Grillbook Privacy Policy

In short

• You sign in with Apple or Google. We get your name, email and account ID from Apple or Google.
• We store your profile, saved recipes and cooks so they are on all your phones.
• We don't sell data. The app has no ads, no analytics and no tracking.
• Voice commands are recognized on your phone. Audio is not recorded and never leaves the phone.
• You can delete your account and all data in the app: Profile → Settings → Delete Account.

1. Who we are

Grillbook is a recipe app for grills and barbecues. Your data is handled by the app's owner:

Shynggys Sakypkerey (an individual), Republic of Kazakhstan.

Email for privacy questions: support@grillbook.app.

Below we call ourselves "we".

2. What data we collect and why

With Sign in with Apple you can hide your email. Then we get an address like …@privaterelay.appleid.com, and Apple forwards our emails to your real address.

We don't ask for or store passwords, phone numbers, postal addresses, location or payment details.

3. What stays on your phone only

• Voice. The commands "Next", "Yes" and "No" are recognized on the phone itself. The microphone works only while a cooking step is open and you have turned voice on. Audio is not recorded and never leaves the phone.
• Timer notifications and the Lock Screen card. The phone creates them itself, without our server.
• "Prep" checkmarks and offline copies of recipes, photos and videos.
• Photos from your library. You pick a photo in the iPhone picker. The app sees only the photo you pick, not your whole library.

The app asks separately for microphone, speech recognition and notifications. You can turn them off at any time in iPhone Settings. Without them the app still works, just without voice and notifications.

4. What we don't do

• We don't sell or rent your data.
• We don't show ads or share data with ad networks.
• We don't use analytics and don't track you across other apps or websites.
• We don't draw conclusions about your health, religion or beliefs from what you don't eat. That setting is used only to hide recipes.
• We don't make automated decisions about you that have legal effects.

5. Legal bases

• Consent. By tapping "Continue with Apple" or "Continue with Google", you agree to the processing of your data under this policy. This is the basis under the Law of the Republic of Kazakhstan "On Personal Data and Its Protection".
• Contract. Without an account we can't store your recipes and cooks or move them between phones. This is the basis under the GDPR for users in the EU.
• Legitimate interest. Technical logs keep the service secure and help us fix bugs.

You can withdraw consent at any time by deleting your account (section 8).

6. Who we share data with

Only with those the app can't work without:

Railway processes data only on our instructions and under its data processing agreement, with protection at least as strong as described here. Apple and Google handle sign-in data under their own privacy policies.

We disclose data to public authorities only when the law requires it.

7. Where data is stored

Our server and database are in the Netherlands (EU), at Railway. Railway is a US company, so the data may also be accessed from the USA.

This means your data is transferred outside Kazakhstan. By tapping "Continue", you agree to this transfer.

8. How long we keep data

• We keep account data for as long as you have an account.
• When you delete your account, we immediately and permanently delete your profile, photo, saved recipes, cooks and sessions from the server. We also revoke Sign in with Apple.
• Technical logs are kept for up to 90 days and then deleted automatically.
• If we start keeping database backups, your data will disappear from them within 30 days.

Signing out and deleting your account are different. Signing out erases data from the phone, but your account and server data stay. Deleting erases everything.

9. How to delete your account

In the app: Profile → Settings → Delete Account → Delete.

Without the app: email support@grillbook.app from your account's email address. We will delete your account within 15 business days and reply.

Step-by-step guide: https://grillbook.app/en/delete-account

You can also disconnect Grillbook from your Apple or Google account on their side:

• Apple: iPhone Settings → your name → Sign-In & Security → Sign in with Apple → Grillbook.
• Google: https://myaccount.google.com/connections → Grillbook.

10. Your rights

You can:

• find out what data we keep about you and get a copy;
• correct your data — you can change your name, username, photo and profile right in the app;
• delete your data and withdraw consent;
• object to processing or ask us to restrict it;
• complain to the personal data protection authority of the Republic of Kazakhstan, or, if you are in the EU, to your country's supervisory authority.

Email us at support@grillbook.app. We reply within 3 business days.

11. How we protect data

• Data travels between your phone and our server only over an encrypted connection (HTTPS).
• Your sign-in key is stored on the phone in the Keychain. The server keeps only its hash, which can't be used to sign in.
• Profile photos are kept in private storage and served only by our server.
• Only the app's owner has access to the server and database.

If there is a data breach, we will notify you and the authority within the time required by law.

12. Age

Grillbook is for people aged 16 and over. We don't knowingly collect data from children under that age. If we learn that such an account exists, we will delete it. If you are under 18, use the app with the consent of a parent or guardian.

13. Data from Google

If you sign in with Google, we get from Google only your account ID, name, email and whether the email is verified. We don't store your Google profile photo. We have no access to Gmail, Drive, contacts or any other Google data.

We use this data only for signing in and your Grillbook profile. We don't sell it, don't use it for ads and don't share it with anyone except our hosting provider (section 6). People read it only if you ask us to — for example, when you contact support — or when the law or the security of the service requires it.

Grillbook's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

14. Changes to this policy

If this policy changes, we will update the date at the top and let you know in the app. If we start collecting new data or using it in a new way, we will ask for your consent first.

15. Contact

Shynggys Sakypkerey, Republic of Kazakhstan Email: support@grillbook.app

This policy is available in Russian and English. If they differ, the Russian version prevails.