Privacy Policy

Last updated: 3 September 2026

1. Purpose and scope

This policy explains how Kitchen Mix processes personal data when you use the Kitchen Mix website, the Kitchen Mix Android mobile application, and their shared backend services (together, the “Service”).

It applies to visitors, account holders, and newsletter subscribers. Recipes and nutritional information in the Service are culinary content and do not constitute medical advice.

2. Data controller

Kitchen Mix is responsible for the processing described in this policy. The Service is operated from France. For questions about your personal data, contact us at the address in section 16.

3. Data we process

Depending on the features you use, we may process the following categories:

  • Account and profile: email address, Supabase account identifier, username, avatar, and profile preferences.
  • User content: recipes, favorites, ratings, comments, meal plans, lists, and other content or interactions you save or submit.
  • Photos: images and avatars you voluntarily upload, stored through Supabase Storage.
  • Subscription: customer and subscription identifiers, status, and Premium entitlement; on the web, your email and Supabase identifier are sent to Stripe for billing.
  • Newsletter: email address, subscription, confirmation, or unsubscribe status, and email-delivery event data.
  • Technical data and preferences: data needed for sessions, security, and operation, as well as preferences stored locally in the browser or device.

4. Purposes and legal bases

We use this data for the following purposes:

  • Performance of the service and contract: create and secure accounts, provide recipes, meal planning, lists, comments, and synchronization between the website, app, and backend.
  • Subscription management: verify and provide Kitchen Mix Premium access and manage web billing or mobile in-app purchases.
  • Consent: send the newsletter when you subscribe and use optional features requiring permission, such as notifications or the microphone.
  • Legitimate interests: maintain security, prevent abuse, operate the Service, and process email-delivery incidents.
  • Legal obligations: comply with applicable requirements and respond to legally valid requests.

5. Public data and user content

Your username, avatar, published recipes, comments, and anything you explicitly make public may be visible to other users or visitors. Do not publish personal data you do not want to make public. We do not sell personal data.

6. Service providers and recipients

We use providers that may process certain data to provide their services, subject to their own policies and obligations:

  • Supabase: authentication, database, shared backend, and image storage.
  • Google: Google OAuth when selected, and Google Play and its billing for Android purchases.
  • Stripe: Kitchen Mix Premium subscriptions purchased on the website and related billing.
  • RevenueCat: Premium status and subscription-entitlement management in the Android app.
  • Resend: newsletter delivery and delivery-event processing, such as bounces or complaints.

7. Website: cookies and local storage

The website uses cookies required for Supabase authentication sessions. Refusing them may prevent account-required features from working properly.

The website may also use localStorage for preferences such as language or theme and temporary meal-planner data, and sessionStorage for temporary navigation data. No advertising cookies or third-party behavioral analytics tool has been identified in the web project.

8. Mobile app: permissions, microphone, and notifications

The Android app may retain on-device preferences needed for operation, including language, theme, onboarding, reminders, and other settings. Notifications are optional: when enabled, a notification token may be processed with the backend in order to send the notifications you request.

Guided Cooking voice commands are optional and require microphone permission. The microphone is used only when you enable voice commands, to recognize navigation commands such as “next” or “previous”. Recognition may involve the speech-recognition service provided by Android or the device system. Kitchen Mix does not store audio recordings as part of this feature.

9. Subscriptions and payments

Card payments made on the website are processed by Stripe; Kitchen Mix does not directly process full payment-card data. The Android app uses Google Play Billing and RevenueCat to manage in-app purchases, subscription status, and Premium entitlement. The shared backend may recognize a Stripe Web Premium subscription when the same account is used in the app.

10. Retention and account deletion

We retain data for as long as necessary to provide the Service, manage your account or subscription, run the newsletter, maintain security, or meet a legal obligation. Preferences stored locally remain in your browser or device until removed by you or the application.

You can request deletion of your account in settings. The current mechanism deletes the public profile and authentication account; it anonymizes comments (replacing content with “[Compte supprimé]” and unlinking the author) and may retain published recipes without an author to preserve Service consistency. Some data may be retained where required by law.

11. International transfers

Some providers may process data outside the European Economic Area. Where applicable, this processing is governed by the transfer mechanisms and safeguards provided by the relevant providers and applicable law.

12. Security

We use reasonable technical and organizational measures to protect data against unauthorized access, loss, alteration, or disclosure. No system can guarantee absolute security, so please also protect your login credentials.

13. Your GDPR rights

Subject to the conditions and limits set by applicable law, you may:

  • request access to your personal data;
  • request correction of inaccurate data;
  • request deletion of your data;
  • request restriction of processing or object to it where applicable;
  • receive relevant data in a portable format where that right applies;
  • withdraw consent at any time for consent-based processing, including the newsletter or optional features. You may also lodge a complaint with the CNIL.

14. Minors

If you are a minor, use the Service in accordance with the rules applicable in your country and, where required, with your parent’s or legal guardian’s consent. Please do not publish unnecessary personal information.

15. Changes to this policy

We may update this policy to reflect changes to the Service or applicable requirements. The date displayed at the top of this page identifies the current version.

16. Contact

For questions about this policy or to exercise your rights, contact Kitchen Mix at:

Email: contact@kitchenmix.com.

Privacy policy | Kitchen Mix