Receptree Privacy Policy

1. Scope and controller

This policy explains how Novasas processes personal data for the Receptree website, accounts, Recipes, Review, Studio, checkout, support, and optional connected workflows.

2. Data we process

We process account and profile data; recipes, uploads, collections, favorites and community content; technical, security and consent records; support messages; and billing identifiers and entitlement status from Stripe or applicable app stores. Receptree does not store full payment-card details.

With analytics consent, we process deliberately emitted page-view and aggregate feature/performance events. PostHog autocapture and session recording are disabled. We do not intentionally send local Review filenames, paths, photo content, EXIF values, recognized settings, ratings, picks/rejects, or face/eye results to product analytics.

3. Review data stays local

Connected folders, supported originals and previews, filenames and paths, EXIF data, ratings, picks/rejects, grouping, Recipe Recognition, and Smart Assist face/eye analysis are processed locally in your browser. Review sessions and thumbnails are stored in browser storage on your device until removed or cleared.

Your browser and operating system control folder permissions. Receptree servers do not receive those local Review items unless a future feature clearly explains the upload and asks you to initiate it.

4. Purposes and legal bases

We process data to perform the contract and operate accounts, content, billing and support; for security, abuse prevention, service integrity and legal claims based on legitimate interests; to meet legal obligations; and for optional analytics or marketing based on consent where required.

5. Providers and international transfers

Providers can include Supabase for authentication, database and storage; Vercel for hosting and delivery; Stripe and app stores for billing; consented Google Analytics, PostHog and Vercel Analytics; and SMTP providers for email. We do not sell personal data.

Data may be processed outside Switzerland or your country, including the EU and USA. Where required, we use contractual and technical safeguards such as standard contractual clauses or equivalent mechanisms.

6. Retention and deletion

Active account and content data is kept while needed to provide the service. Billing, tax, fraud, security, consent, withdrawal and legal records may be retained for applicable legal periods. Backups may persist temporarily through ordinary rotation.

Local Review sessions remain on your device until you remove the gallery/session or clear browser site data. Removing a Review gallery removes Receptree’s local session records and does not delete the source photos. Account deletion does not itself erase browser storage on every device; clear local site data separately where needed.

7. Your rights

Depending on applicable law, you may request access, correction, deletion, restriction, objection, portability, or withdrawal of consent. Contact privacy@novasas.ch. We may verify your identity. Account deletion is also available at /legal/delete-account.

8. Cookies, security, and updates

Essential cookies and storage support login, security and preferences. Optional analytics runs only after consent and can be disabled in Cookie Settings. See /legal/cookies for details.

We use safeguards appropriate to risk, including access controls, transport encryption and monitoring, but no system is risk-free. Material policy updates may be announced by website, in-app notice, or email.

9. Contact

Privacy: privacy@novasas.ch. Legal: legal@novasas.ch. Support: support@novasas.ch. Novasas, Solothurn (4500), Switzerland.