Privacy Policy

This is a courtesy translation; in case of discrepancy, the French version prevails.

This policy describes how BAUGEY MATHEO (DEVOLIM) processes personal data in connection with the Menu Semaine mobile application and the https://menusemaine.devolim.fr website. It complies with the General Data Protection Regulation (GDPR — Regulation (EU) 2016/679) and the amended French Data Protection Act (Loi Informatique et Libertés) of 6 January 1978.

1. Data controller

BAUGEY MATHEO (DEVOLIM)
248 rue de Bègles, 33800 Bordeaux, France
SIREN: 948 000 757
Email: [email protected]

Given the volume and nature of the processing, appointing a Data Protection Officer (DPO) is not mandatory. For any question, write to the address above.

2. Anonymous identity (no account)

Menu Semaine is used without creating an account. On first launch, an anonymous identity is generated automatically via Firebase Authentication (Google), without any personal information: no email, no password, no name. An anonymous technical identifier is associated with your installation; it is used solely to link your Premium subscription status, your AI token balance and the technical counters that prevent abuse to your device.

Menu Semaine offers no email sign-up, and no Google, Apple or social media sign-in. You are never asked for login credentials.

3. Profile and content data

Your content is stored locally on your device, in a database internal to the app. It is neither transmitted to nor hosted on our servers — DEVOLIM has no access to it. This covers:

• Profile preferences: country of residence, preferred cuisine country, language, unit system (metric/imperial), currency, meals shown and first day of the week; gender and age range (optional, see § 7); diet (optional) and allergies (optional), see § 4.
• Taste profile (optional, filled in with Yumi at sign-up or in the settings): number of people, budget, preferred cooking styles, diets, desired calorie and protein levels, foods you dislike, your kitchen equipment.
• Your weekly menus: the dishes planned for each day and each meal.
• Your recipes: name, ingredients, quantities, steps, number of servings, any calories, photo (optional, taken or chosen by you) and the link to the original page if you imported it.
• Your shopping lists: items, quantities, aisles, status (ticked or not) and the prices you note.

As this data stays on your phone, it may be included in your device's native backup (Google One / Android backup or iCloud), depending on your system settings — this backup is managed by Apple or Google, not by DEVOLIM.

When you import a recipe from a link, the app loads the page directly from your device to read its title and image: as with any ordinary visit, the website concerned then receives your IP address and the technical information of the request, under its own responsibility. This does not go through our servers.

The only data linked to your anonymous identifier and kept server-side (Firebase, see § 14) is:

• your Premium subscription status (active or not, expiry date), see § 6;
• your AI token balance (aiCredits document): balance, week of the last top-up, date the welcome tokens were granted and use of the first-week offer;
• technical usage counters: number of AI calls per minute and per day, dish translations used in the month, feedback and reports sent, to prevent abuse;
• the feedback and reports you choose to send us (see § 11).

None of your menus, recipes or lists are kept there.

4. Diet and allergies — sensitive data

The diet and allergy information you enter is optional. Depending on what you enter, it may reveal information about your health or your beliefs, which falls within a special category of data under Article 9 of the GDPR. It is entered voluntarily by you, on the basis of your explicit consent, for the sole purpose of tailoring suggestions and — crucially — allowing the AI to leave out ingredients you are allergic to and respect your diet. You can change or delete it at any time in the app's settings.

5. Artificial intelligence features (OpenAI)

The AI features of the assistant Yumi (planning a meal or a week, dish ideas, recipe from your fridge or from a title, answers to your questions about a recipe, shopping list, calorie and shopping cost estimates, translation of your dishes when you change language) run on our servers (Cloud Functions), which call the OpenAI service (OpenAI, L.L.C., United States). They can be used with tokens in the free version, and more extensively with Premium. Before first use, the app tells you what is sent and asks for your consent; you can refuse and keep using the app without these features.

For each request, only the elements needed for generation are sent to OpenAI:

• your language, your country, your cuisine country and your unit system (to suggest suitable dishes, seasonal produce and quantities);
• your allergies and your diet (so that they are strictly respected);
• your taste profile, if filled in (number of people, budget, styles, calorie and protein levels, foods to avoid, equipment), to tailor suggestions;
• the content of your request: for example the title of a meal to estimate, the ingredients from your fridge, a wish for the week, the recipe you ask about and your conversation about it, the meals to turn into a shopping list, the items to price, or the dishes to translate;
• the titles of dishes already planned and those of your recent weeks, to avoid repetition.

Neither your email address, nor your identity, nor your account identifier is sent to OpenAI. AI calls are subject to a usage limit intended to prevent abuse. The generated result is sent back to you and saved in your space, like any other dish or recipe.

OpenAI acts as a processor. According to OpenAI's policy for businesses and developers, data sent through the API is not used to train its models. See OpenAI's privacy policy.

6. In-app purchases (Apple / Google)

Menu Semaine Premium is offered as an auto-renewing subscription. All transactions are handled entirely by the Apple App Store (iOS) or Google Play Billing (Android).

DEVOLIM receives neither your identity, nor your payment details, nor your address. To manage subscriptions and verify that your purchases are valid, we use RevenueCat (RevenueCat, Inc., United States), a specialised provider that interfaces with the Apple and Google stores. RevenueCat receives your anonymous identifier and the purchase receipt information (plan, expiry date, status) in order to confirm your subscription and activate the Premium features on your device. See RevenueCat's policy, Apple's policy and Google's policy. The subscription terms are set out in our subscription terms.

7. Audience measurement (Firebase Analytics)

The app uses Firebase Analytics (Google) to measure audience in aggregate form and understand how features are used (for example: sign-in, adding a meal or a recipe, compiling a shopping list, using an AI feature, viewing the Premium offer). Technical identifiers and usage events are processed: app instance identifier, device model, system version, language. In addition, as audience properties, the gender and age range if you provide them at sign-up (optional), and the answers of your taste profile as keywords (number of people, budget, styles, diets, calorie and protein levels, number of foods avoided, equipment), in order to understand who the app serves and how to improve it. None of the content of your recipes, menus or shopping is sent in these events, and no data is sold.

Measuring TikTok ad campaigns (iPhone). When we promote Menu Semaine with ads on TikTok, the iPhone app tells TikTok about a few steps, to know whether a campaign really brings in users: installing and opening the app, finishing sign-up, starting a free trial and subscribing (with its price). Nothing else is sent: not your menus, recipes or shopping, and not your sign-up answers. This information is sent only with your consent, asked once after sign-up through iOS's tracking permission prompt (App Tracking Transparency). If you decline, nothing is sent to TikTok; you can change your mind at any time in Settings, Privacy & Security, Tracking. With your consent, TikTok also receives your iPhone's advertising identifier and technical device data (model, system version, IP address).

8. Crash reports (Firebase Crashlytics)

To detect and fix bugs, the app sends crash reports via Firebase Crashlytics (Google): technical trace of the error, device model, system version. They contain no contact details and none of your personal data. This collection is disabled in development builds and only active in the published version.

9. App security (App Check)

To prevent abuse and access to our servers from non-genuine apps, Menu Semaine uses Firebase App Check, based on App Attest / DeviceCheck (iOS) and Play Integrity (Android). These mechanisms certify that requests do come from a legitimate installation of the app; they do not collect the content of your data.

10. Notifications

Menu Semaine may send you reminders: the meal you planned for the day, planning the coming week, your pending shopping list. These reminders are produced entirely on your device: no server knows the content of your menus.

They are only enabled after your explicit consent, and each type of reminder can be adjusted or turned off separately, at any time, from Settings → Notifications in the app (or from your phone's settings). Occasional recipe suggestions and nudges, which are promotional in nature, form a separate category: it is disabled by default and is only enabled by a deliberate action on your part, which you can withdraw just as easily.

When this category is enabled and you have allowed notifications, the app may also receive informational push notifications sent by DEVOLIM via Firebase Cloud Messaging (Google). For this, your device receives a technical token from Google and subscribes to general broadcast groups (your language, and free or Premium version). DEVOLIM neither collects nor stores this token, and these messages contain no data from your menus. Turning off the category or notifications unsubscribes the device from these groups.

11. Feedback and reports

The app lets you give us your feedback (from the home screen or Settings → Your feedback) and report AI-generated content. In both cases, we only receive what you choose to send us: your message, the satisfaction you indicate, the type of feedback, the app's language and version, your platform and your subscription status. None of your menus, recipes or shopping lists are sent to us.

Feedback is also accompanied by the age of your account and a few usage counters: how many recipes, planned weeks and shopping lists you have created, and how long the app has been installed. These are numbers, never their content. They are used to put feedback in context — a remark from someone who has been using the app for six months does not read like one from day one — and for nothing else: no automated decision, no profiling, no transfer to a third party.

These submissions are linked to your anonymous identity, in order to limit abuse and connect several messages from the same person. They contain no directly identifying data — unless you write some yourself in your message, which the app invites you to avoid. They are kept for 3 years, then deleted automatically; if you delete your account, they are immediately dissociated from your identity and kept in anonymous form.

Legal basis: legitimate interest (Art. 6.1.f GDPR) — improving the app and moderating generated content, in line with our obligations as a platform.

12. Website https://menusemaine.devolim.fr

The website is static and uses no analytics cookies, no advertising pixels, no tracking tools. The website makes no request to any third-party domain: its fonts are hosted on our own servers. When you email us, we process your address and the content of your message solely to reply to you; these exchanges are kept for a maximum of 3 years.

13. Legal bases

• Anonymous identity, profile, menus, recipes, shopping, subscription: performance of the contract — Art. 6.1.b GDPR.
• Diet and allergies (sensitive data): explicit consent — Art. 6.1.a and 9.2.a GDPR.
• AI features: performance of the contract (provision of the service you request, in the free or Premium version) — Art. 6.1.b GDPR; diet and allergies: explicit consent (see above).
• AI tokens and usage counters: performance of the contract (keeping your balance) and legitimate interest in preventing abuse — Art. 6.1.b and 6.1.f GDPR.
• Feedback and content reports: legitimate interest — Art. 6.1.f GDPR.
• In-app purchases and verification: performance of the contract — Art. 6.1.b GDPR.
• Audience measurement and crash reports: legitimate interest in improving and stabilising the app — Art. 6.1.f GDPR.
• Security (App Check, abuse prevention): legitimate interest in the security of the service — Art. 6.1.f GDPR.
• Service reminders (today's meal, week, shopping): performance of the contract — Art. 6.1.b GDPR.
• Suggestions, nudges and informational push notifications (promotional): consent — Art. 6.1.a GDPR, which can be withdrawn at any time in the app's settings.
• Replying to emails: legitimate interest in communication — Art. 6.1.f GDPR.

14. Recipients (processors and third parties)

Apart from yourself, the third parties likely to process data in connection with the service are:

• Google (Google Ireland Limited / Google LLC) — Firebase (anonymous Authentication, Cloud Functions, Firestore for the Premium status, tokens, usage counters, feedback and reports, Analytics, Crashlytics, App Check, Remote Config, Cloud Messaging) and Google Play distribution / billing.
• OpenAI, L.L.C. (United States) — AI content generation, based solely on the elements described in § 5.
• RevenueCat, Inc. (United States) — subscription management and verification (see § 6).
• TikTok Technology Limited (Ireland) — measurement of ad campaigns run on TikTok, iPhone app (see § 7).
• Apple Inc. (One Apple Park Way, Cupertino, CA 95014, USA) — iOS distribution and App Store billing.

No data is sold or transferred for advertising purposes. Menu Semaine contains no advertising network.

15. Hosting and transfers outside the European Union

Your menus, recipes and shopping lists stay on your device and are not hosted on any server. The only server-side data (subscription status, token balance, usage counters, feedback and reports, linked to your anonymous identifier) is hosted in the European Union, in Google Cloud's europe-west1 (Belgium) region. Some processors (Google, OpenAI, RevenueCat, Apple, TikTok) may nevertheless process technical data in the United States. These transfers are governed by the EU-US Data Privacy Framework (adequacy decision of 10 July 2023) and/or the European Commission's standard contractual clauses.

16. Retention periods

• Local content (profile, menus, recipes, shopping): kept on your device as long as the app is installed; erased when you delete your data or uninstall the app.
• Subscription status, token balance and usage counters (server-side): kept as long as your anonymous identity exists, and erased when you delete your account from the app; purchase information may be kept by Apple, Google and RevenueCat for evidence and accounting purposes, under their own legal obligations.
• Firebase Analytics data: kept by Google for the configured period (14 months by default).
• Crashlytics reports: kept by Google, 90 days on average.
• Feedback and reports: 3 years, deleted automatically; anonymised as soon as you delete your account.
• Contact emails: 3 years from the last exchange.

17. Your GDPR rights

Under Articles 15 to 22 of the GDPR, you have the rights of access, rectification, erasure, restriction, objection and portability, and the right to withdraw your consent at any time.

You can also change your profile, allergies and diet at any time in the settings. For any other request (access, portability, objection), write to [email protected]. You will receive a reply within one month at most.

18. Complaint to the CNIL

If you believe your rights are not being respected, you can lodge a complaint with the French data protection authority (Commission Nationale de l'Informatique et des Libertés):

CNIL — 3 Place de Fontenoy, TSA 80715, 75334 PARIS CEDEX 07
www.cnil.fr

19. Security

Your content stays on your device. Exchanges with our servers (AI calls, subscription status) are encrypted (HTTPS/TLS), restricted to your anonymous identifier by Firestore security rules, and protected by App Check. Sensitive keys (for example the OpenAI key) are stored server-side and never appear in the app.

20. Minors

The app is not intended for children under 13 and does not knowingly collect any data concerning them. If you are a parent or guardian and believe a child has sent us data, write to us: we will delete it.

21. Changes

This policy may change along with the app or the regulations. The date of the last update appears at the top of this page; any substantial change will be notified to you in the app.