privacy

Bawbee plans meals. To do that it needs to know how you cook and what you cannot eat, and that is the sum of what it asks for. There is no account, no password and no profile of you sitting on a server somewhere. This policy sets out what the app collects, what leaves your phone, and who else is involved.

Who is responsible

Bawbee is developed and operated by Jurij Kirm, 8232 Šentrupert, Slovenia. The developer decides what data the app collects and why, and is the controller for the purposes of the GDPR.

WSSN d.o.o., Mekinje nad Stično 63, 1295 Ivančna Gorica, Slovenia, publishes and distributes the app on the App Store. It does not operate the service and does not process what you enter into it.

Either can be reached at bawbee.contact@gmail.com.

What stays on your phone

Almost everything. Bawbee has no user accounts, so there is nothing to sign in to and nothing stored against your identity. The following is written to your device only:

• Your answers from the setup questions: name, country, supermarket, household size, weekly budget, cooking days, meal types, cooking time, appliances, dietary pattern, proteins, allergies and the goals you picked.
• The week Bawbee planned for you, the recipes in it, and your shopping list along with which items you have ticked off.
• Meals you saved as favourites, and a short history of what you have been served so the app can avoid repeating itself.
• The meal photos, cached as image files.

If you turn the weekly reminder on, it is scheduled by your phone and shown by your phone. Nothing about it is sent to us.

Deleting the app deletes all of it. There is no copy on our side to remove, because one was never made.

What is sent when a week is generated

Writing a plan needs a language model, and that runs on somebody else's computers. When you generate or swap a meal, the app sends the parts of your profile that shape the food:

your country and chosen supermarket, your weekly budget and currency, household size, which days and meals you cook, your cooking time limit, your appliances, your dietary pattern, the proteins you like and those you avoid, the vibes you picked, and your allergies.

Your name is not sent. It is used only to greet you inside the app.

Requests do not go straight from your phone to the model provider. They pass through a server we run on Cloudflare, which checks that your subscription is active before anything is generated. It keeps a usage count against a random subscription identifier and nothing else. It does not store your prompts, your plans or your profile.

Allergies, and why we treat them carefully

An allergy says something about your health, so under Article 9 of the GDPR it belongs to a special category of data that gets extra protection. Bawbee asks for allergies because a meal planner that does not know them is dangerous, and the information is used for one thing only: excluding those ingredients from your plan, and checking the result before it reaches you.

You give this information voluntarily and you can leave it out. We rely on your explicit consent to process it, and you can withdraw that consent by removing your allergies in the app or by deleting the app. Allergies are never used for advertising, never sold, never shared with anyone beyond the model provider that needs them to exclude the ingredients, and deliberately kept out of crash reports.

Companies involved

• OpenAI. The profile details in section 3, and the plan it writes back generating meals, recipes and photos
• Cloudflare. The same request in transit, plus a random subscription identifier running the server that holds the api key and counts usage
• RevenueCat. A random subscription identifier and your purchase status knowing whether your subscription is active
• Apple. Your payment, under your Apple Account billing, renewals and refunds
• Sentry. Crash and error reports finding out when the app breaks

Each acts under its own terms and its own privacy policy.

OpenAI does not train its models on data sent through its API, and states that API inputs and outputs are held for up to thirty days for abuse monitoring before being deleted.

Sentry is set up to send as little as possible. Crash reports carry the fault and where it happened, with nothing identifying you attached.

What Bawbee does not do

There is no advertising in the app, no advertising identifier, and no analytics SDK following you around. Nothing is sold or rented to anybody. There is no tracking across other apps or websites, and no profile built for marketing.

Where data goes

The companies above are based in or operate from the United States. Where personal data leaves the European Economic Area it is transferred under the European Commission's Standard Contractual Clauses or an equivalent safeguard relied on by that provider.

How long anything is kept

On your phone, until you delete the app or clear it yourself. On our Cloudflare server, the usage counters reset each day and each month and hold no content. At the providers above, for as long as their own policies say, which for OpenAI's API is up to thirty days. Email you send us is kept while it is useful to answer you and deleted on request.

Your rights

If you are in the EEA or the UK you have the right to ask what we hold about you, to have it corrected or deleted, to restrict or object to how it is used, and to receive it in a portable form. You may withdraw consent for the allergy data at any time, and you may complain to your data protection authority. In Slovenia that is the Information Commissioner, ip-rs.si.

In practice most of this you can do yourself in seconds, because the data is on your phone. Deleting the app is a complete erasure. For anything else, write to bawbee.contact@gmail.com and we will respond within one month.

Children

Nothing in Bawbee is unsuitable for a child, but it is written for whoever does the household shopping. The age at which somebody can agree to their own data being used varies across Europe, between 13 and 16 depending on the country, and is 15 in Slovenia. Below that age a parent or guardian should set the app up and answer the questions, the allergy question above all.

We do not knowingly collect data from a child without that. If you believe a child has used the app and entered personal information, write to us and we will help you remove it.

Changes

If this policy changes, the date at the top changes with it and the current version is always here. Where a change is significant we will say so in the app.

Contact

bawbee.contact@gmail.com

Jurij Kirm, 8232 Šentrupert, Slovenia