Deutsche Fassung

Privacy

Last updated: 2026-10-18. This is a translation; the German version is authoritative.

1. Summary

You use Ricotta with Sign in with Apple. Your recipes, recipe photos, folders, favourites and shopping list are stored in your personal recipe book with the service Supabase in the EU and kept on your device for offline use. When you have a recipe read from a photo or a web page, the source is sent to OpenAI with your consent and is not stored by Ricotta afterwards. ChatGPT or Claude only get access to your recipes if you explicitly approve a connection. The app contains no analytics, tracking or advertising SDKs.

2. Controller

The controller under the General Data Protection Regulation (GDPR) is:

3. Account and sign-in

For your account I use the user identifier confirmed by Apple and the sign-in service of Supabase. The app asks for neither your name nor your e-mail address. Access tokens are stored in your device's keychain. You can sign out at any time or delete your account in the app (see section 10).

4. Recipe book and recipe photos

Recipes, folders, favourites and the shopping list are stored in your personal recipe book at Supabase so that they are the same on all your devices. Recipe photos are kept in non-public storage of the same project, in a folder only your account can access. The project is located in the Ireland region (EU). A local copy on your device allows offline use.

Ricotta only accesses the camera or selected photos when you import a recipe from an image or give a recipe a photo. The app prepares images without their original photo metadata, such as location.

5. Reading recipes

To read a recipe, the app sends the source through the Ricotta server to OpenAI: for photos, the selected images and text recognised on the device; for web pages, the ingredient lines, the ingredient list as the page shows it, and recipe metadata. Before the first time, the app asks once for your consent; signing out withdraws it. Entering recipes by hand sends nothing to OpenAI.

The Ricotta server does not store sources or results and does not write their content to its logs. The request to OpenAI is sent with the setting that OpenAI does not store it for later retrieval. According to OpenAI, requests to its API are nevertheless kept for up to 30 days to detect abuse and are not used to train its models. For the daily limit of 10 recipes, Ricotta stores your user identifier, a request identifier and the time; these entries are deleted after 30 days.

If you add your own OpenAI key, it is stored only in your device's keychain. The app sends it with each request to the Ricotta server, which uses it only for that one request to OpenAI and neither stores nor logs it. OpenAI then processes the source under your own OpenAI account and your contract with OpenAI. No usage data is stored for such requests. Signing out or deleting your account removes the key from the device.

6. Website import and problem reports

When you import a recipe from a web page, your device fetches that address directly. As with any page visit, the site operator receives technical connection data, for example your IP address.

If an import fails or the result is wrong, you can report it in the app. The page address, your optional note, the app version and, where applicable, the type of error are stored with your account to improve the import. Your recipe is not sent.

7. Connection with ChatGPT and Claude (beta)

You can choose to connect your recipe book to an AI assistant such as ChatGPT or Claude. The assistant queries the Ricotta server, not your iPhone (Model Context Protocol, MCP). It only gets access once you approve the connection in the connection portal. It can then search and read your recipe texts; saving and editing recipes are allowed separately. It cannot delete anything. It does not receive recipe images, folders, favourites or the shopping list.

If the assistant supplies an image when saving, the Ricottaserver downloads it from the given address, removes its metadata, shrinks it and stores it with the recipe. The operator of that address receives the server's connection data, not yours.

You can revoke any approval in the connection portal; this also blocks access tokens already issued. Whatever an assistant has read is processed by its provider (for example OpenAI or Anthropic) under its own responsibility and your contract with it.

8. Service providers

Ricotta uses the following providers. Where they act on my behalf, a data processing agreement under Art. 28 GDPR is in place.

• Supabase (Supabase, Inc., USA): sign-in, database, photo storage and server functions. Stored in Ireland (EU). Processor.
• OpenAI: reading recipes. Processing also in the USA. Processor; with your own key, OpenAI processes the request under your own account.
• Apple: Sign in with Apple and the App Store. Apple is an independent controller for these.
• Vercel (Vercel Inc., USA): hosting of this website and the connection portal. Processor.
• Fastmail (Fastmail Pty Ltd, Australia): e-mail. Processor.

9. Transfers outside the EU

With OpenAI, Vercel, Fastmail and Apple, data may be processed outside the EU, in particular in the USA. With Supabase, access from outside the EU, for example by support staff, cannot be ruled out either. According to the providers, they base such transfers on the EU-US Data Privacy Framework (adequacy decision of the European Commission, Art. 45 GDPR) or on the European Commission's standard contractual clauses (Art. 46 GDPR).

10. Retention and deletion

• Account, recipe book and recipe photos: until you delete them. When you delete individual recipes, a deletion marker without content remains so that your devices stay in sync.
• Sources for reading recipes: not stored by Ricotta; at OpenAI as described in section 5.
• Usage data for the daily limit: 30 days.
• Import problem reports: until your account is deleted.
• Providers' technical logs (for example IP address and time of a request): according to each provider's retention periods.
• E-mails: until the request is dealt with and they are no longer needed.

Deleting your account in the app's settings deletes your account, your recipe book with photos, folders, favourites and shopping list, the usage data, your problem reports and all AI approvals, as well as the data on the device. Sign in with Apple for Ricotta is revoked with Apple at the same time. Content an assistant has already read may have to be deleted with that provider.

11. Legal bases

Account, recipe book, sync, daily limit and problem reports serve to provide the app you want to use (Art. 6(1)(b) GDPR). Sources are sent to OpenAI with your consent (Art. 6(1)(a) GDPR), which you can withdraw for the future at any time by signing out. Data already sent is not recalled. Technical logs and the secure operation of website and server are based on my legitimate interest (Art. 6(1)(f) GDPR).

12. This website

This website is a static site hosted by Vercel. It sets no cookies, runs no analytics and loads no fonts, maps or scripts from third parties. When you visit it, Vercel processes technically necessary connection data such as IP address, time and requested address. The connection portal stores the Apple sign-in in browser storage; signing out removes it.

13. E-mails

If you write to me, your message is received through Fastmail and processed to answer it.

14. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interest (Art. 21 GDPR). You can withdraw consent at any time for the future (Art. 7(3) GDPR). Just write to hello@getricotta.app.

You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for me is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, www.ldi.nrw.de.

15. Changes

This policy is updated when the app or the law changes. The version published here applies.