Privacy Policy

Cookie App is operated by Furkan Gönel ("Data Controller"). For any privacy-related inquiries or requests, please contact us at:

• Email: support@cookie-ai.app
• Website: https://cookie-ai.app

We collect the following categories of personal data:

a) Account Data

• Email address (used for authentication)
• Authentication tokens provided via Firebase Authentication

b) Content Data

• Recipes you create, import, or save within the App

c) Usage & Analytics Data (Firebase Analytics)

• App usage patterns and feature interactions
• Session duration and frequency of use
• Cihaz türü, işletim sistemi sürümü ve uygulama sürümü
• General geographic region (country/city level)

d) Subscription & Purchase Data (RevenueCat)

• Subscription status (free / premium)
• Purchase history and entitlement data (managed by the App Store or Google Play)
• We do not have access to your credit card or payment details.

e) AI Processing Data (OpenRouter)

• Content you submit for AI recipe extraction (e.g., URLs, shared text/images)
• AI-processed outputs returned to you

For users in the European Economic Area (EEA), we process your personal data under the following legal bases:

• Contract performance (Art. 6(1)(b)): to provide the App's core functionality
• Legitimate interests (Art. 6(1)(f)): for analytics and service improvement
• Legal obligation (Art. 6(1)(c)): where required by applicable law
• Consent (Art. 6(1)(a)): where you have given explicit consent

For users in Turkey, processing is also based on the applicable grounds under Law No. 6698 (KVKK).

We use the data we collect to:

• Provide, maintain, and improve the App and Website
• Authenticate your identity and manage your account
• Process AI recipe extractions via OpenRouter
• Manage your subscription status via RevenueCat
• Analyze aggregate usage patterns to improve performance and user experience
• Respond to your support requests and communications
• Comply with applicable legal obligations

We do not use your data for advertising, marketing profiling, or automated decision-making that produces legal effects.

We work with the following third-party data processors to operate the App. All providers are bound by data processing agreements.

Privacy policies: Google · RevenueCat · OpenRouter

Your data is stored on secure cloud infrastructure. We implement industry-standard technical and organizational measures to protect your personal data against unauthorized access, accidental loss, or destruction, including:

• Encrypted data transmission (TLS/HTTPS)
• Secure authentication via Firebase Authentication
• Access controls limiting who can access personal data

While we take data security seriously, no system is entirely infallible. We cannot guarantee the absolute security of transmitted data.

We retain your personal data for as long as your account is active or as necessary to provide our services:

• Account data: retained until you delete your account
• Usage / analytics data: retained in aggregated or anonymized form beyond account deletion

You may request deletion of your account and all associated personal data at any time by contacting support@cookie-ai.app. We will fulfill your request within 30 days, subject to legal retention obligations.

We operate globally and may transfer your data to service providers located outside your country of residence, including the United States. For users in the EEA/UK, such transfers are conducted under appropriate safeguards, including Standard Contractual Clauses (SCCs) adopted by the European Commission. For users in Turkey, data transfers comply with the requirements of KVKK Article 9.

Under GDPR (EU/EEA users)

• Right of access (Art. 15): to obtain a copy of your personal data
• Right to rectification (Art. 16): to correct inaccurate data
• Right to erasure (Art. 17): to request deletion of your data
• Right to restriction of processing (Art. 18)
• Right to data portability (Art. 20)
• Right to object (Art. 21)
• Right to lodge a complaint with your local supervisory authority

Under KVKK (Turkish users, Article 11)

• To learn whether your personal data is being processed
• To request information if it has been processed
• To learn the purpose of processing and whether it is used accordingly
• To know to which third parties your data has been transferred
• To request correction of incomplete or incorrect data
• To request deletion or destruction pursuant to Article 7
• To object to adverse outcomes resulting from automated analysis
• To claim compensation for damages resulting from unlawful processing

To exercise any of these rights, contact us at support@cookie-ai.app. We will respond within 30 days.

The App is not directed to children under the age of 13 (or 16 in the EU/EEA, where applicable). We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us immediately at support@cookie-ai.app and we will delete such information promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of significant changes via the App or email. The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of the App after any changes constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us:

• Operator: Cookie App — Furkan Gönel
• Email: support@cookie-ai.app
• Website: https://cookie-ai.app

For KVKK-related requests, you may submit a written application to the email address above.