Stashcook: Meal Planner & Recipe Keeper

Privacy Policy

This privacy policy ("Policy") describes how the personally identifiable information ("Personal Information") you may provide in the "Stashcook" mobile application ("Mobile Application" or "Service") and any of its related products and services (collectively, "Services") is collected, protected and used. It also describes the choices available to you regarding our use of your Personal Information and how you can access and update this information. This Policy is a legally binding agreement between you ("User", "you" or "your") and Stashbox Ltd ("Stashbox Ltd", "we", "us" or "our"). By accessing and using the Mobile Application and Services, you acknowledge that you have read, understood, and agree to be bound by the terms of this Policy. This Policy does not apply to the practices of companies that we do not own or control, or to individuals that we do not employ or manage.

Where the Services offer automated or AI-assisted features, those features operate on content and sources chosen by the user in order to extract and organise information, and any resulting content is processed and stored at the user's direction.

The use of automated or AI-assisted features does not involve automated decision-making or profiling that produces legal or similarly significant effects on users.

Data we collect

You can access and use the Mobile Application and Services without telling us who you are or revealing any information by which someone could identify you as a specific, identifiable individual. In this instance, your device ID is used to backup and restore recipes, meal plans and shopping lists. If, however, you wish to use some of the features in the Mobile Application, you may be asked to provide certain Personal Information (for example, your name and e-mail address).

We receive and store any information you knowingly provide to us when you create an account, publish content, make a purchase, or fill any online forms in the Mobile Application. When required, this information may include the following:

Contact details: including your name, email address and the content of any correspondence between you and us.

How we collect your data

When you use the Mobile Application, our servers automatically record information that your device sends. This data may include information such as your device's IP address and location, device ID, name and version, operating system type and version, language preferences, information you search for in the Mobile Application, access times and dates, and other statistics.

How we use your data

We may use the data you provide to us for the following purposes:

Information collected automatically is used only to identify potential cases of abuse and establish statistical information regarding usage of the Mobile Application and Services.

Some usage statistics are stored on third-party service providers. This statistical information is not otherwise aggregated in such a way that would identify any particular user of the system.

Third-party service providers used by the app include:

Legal basis for processing

We process Personal Information where one or more of the following legal bases apply:

Billing and payments

In case of services requiring payment, billing is handled either by the platform through which you subscribed (such as the Apple App Store or Google Play) or, for web-app subscriptions, by our payment provider, Stripe.

We do not collect or store full credit card details for app-store purchases. For web-app purchases, payment information is processed securely by Stripe and is not stored on our servers.

Purchase and transaction data is retained only for as long as necessary to complete the transaction, comply with legal and accounting obligations, and handle refunds or disputes where applicable.

All payment providers we use adhere to the latest security standards as managed by the PCI Security Standards Council. Sensitive data exchanges occur over secure, encrypted connections. Scans for malware are performed regularly for additional security.

Disclosure of information

Depending on the requested Services or as necessary to complete any transaction or provide any service you have requested, we may share your information with trusted third parties that assist us in operating the Mobile Application and Services. We do not share Personal Information with unaffiliated third parties.

We may disclose Personal Information if required by law, to protect our rights, protect user safety, investigate fraud, or respond to government requests.

In the event of a business transition such as a merger or acquisition, your user account and Personal Information may be among the transferred assets.

Retention of information

We will retain and use your Personal Information for the period necessary to comply with legal obligations, resolve disputes, and enforce agreements unless a longer retention period is required or permitted by law. Aggregated data may be used in a non-identifiable manner.

Once Personal Information has been deleted in accordance with our retention practices, certain rights may no longer be exercisable in relation to that information. This does not affect any rights you may have while your Personal Information is retained by us.

Transfer of information

Depending on your location, data transfers may involve storing your information in countries outside your own. You may inquire about safeguards used for such transfers using the contact details provided below.

The rights of users

You may exercise rights including access, correction, erasure, restriction, portability, withdrawal of consent, and objection to processing, subject to applicable law.

Data protection rights under GDPR

If you are a resident of the EEA, you have specific data protection rights including access, rectification, erasure, restriction, portability, objection, and the right to lodge a complaint with a supervisory authority.

California privacy rights

California residents may request information about Personal Information shared for marketing purposes once per calendar year.

How to exercise these rights

Requests may be submitted via the contact details below. We may verify your identity before responding.

Privacy of children

We do not knowingly collect Personal Information from children under 13. Users must be at least 16 years old to consent to processing where required by law.

Email marketing

We will only send marketing or promotional communications where you have given your consent or where otherwise permitted by applicable law. You may withdraw your consent or opt out at any time using the unsubscribe options provided or by contacting us.

You will continue to receive essential transactional emails.

Links to other resources

We are not responsible for the privacy practices of third-party websites or services.

Information security

We maintain reasonable safeguards to protect Personal Information, though no transmission over the Internet can be guaranteed.

Data breach

In the event of a data breach, we will take appropriate action and notify affected users where required by law.

Changes and amendments

We may update this Policy from time to time and will notify you of material changes.

Acceptance of this policy

By using the Mobile Application and Services, you agree to this Policy.

Contacting us

If you have questions about this Policy or your Personal Information, please contact:

hello@stashcook.com

Updated February 2026