Privacy Policy – Cook & Repeat
Last updated: 6 October 2026 · Legal notice · Deutsch
This is a translation for convenience. The German version is the legally binding one.
Cook & Repeat is an app for recipes, cooking runs and what you learn while cooking, for Android and iOS. It comes in two tiers. Free and without an account, everything stays on your device. With an account, meaning with Plus or an invitation to a shared library, your collection is synchronised through our servers. The app contains no advertising, no analytics or tracking services and no crash reporting service.
Controller
Hendrik Heidsiek
Schützenstr. 32
24568 Kaltenkirchen
Deutschland
Email: hello@fieldnotes-software.com
No data protection officer has been appointed (not required by law).
What data is processed – and on what legal basis?
On your device
The app stores recipes with their versions, ingredients and steps, cooking runs (date, rating, notes, deviations), learnings, categories, photos and settings on your device. Without an account that is where it ends: nothing is transmitted to us, and we have no access to this data.
These things also happen on the device only:
- Camera and photo library: The app only accesses them when you attach a photo to a recipe or a cooking run.
- Cooking timers: When a timer has run out, a local notification tells you.
- Sharing from other apps: If you send a link to Cook & Repeat via “Share”, your system hands it to the app.
- Import from other recipe apps: The app reads an export file on the device.
Legal basis: Section 25(2) no. 2 TDDDG (strictly necessary for the function you requested) and Art. 6(1)(b) GDPR.
Recipe from a link
When you import a recipe from a link, your device loads the page itself and reads the recipe data in it. The device also loads the recipe’s picture directly. The operators of the page and of the server the picture comes from see your IP address in the process, as they would if you opened the page in a browser. Nothing is sent to us. The link is stored with the recipe as its source. If the device is offline, it remembers the link until you import it.
Legal basis: Art. 6(1)(b) GDPR.
Account and sign-in
You only need an account for Plus or if you have been invited to a shared library. You sign in with your email address and receive a code by email that is valid for one hour. You do not need a password. Your email address and an identifier for your account are stored with Supabase; the email with the code is sent through Cloudflare. After that, the sign-in session is kept on your device.
There is currently no purchase in the app: we activate Plus for a library, and no payment data arises. If you sign in before Plus is active for your library, at first only your account, the name of the library and your membership are on the server. Your recipes stay on the device until then.
Legal basis: Art. 6(1)(b) GDPR.
Synchronisation
With an account and active Plus, the app transfers your collection to our servers and keeps it in sync between your devices: recipes with versions, ingredients, steps, notes and source, cooking runs, learnings, categories, photos and the name under which you appear in the library. The data is held in a database at Supabase; PowerSync keeps it in sync with the devices. A complete copy stays on the device.
The app scales photos down before uploading them. In doing so it removes the information the camera writes into the file, such as the place where the photo was taken. The photos are kept in non-public storage at Supabase.
Legal basis: Art. 6(1)(b) GDPR.
Shared library
Whoever runs a library with Plus can invite up to five more people. All members see the others’ names and the shared content: recipes, versions, cooking runs with notes and ratings, learnings, photos and categories, each with the person it comes from. A recipe you mark as private is visible to you alone, along with everything attached to it. If you make a shared recipe private later, the others keep what their devices have already loaded.
People are invited by their email address. We store the address with the invitation (who invited, when, and until when it is valid) and send an email to it that names the person inviting. The invitation is valid for 7 days. Whoever signs in with that address during this time joins the library.
Legal basis: Art. 6(1)(b) GDPR; for the invited person’s address Art. 6(1)(f) GDPR (interest in delivering the invitation that was asked for).
AI import
If a page carries no readable recipe data, an AI can read the recipe from the text of the page when you have Plus. For this the app sends the address of the page and its visible text (at most 40,000 characters) to our server at Cloudflare. The server passes both on to Anthropic (model Claude Haiku) and gets back a draft, which you check before saving. Your email address and your account identifier are not sent to Anthropic, and the request comes from our server, not from your device. Our server does not store the address or the text.
30 AI imports per person and day are possible. For this we count the number of imports per account and day. We store nothing more for it than the account identifier, the day and the count.
Legal basis: Art. 6(1)(b) GDPR; for the count Art. 6(1)(f) GDPR (protecting the service from excessive use).
Connector for AI assistants
With Plus you can connect an AI service of your choice to your library. To do so, you enter the address of the connector in that service, sign in on a page of ours with your email address and a code, and allow access. From then on this service can read in your library (recipes with versions, cooking runs and learnings, categories, photos) and write to it (recipes, versions, cooking runs, learnings). It cannot delete anything, and it does not see other members’ private recipes.
Whatever the service retrieves goes to the provider you chose and is processed there under its terms. We have no influence on that. For the connection, our server at Cloudflare stores the details the service registered with, your approval together with your account’s identifier and email address, and the service’s access tokens.
Legal basis: Art. 6(1)(b) GDPR.
Connection data
As with any network request, the providers a function runs through see your IP address. Logging is switched on for our server at Cloudflare: it records technical details about requests and errors. Our server does not write the content of your recipes to the log.
Legal basis: Art. 6(1)(f) GDPR (secure operation and troubleshooting).
Recipients
| Recipient | Purpose | Location |
|---|---|---|
| Supabase Pte. Ltd. | Account and sign-in, database, storage for photos (only with an account) | Singapore |
| Journey Mobile, Inc. (PowerSync) | Sync between database and devices (only with an account) | USA |
| Cloudflare, Inc. | Sending the emails with sign-in code and invitation; operating our server for AI import and connector | USA |
| Anthropic Ireland, Limited / Anthropic, PBC | AI import: reads a recipe from the address and text of a web page (only with Plus) | Ireland / USA |
| AI service you connect through the connector | Access to your library, as far as you allow it | depends on the service |
| Operator of the website you import from | Your device retrieving the page and picture | depends on the site |
Supabase · PowerSync · Cloudflare · Anthropic
Transfers to third countries
Cloudflare, PowerSync and Anthropic may process data in the USA; Supabase is based in Singapore. Such transfers are based on the European Commission’s adequacy decision (EU-US Data Privacy Framework) where the respective provider is certified, and otherwise on standard contractual clauses pursuant to Art. 46(2)(c) GDPR.
If you connect an AI service through the connector or import from a website, the place of processing depends on the service or site you chose.
Retention
- On the device: until you delete something in the app, clear the app data in the system, or uninstall the app.
- Trash: A deleted recipe stays in the trash for 30 days. After that it is removed for good, with its versions, cooking runs, learnings and photos: on the device and, with an account, on the server.
- Account and synchronised data: until you delete them or have your account deleted (see “Deletion”). Photo files on the server that no entry belongs to are removed after 7 days.
- Sign-in code: valid for one hour.
- Invitations: valid for 7 days. After that, the entry with the invited address stays stored with the library until it is deleted on request or together with the library.
- AI import: our server does not store the address or text of the page; Anthropic’s own retention periods apply there. The daily count is deleted with the account.
- Connector: registration, approval and access tokens stay stored until the connection is deleted (see “Deletion”).
- Logs of our server: according to Cloudflare’s rules.
Backup
The data on your device can be backed up using your operating system’s backup function (Android Auto Backup / iCloud). This covers the app’s database and the photos; how much is backed up is determined by your system. The backup sits in your Google or Apple account and is subject to their privacy terms. You can switch it off in your system settings.
Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). An informal message to hello@fieldnotes-software.com is sufficient.
Without an account, your data sits on your device only and, if you use the system backup, additionally in your own Google or Apple backup. We have access to neither: we can neither view nor hand over nor delete this data.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular with the authority of your habitual residence or the authority responsible for us.
Deletion
You can delete the data on your device at any time: individual recipes and cooking runs in the app, everything at once by clearing the app data in the system or by uninstalling. An existing backup made by your operating system is not deleted by this; you remove it in the settings of your Google or Apple account.
Signing out deletes nothing: your collection stays on the device in full and can still be edited, it just no longer syncs. What is on the server stays there.
Your account and the data on our servers are deleted on request. An informal message to hello@fieldnotes-software.com from your account’s address is sufficient. In the same way we delete an invitation sent to your address or the connection to an AI service.