Privacy Policy

1. Controller and contact

The data controller for Batchly is Angel Manuel Hernandez Redondo. For privacy questions, rights requests or support, contact kelilen@hotmail.com.

2. Data we process

• Google sign-in data: account identifier, name, email address and profile picture when provided by Google.
• Household data: profile, household membership and role, invitations and activity needed to maintain shared content.
• Content you create: meal plans, recipes, ingredients, shopping lists, manual items and batch-cooking sessions.
• Photos for AI recipes: only when you choose an image and confirm that it should be sent to generate a draft.
• Subscription information: internal user identifier and technical aliases, product, store, purchase environment, status, country, dates, transaction identifiers and PRO entitlement. Batchly does not receive or store your full payment-card details.
• Technical and security data: limited information required to operate the service, prevent abuse, troubleshoot errors and apply usage quotas.

3. How we use data

• Authenticate your account and maintain your session.
• Create and sync your household, plans, recipes and shopping information.
• Process a confirmed photo to produce a recipe draft that you must review before saving.
• Validate purchases, restore PRO access and apply usage limits.
• Protect the service, investigate failures and meet legal obligations.

4. Google user data

Batchly uses Google OAuth as its only sign-in method. We use basic identity data solely to authenticate you, identify your account and display your profile. We do not receive your password or request access to Gmail, Google Drive, contacts or calendar. Our use of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements.

5. Service providers

We may disclose only the data required to provide the service to:

• Supabase: authentication, database, synchronisation and server functions.
• Google: OAuth sign-in and Google Play distribution or purchases.
• OpenAI: processing a confirmed photo and generating a recipe draft.
• RevenueCat: validating and technically managing subscription status using internal identifiers and transaction data.

These providers process information under their own terms and security safeguards. We do not sell personal data.

6. Households and shared content

People in the same household can view and edit that household's shared content. Access controls prevent other households from accessing it. Do not share a household code with anyone you do not want to grant access.

7. Retention and deletion

We retain information while your account is active and for as long as needed to provide or protect the service and meet legal obligations. Deleting your account removes your access and personal data; households where you are the only member are also deleted. Content in shared households may remain without identifying you so that other members' data is not removed.

Stores and payment providers may retain purchase or billing records for legally required periods. Isolated backups may remain temporarily until their normal rotation is complete and are not used as active data. See how to delete your account.

8. Your choices and rights

You can export available account information from Settings → Privacy and data. You may also correct content in the app, leave a household where applicable and delete your account. You can request access, correction, deletion, restriction, objection or portability by contacting us. If you live in the European Economic Area, you may also complain to your local data-protection authority.

9. Security and international transfers

We use household access controls, encrypted connections and server-side processing for sensitive operations. Some providers may process data outside your country; applicable legal and contractual transfer mechanisms are used. No system is completely infallible, but safeguards are reviewed in proportion to the service.

10. Children

Batchly is not directed to children under 16 and does not knowingly seek to collect their personal data. Contact us if you believe a child has created an account so that we can review and delete it.

11. Changes

We may update this policy to reflect product, legal or provider changes. The current version and date will be published here. Material changes will be communicated through reasonable means.