Privacy Policy

Last updated: June 2026 · Version 2.0

Resimply (“we”, “us”) extracts structured recipes from cooking videos. This policy explains how we collect, use, and protect data on this website (resimply.app) and in the Resimply iOS app.

Resimply is account-less. We never ask for your name, email address, or password. You are identified only by an anonymous, randomly generated device identifier.

1. Data Controller

The data controller responsible for processing your personal data is:

Jasper Slowik
Arnold-Schlüter-Weg 3
33100 Paderborn, Deutschland
Email: contact@resimply.app

See the Impressum for the full legal notice.

2. iOS App — data we process

Data What it is Why we hold it
Anonymous identity (UUID) A randomly generated identifier, stored in your device’s Keychain. Never linked to a name, email, or device identifier. To tie your recipes and subscription to your device without requiring an account.
Recipes Name, description, ingredients, steps, servings, original video link, cover image URL. To store the recipes you extract so they persist in your library.
Subscription state Tier (free / Pro), renewal date, product ID. Managed by RevenueCat; no raw payment data is stored by us. To determine whether you have access to Pro features.
Extraction task records Status, step, and a one-way SHA-256 hash of the submitted video link. The plaintext URL is never stored in the task record. To track the pipeline progress and surface errors.
Consent records Which policy version you accepted and when. To comply with our legal obligation to record consent.
Support messages Subject and message text you submit via in-app support. To respond to your request.
Analytics events Pseudonymous interaction events (e.g. extraction started, recipe viewed). Only collected with your explicit opt-in. To understand how the app is used and improve it. See §9.

3. Website — data we process

This website (resimply.app) does not require you to create an account or submit any personal data directly. It uses no analytics, tracking, or advertising and sets no cookies. Web fonts are self-hosted, so loading a page sends no data about your visit to any third party.

Web fonts are self-hosted on our own server (resimply.app). Your browser does not contact Google or any third party to load fonts, so no IP address is transferred to a font provider.

4. The extraction pipeline

When you submit a video link, the following happens:

  1. Your device sends the URL and your authentication token to our backend (Supabase Edge Functions, hosted in the EU).
  2. Our backend passes the URL to Apify, a content retrieval service, which fetches the public video and associated captions.
  3. The video content and captions are passed in-memory to OpenRouter (an AI API router) to extract a structured recipe using an AI language model.
  4. The extracted recipe is saved to your library in our database. The original video link is stored as part of your recipe so you can return to the source video.
  5. Video bytes are processed in memory and are not stored after extraction is complete.

We only process video links that you explicitly submit. We do not access your camera, microphone, photos, or contacts.

5. Legal bases (GDPR Art. 6)

Processing activity Legal basis
Anonymous identity, recipes, subscription state, extraction pipeline Art. 6(1)(b) — necessary to perform the service you requested
In-app analytics (PostHog) Art. 6(1)(a) — your explicit consent (opt-in only)
Consent records, GDPR request log Art. 6(1)(c) — legal obligation
Support messages Art. 6(1)(b) — necessary to respond to your support request

6. Sub-processors

We share data with the following companies only to operate the service. A full description of each processor and the data they receive is on our Sub-processors page.

Processor Role Region
Supabase Backend: anonymous auth, database, edge functions EU
Apple App distribution and in-app purchases Global
RevenueCat Subscription management US
OpenRouter AI recipe extraction (API routing) US
Apify Video content retrieval US / EU
PostHog Product analytics (opt-in, in app only) EU

7. International transfers

Supabase and PostHog are hosted within the EU/EEA. RevenueCat, OpenRouter, and Apify are based in or process data in the United States, which does not have a general EU adequacy decision.

For transfers to US processors, we apply appropriate safeguards in accordance with GDPR Art. 46, including Standard Contractual Clauses (SCCs) and, where applicable, reliance on the EU–US Data Privacy Framework for certified organizations. Details are on our Sub-processors page.

8. Analytics and cookies

In the iOS app

Analytics is off by default in the app. PostHog only initializes after you grant explicit consent. You can toggle analytics at any time in Settings → Privacy. No session recording is used. Events are keyed to your anonymous UUID and contain no personal data.

On this website

This website uses no analytics, tracking, or advertising, and sets no cookies. We do not store anything in your browser or send any data about your visit to third parties. The only network requests the site makes are to load its own content and web fonts.

9. Your rights under GDPR (Art. 15–22)

You have the following rights regarding your personal data. Most can be exercised directly within the app without contacting us.

Right Article How to exercise
Access / export Art. 15 Settings → My Account → Export My Data (downloads all your data as JSON)
Rectification Art. 16 Edit any recipe directly in the app
Erasure (“right to be forgotten”) Art. 17 Settings → My Account → Delete Account (permanent, immediate)
Restriction of processing Art. 18 Email contact@resimply.app
Data portability Art. 20 Settings → My Account → Export My Data (machine-readable JSON)
Object to processing Art. 21 Toggle analytics in Settings → Privacy, or email us for other objections
Withdraw consent Art. 7(3) Toggle analytics off in Settings → Privacy at any time
Automated decision-making Art. 22 Resimply uses AI to extract recipe content, but does not make automated decisions that produce legal or similarly significant effects on you.

For requests that cannot be handled in-app, visit our Data Requests page or email contact@resimply.app. We respond within 30 days (GDPR Art. 12(3)).

10. Retention

Your data is retained as long as your anonymous identity exists in our system. When you delete your account (Settings → My Account → Delete Account), all data associated with your identity is deleted immediately and permanently.

Anonymous identities with no saved recipes may be pruned after an extended period of inactivity. Consent records and GDPR request logs are retained as required by law.

11. Children

Resimply is not directed at children under 17. We do not knowingly collect data from anyone under 17. If you believe a minor has submitted data to us, please contact us at contact@resimply.app and we will delete it promptly.

12. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top reflects the most recent revision. For material changes, we will notify you in-app before the change takes effect.

13. Contact and supervisory authority

For privacy questions or requests, contact us at contact@resimply.app.

You also have the right to lodge a complaint with your national data protection authority. The competent authority for Germany is the Bundesbeauftragter für den Datenschutz und die Informationsfreiheit (BfDI): www.bfdi.bund.de. If you are in another EU member state, you may contact your local supervisory authority instead.