pantry items, and creating meal plans
- Subscription management: to manage your subscription status and provide access to premium features
- Personalised AI recipe generation: to generate recipes tailored to your ingredients, dietary preferences, and meal plans
4. Third-Party Services
We use the following third-party services to operate Kitchen Counter:
4.1 Firebase (Google)
We use Firebase for user authentication (sign-in) and cloud storage of your account data. Firebase is operated by Google and processes data in accordance with Google's Privacy Policy.
4.2 RevenueCat
We use RevenueCat to manage in-app subscriptions across platforms. RevenueCat processes your subscription status and anonymous identifiers. See the RevenueCat Privacy Policy.
4.3 OpenAI
We use OpenAI's API for AI-powered recipe generation. All requests to OpenAI are made server-side — your personal data is not shared directly with OpenAI. Only the ingredients and preferences needed to generate a recipe are sent, and these are not linked to your identity. See the OpenAI Privacy Policy.
4.4 Apple & Google (Payment Processing)
Payments for subscriptions are processed by Apple (App Store) or Google (Google Play). We do not receive or store your payment card details. Payment processing is governed by Apple's and Google's respective privacy policies.
5. International Data Transfers
Some of our third-party service providers are based outside the United Kingdom. When your data is transferred internationally, we ensure appropriate safeguards are in place:
- Firebase (Google): data may be processed in the US or EU. Google operates under Standard Contractual Clauses and has achieved adequacy determinations for certain jurisdictions.
- RevenueCat: based in the United States. Data transfers are covered by Standard Contractual Clauses.
- OpenAI: based in the United States. Recipe generation requests are processed server-side, and your personal identity is not included in these requests. OpenAI does not use API inputs to train its models.
- Apple and Google: process payment data in accordance with their own privacy policies and international data transfer mechanisms.
6. Data Security
We take appropriate technical and organisational measures to protect your personal data. All data transmitted between the app and our servers is encrypted in transit using TLS. Data at rest is encrypted via Firebase's built-in encryption. Access to user data is restricted to authorised personnel only.
7. Data Retention
We retain your personal data for as long as your account is active and you continue to use Kitchen Counter. If you delete your account, all associated data will be permanently deleted from our systems within 30 days of the deletion request.
8. Account Deletion
You can delete your account and all associated data at any time by navigating to Profile > Delete Account within the app. Upon deletion, all your personal data — including your recipes, shopping lists, pantry items, meal plans, and preferences — will be permanently removed within 30 days.
9. Children's Privacy
Kitchen Counter is not directed at children under the age of 16, in accordance with the UK General Data Protection Regulation (UK GDPR). If we become aware that we have collected data from a child under the applicable age, we will take steps to delete that data promptly.
For users in other jurisdictions, we do not knowingly collect personal data from children under the age of 13.
10. UK GDPR Compliance
If you are located in the United Kingdom, the following additional provisions apply under the UK General Data Protection Regulation (UK GDPR).
10.1 Lawful Basis for Processing
We process your personal data on the following lawful bases:
- Contract performance: processing is necessary to provide the Kitchen Counter service you have signed up for, including account management, recipe generation, and subscription fulfilment.
- Legitimate interests: we may process data to improve our services, ensure security, and prevent fraud, where these interests are not overridden by your rights and freedoms.
Dietary preferences (such as "gluten-free" or "nut-free") may constitute special category data under UK GDPR Article 9 as they may reveal information about your health. We process this data on the basis of your explicit consent, which you provide when entering your dietary preferences in the app. You may withdraw this consent at any time by removing your dietary preferences from your profile.
10.2 Your Data Subject Rights
Under the UK GDPR, you have the following rights in relation to your personal data:
- Right of access: request a copy of the personal data we hold about you.
- Right to rectification: request correction of inaccurate or incomplete data.
- Right to erasure: request deletion of your personal data.
- Right to restriction: request that we restrict the processing of your data in certain circumstances.
- Right to data portability: request a copy of your data in a structured, machine-readable format.
- Right to object: object to processing based on legitimate interests.
- Right to lodge a complaint:you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data protection rights have been infringed.
10.3 How to Exercise Your Rights
To exercise any of these rights, please contact us at support@kitchencounter.app. We will respond to your request within one month, as required by the UK GDPR.
11. Cookies
The Kitchen Counter mobile app does not use cookies. The Kitchen Counter website uses only essential cookies that are strictly necessary for the website to function. We do not use any tracking, analytics, or advertising cookies.
12. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you via the Kitchen Counter app. We encourage you to review this page periodically for the latest information on our privacy practices.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at: