Privacy Policy

Publisher: Teddy Verneuil, sole proprietor (EI), trading as Lezbroz
Contact: tednomad50@gmail.com
Website: marmite-app.com

Marmite respects your privacy. This policy describes what data is processed, how it is used and the rights you have. The French version of this policy (Politique de confidentialité) is the reference text; this page is a faithful English version.

1. Data processed

1.1. Saved recipes

When you extract and save a recipe, the following is stored locally on your device: recipe title, ingredients, steps, source URL, dish photo, your notes and ratings, and your collections and recipe books. This data is never sent to our servers or to third parties without your explicit consent. The relay described in 1.2 only passes extraction requests along: it does not receive your saved recipes.

1.2. Extraction data

When you paste a web link, the URL is sent to the page-reading service Jina AI, which fetches the page content and returns it as text.

For video links (YouTube, TikTok, Instagram, Facebook), the link is sent to Supadata, which returns the video's description and transcript. The app may also query the platform directly (public embed service) to fetch the title and thumbnail.

Calls to Supadata and to artificial intelligence (see 1.3) do not go straight from the app: they go through a secure relay operated by the Publisher and hosted by Cloudflare, Inc. (Cloudflare Workers). The relay holds the service access keys, so no key is embedded in the app. It forwards the request and returns the response, and does not keep links, content or your recipes. Its logs contain no content and no IP address: only, for a technical refusal, the reason and the country of origin.

These requests contain neither your name, your email address nor any account identifier. However, as with any internet request, the services contacted (including Cloudflare) can see your device's IP address.

1.2 bis. App verification and abuse protection

So that the relay only serves genuine Marmite installations, the app uses Apple App Attest (Apple's app verification service). On first use, your device creates a hardware-protected cryptographic key that Apple attests; the relay stores the public part of this key and its identifier. This key is not tied to your identity, your Apple account or your serial number, and cannot be used to track you across apps.

To limit the number of requests per minute and per day, the relay keeps counters per IP address and per installation. The IP address appears there only as an irreversible cryptographic fingerprint, erased the next day. The installation is designated by a random identifier generated by the app, unrelated to you or your device. This rests on our legitimate interest in protecting the service against abuse (GDPR article 6.1.f).

1.3. Structuring by artificial intelligence

The retrieved content (page text, video description and transcript) is then sent, through OpenRouter, to an artificial intelligence model (Grok, by xAI) to be structured into a recipe card or a list of addresses. Only this content is sent, with no data that identifies you other than the IP address. The Publisher does not use this content to train AI models.

To locate detected addresses, the name and address of the places are sent to Apple Maps.

1.4. Subscription data

Marmite Pro subscriptions are handled exclusively by Apple's App Store. We never have access to your payment information (card number, bank details). Your subscription status is checked directly with Apple and stays on your device. No third-party subscription manager is involved and no identifier about you is sent for this purpose. More information: Apple's Privacy Policy.

1.5. Nutrition information

Nutrition data comes from the CIQUAL 2025 database (ANSES) and is processed locally on your device. No data about your diet or nutritional preferences is sent to third parties.

2. Data storage

All your personal data (saved recipes, collections, notes, ratings, preferences) is stored exclusively on your device using iOS local storage. The Publisher runs no server that collects or hosts your personal data: the only server is the extraction relay described in 1.2, which keeps no content. Your recipes belong to you.

3. Third-party services

The app uses the following third-party services to work:

• Jina AI — web page reading. Receives the URL. Legal information
• Supadata (Dumpling Software UG, Berlin) — video transcription and description retrieval. Receives the video URL. Privacy policy
• OpenRouter and xAI (Grok) — recipe structuring by artificial intelligence. Receive the content to be structured. OpenRouter data collection policy
• YouTube, TikTok, Instagram, Facebook— retrieval of a video's title and thumbnail through their public embed service.
• Cloudflare, Inc.(United States) — hosting of the Publisher's secure relay. Carries requests without keeping them. Privacy policy
• Apple — App Store (payments, Marmite Pro subscriptions, distribution), App Attest (app verification) and Maps (address location).

These services receive neither your name, your email address nor any account identifier. They do see your device's IP address, which is personal data under the GDPR. This transmission is necessary to provide the feature you request (GDPR article 6.1.b).

Some of these providers are established outside the European Union, notably in the United States. Transfers then rely on the mechanisms provided by the GDPR (adequacy decision, EU-US Data Privacy Framework or standard contractual clauses), depending on the provider. The Publisher keeps none of the content sent: retention is governed by each provider's policy.

4. Analytics and advertising

The Marmite app:

• Collects no analytics data (no Mixpanel, Firebase Analytics, PostHog or any other tracking tool)
• Contains no advertising trackers
• Shares no data with third parties for commercial purposes

Your use of the app remains entirely private.

5. Your rights (GDPR)

Under the General Data Protection Regulation (GDPR) you have the following rights:

• Right of access — your data is directly available in the app (recipes, collections, notes).
• Right to rectification — you can edit your recipes, notes and collections at any time in the app.
• Right to erasure— you can delete your recipes, collections and notes individually. Uninstalling the app deletes all your local data. To have the relay's installation key removed, contact us.
• Right to portability — your data is stored locally and you can export it from the app.
• Right to object — you can refuse access to certain features in iOS settings (notifications, etc.).

To exercise these rights or for any question about your personal data, contact us: tednomad50@gmail.com

6. Children's data

Marmite is not intended for children under 13 and does not knowingly collect personal data from minors. If you are a parent or guardian and believe your child has given us information, contact us at tednomad50@gmail.com so we can take the necessary steps.

7. Security

Your data is stored locally on your device, so it benefits from iOS's built-in security (storage encryption, passcode / Face ID / Touch ID protection). Communications between the app, the relay and third-party services (recipe extraction) are encrypted with HTTPS/TLS. The access keys to extraction services are kept only on the relay, never in the app.

8. Changes to this policy

The Publisher may change this policy at any time. For a substantial change, a notice will be sent through an app update. The date of the last update is shown at the top of this document.

9. Contact

For any question about this policy or the protection of your data: tednomad50@gmail.com

You may also lodge a complaint with the CNIL (French data protection authority): www.cnil.fr