Privacy Policy

Last Updated: 6 May 2026

Introduction

This Privacy Policy describes how Scoop ("we", "us", or "our") collects, uses, and shares information when you use our mobile application (the "App"). We are committed to protecting your privacy and being transparent about our data practices.

Information We Collect

Information automatically collected

• Device information: Platform (iOS/Android), operating system version, and app version
• Usage analytics: How you interact with the app, collected through PostHog analytics
• Error and performance data: Technical information about app crashes and errors, collected through Sentry
• IP address: Processed transiently for routing and security; not stored long-term

Information you provide

• Email address: When you sign in via email one-time code, Sign in with Apple, or Continue with Google. This is used to authenticate your account and identify your session in our analytics and support tools.
• Account identifier: A unique account identifier is generated when you create your account.
• Recipes, ingredients, and photos: Recipes, custom ingredient compositions, and any photos you choose to attach to a recipe are stored in your private account on our servers.

Information stored locally on your device

The following data is stored only on your device and is not transmitted to our servers:

• Onboarding completion status
• Paywall display history

How We Use Your Information

• Service delivery: To provide the App's recipe-building, ingredient-management, and analysis features.
• Authentication: To verify your identity and keep your account secure.
• Subscription management: To process and verify in-app purchases through Apple's StoreKit and RevenueCat.
• App improvement: To analyze usage patterns and improve app functionality, design, and user experience.
• Customer support: To respond to your feedback and support requests.
• Error monitoring: To identify and fix technical issues and bugs.
• Communication: To send sign-in codes by email and important updates about the app (if you have opted in).

Third-Party Services

We use the following third-party services that may collect information:

Supabase

• Purpose: Account authentication, database, file storage
• Data shared: Email address, hashed password (where applicable), account identifier, recipes, ingredient data, and recipe photos
• Region: European Union
• Privacy policy: https://supabase.com/privacy

Apple

• Purpose: Sign in with Apple, in-app purchase processing, App Store services
• Data shared: Apple ID identifier, payment information (handled directly by Apple)
• Privacy policy: https://www.apple.com/legal/privacy/

Google

• Purpose: Continue with Google sign-in
• Data shared: Google account identifier, email address, and name (on first login, if granted)
• Privacy policy: https://policies.google.com/privacy

RevenueCat

• Purpose: Subscription entitlement management
• Data shared: Subscription status, transaction identifiers, and anonymized account identifier
• Privacy policy: https://www.revenuecat.com/privacy/

PostHog

• Purpose: Product analytics
• Data shared: Usage patterns, screen views, device information, and anonymized account identifier
• Legal basis: Contract performance (Art. 6(1)(b) GDPR) for identified session data; legitimate interests (Art. 6(1)(f) GDPR) for anonymous usage analytics
• Privacy policy: https://posthog.com/privacy

Sentry

• Purpose: Error tracking and performance monitoring
• Data shared: Error logs, device information, IP address, and user context
• Region: European Union (Germany)
• Privacy policy: https://sentry.io/privacy/

Resend

• Purpose: Sending sign-in code emails
• Data shared: Email address and one-time sign-in code
• Privacy policy: https://resend.com/legal/privacy-policy

Apple App Store

• Purpose: Payment processing for subscriptions
• Data shared: Payment information and purchase history (handled directly by Apple)

Camera and Photo Library Access

When you choose to attach a photo to a recipe, the App requests temporary access to your device camera or photo library. Selected images are uploaded to your private storage on Supabase. We never access your camera or photo library without your action.

Account Deletion

You can delete your Scoop account and all associated data at any time:

• In-app: Profile menu → Delete Account
• By email: Send a request to [YOUR SCOOP EMAIL] with subject "Delete Account"

Once requested, your recipes, ingredients, photos, and account credentials are permanently removed within 30 days. Payment-related records are retained only as long as required by tax law.

Data Retention

• Account data and recipes: Retained until you delete your account or the specific item.
• Analytics data: Analytics and error tracking data is retained according to our third-party providers' policies (typically 90 days to 2 years).
• Local data: Data stored on your device remains until you uninstall the app or clear app data.
• Payment-related records: Retained as required by applicable tax and accounting law (in Germany, typically 10 years).

Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encrypted connections (HTTPS/TLS) for all data transmission
• Encryption at rest for database and file storage
• Row-Level Security so each user can only access their own records
• Per-user folder isolation in cloud storage

However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Your Privacy Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data
• Portability: Request your data in a portable format
• Opt-out: Opt out of analytics and marketing communications
• Withdraw consent: Withdraw consent for data processing where we rely on consent

To exercise these rights, please contact us at the email address provided below.

Children's Privacy

The App is not intended for children under the age of 16 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy in the app
• Updating the "Last Updated" date
• Sending you a notification (if required by law)

European Users (GDPR)

As this app is primarily operated from and targeted at users in the European Union, we comply with the General Data Protection Regulation (GDPR).

Your GDPR Rights

As an EU resident, you have the following rights:

• Right of access (Article 15): Obtain confirmation of data processing and access to your data
• Right to rectification (Article 16): Correct inaccurate or incomplete data
• Right to erasure (Article 17): Request deletion of your data ("right to be forgotten")
• Right to restriction (Article 18): Limit how we use your data
• Right to data portability (Article 20): Receive your data in a structured, machine-readable format
• Right to object (Article 21): Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent at any time without affecting prior processing
• Right to lodge a complaint: File a complaint with your local supervisory authority

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, including exercising your GDPR rights, please contact us at:

For GDPR-related requests, please clearly indicate "GDPR Request" in your subject line and specify which right you wish to exercise. We will respond within one month of receipt of your request, as required by GDPR.

Cookie Policy

The App does not use cookies. However, our third-party analytics providers (PostHog) may use similar technologies for analytics purposes. You can control these through your device settings.

By using the Scoop app, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and sharing of your information as described herein.