Privacy
Privacy
This Privacy Policy explains how Respanda handles personal data when you use Respanda, including the website, account features, AI tools, image analysis, sharing, and paid subscriptions.
Who is responsible for your data
Respanda operates Respanda and is the controller for the personal data described here. Some providers, such as payment and authentication services, may also act as independent controllers for the data they process under their own terms.
Data we collect
We process account identifiers, email address, display name, sign-in provider details, language and theme settings, household and cooking preferences, optional dietary and allergy information, recipes, meal plans, pantry and shopping items, shared links, uploaded recipe covers, assistant conversations, AI usage counters, and subscription status. Hosting, security, and authentication providers may also process device, connection, and diagnostic information such as IP address, browser type, timestamps, and request logs.
Why we use data and our legal bases
We use data to create and secure accounts, save and synchronize your content, personalize meal suggestions, provide requested AI features, process subscriptions, prevent abuse, troubleshoot failures, and meet accounting or legal duties. Processing is based on performing our contract with you, complying with legal obligations, our legitimate interests in operating and protecting the service, and your consent where required for optional data or technologies. You may remove optional preference information at any time.
AI features and uploaded images
Prompts, relevant account context, and images you choose to upload are sent through protected server endpoints to OpenAI to produce the requested response. Respanda does not deliberately save original scan images after processing; a provider may retain transient request data under its agreement and security settings. Detected ingredients, generated recipes, or proposed actions are saved to your account only when the feature or your confirmation requests it. Do not upload images containing people, payment cards, documents, or other information that is unnecessary for meal planning.
Service providers, payments, and international transfers
We use Google Firebase for authentication, database, file storage, and App Check; OpenAI for AI generation and image analysis; Stripe for checkout, tax, subscription, and billing management; and Vercel for application hosting and request delivery. Respanda does not receive or store full payment-card numbers. These providers receive only the data needed for their function and may process data outside the European Economic Area using safeguards available under applicable law and their contractual terms. We may also disclose data when required by law, to protect users or the service, or during a legitimate business reorganization.
How long we keep data
Account content is generally kept while your account is active. You can delete assistant conversations separately and can delete the account from Settings; account deletion removes account content, private files, AI usage records, billing links, and active share links from Respanda’s systems and cancels an active subscription. Limited billing, fraud-prevention, legal, backup, or security records may remain for the period required by law or reasonably needed to resolve disputes and protect the service. Processor retention periods may differ under their policies.
Security
We use access controls, authenticated requests, private-by-default database and storage rules, server-side validation, transport encryption, restricted service credentials, and payment processing by Stripe. No online system is completely secure, so you should use a strong unique password, protect your sign-in account, and notify the operator if you suspect unauthorized access.
Your choices and data-protection rights
Depending on applicable law, you may request access, correction, deletion, restriction, portability, or an objection to processing, and may withdraw consent without affecting earlier lawful processing. You can edit many profile records, disable AI features, clear assistant history, manage billing, or delete your account directly in Settings. You may also complain to the supervisory authority in your country; in Finland this is the Office of the Data Protection Ombudsman. We may need to verify your identity before completing a request.
Children
Respanda is not directed to children who cannot legally consent to an online service in their country. A parent or guardian must authorize use where required. If we learn that a child’s data was collected without valid authorization, we will take reasonable steps to delete it.
Changes to this policy
We may update this policy when the service, providers, or legal requirements change. Material changes will be presented through the service or another reasonable channel before they take effect when required. The date below identifies the current version.
Contact
Respanda handles privacy, legal, and subscription questions. You can use the account controls in Settings for common data requests. When a contact address is displayed below, use it for requests that cannot be completed in the application.
Last updated 20 July 2026.