Privacy Policy

Last updated: October 2026 · Version 2.1

Resimply (“we”, “us”) extracts structured recipes from cooking videos. This policy explains how we collect, use, and protect data on this website (resimply.app) and in the Resimply iOS app.

Resimply is account-less. We never ask for your name, email address, or password. You are identified only by an anonymous, randomly generated device identifier.

1. Data Controller

The data controller responsible for processing your personal data is:

Jasper Slowik
Arnold-Schlüter-Weg 3
33100 Paderborn, Deutschland
Email: contact@resimply.app

See the Impressum for the full legal notice.

2. iOS App — data we process

Data What it is Why we hold it
Anonymous identity (UUID) A randomly generated identifier, stored in your device’s Keychain. Never linked to a name, email, or device identifier. To tie your recipes and subscription to your device without requiring an account.
Recipes Name, description, ingredients, steps, servings, original video link, cover image URL. To store the recipes you extract so they persist in your library.
Subscription state Tier (free / Pro), renewal date, product ID. Managed by RevenueCat; no raw payment data is stored by us. To determine whether you have access to Pro features.
Extraction task records Status, step, and a one-way SHA-256 hash of the submitted video link. The plaintext URL is never stored in the task record. To track the pipeline progress and surface errors.
Consent records Which policy version you accepted and when. To comply with our legal obligation to record consent.
Support messages Subject and message text you submit via in-app support. To respond to your request.
Analytics events Pseudonymous interaction events (e.g. extraction started, recipe viewed). Outside the United States, only collected with your explicit opt-in; in the United States, on by default until you opt out (see §8). To understand how the app is used and improve it. See §9.

3. Website — data we process

This website (resimply.app) does not require you to create an account or submit any personal data directly. It loads no third-party analytics, advertising, or tracking scripts and sets no cookies. Its own JavaScript uses browser storage only for your language preference (localStorage) and temporary campaign attribution (sessionStorage) when a campaign link includes UTM parameters. UTM values last only for the browser session and may be copied into an App Store campaign link when you choose to download the app. Web fonts and other assets are self-hosted.

Web fonts are self-hosted on our own server (resimply.app). Your browser does not contact Google or any third party to load fonts, so no IP address is transferred to a font provider.

4. The extraction pipeline

When you submit a video link, the following happens:

  1. Your device sends the URL and your authentication token to our backend (Supabase Edge Functions, hosted in the EU).
  2. Our backend passes the URL to Apify, a content retrieval service, which fetches the public video and associated captions.
  3. The video content and captions are passed in-memory to OpenRouter (an AI API router) to extract a structured recipe using an AI language model.
  4. The extracted recipe is saved to your library in our database. The original video link is stored as part of your recipe so you can return to the source video.
  5. Video bytes are processed in memory and are not stored after extraction is complete.

We only process video links that you explicitly submit. We do not access your camera, microphone, photos, or contacts.

5. Legal bases (GDPR Art. 6)

Processing activity Legal basis
Anonymous identity, recipes, subscription state, extraction pipeline Art. 6(1)(b) — necessary to perform the service you requested
In-app analytics (PostHog) Art. 6(1)(a) — your explicit consent (opt-in only)
Consent records, GDPR request log Art. 6(1)(c) — legal obligation
Support messages Art. 6(1)(b) — necessary to respond to your support request

6. Sub-processors

We share data with the following companies only to operate the service. A full description of each processor and the data they receive is on our Sub-processors page.

Processor Role Region
Supabase Backend: anonymous auth, database, edge functions EU
Apple App distribution and in-app purchases Global
RevenueCat Subscription management US
OpenRouter AI recipe extraction (API routing) US
Apify Video content retrieval US / EU
PostHog Product analytics (in app only; opt-in, opt-out in the US) EU
Sentry Crash reports and handled exceptions (in app only; opt-in, opt-out in the US) Configured Sentry region

7. International transfers

Supabase and PostHog are hosted within the EU/EEA. RevenueCat, OpenRouter, and Apify are based in or process data in the United States, which does not have a general EU adequacy decision.

For transfers to US processors, we apply appropriate safeguards in accordance with GDPR Art. 46, including Standard Contractual Clauses (SCCs) and, where applicable, reliance on the EU–US Data Privacy Framework for certified organizations. Details are on our Sub-processors page.

8. Analytics and cookies

In the iOS app

Outside the United States (including the EU/EEA, the UK and Switzerland), analytics and diagnostics are off by default in the app. PostHog and Sentry only initialize after you grant explicit consent. In the United States, they are on by default and you can opt out; we determine this from your App Store country, or your device region if that is unavailable. We do not sell your personal information or share it for cross-context behavioral advertising. Wherever you are, you can turn them off at any time in Settings → Privacy. Diagnostics contain only app/build/iOS versions, feature names, sanitized error domains, numeric codes, and the crash stack trace — never recipe text, video URLs, request bodies, tokens, service/customer identifiers, advertising identifiers, or an anonymous user UUID. No session recording is used.

On this website

This website uses no analytics, tracking, or advertising, and sets no cookies. It stores only the selected language in persistent browser storage and campaign UTM values in session-only browser storage; you can clear both through your browser settings. The site does not send these values to a website analytics provider. When you select the App Store download link, selected campaign parameters can be included in the destination URL, which is then handled by Apple under Apple’s privacy policy.

9. Your rights under GDPR (Art. 15–22)

You have the following rights regarding your personal data. Most can be exercised directly within the app without contacting us.

Right Article How to exercise
Access / export Art. 15 Settings → My Account → Export My Data (downloads all your data as JSON)
Rectification Art. 16 Edit any recipe directly in the app
Erasure (“right to be forgotten”) Art. 17 Settings → My Account → Delete Account (permanent, immediate)
Restriction of processing Art. 18 Email contact@resimply.app
Data portability Art. 20 Settings → My Account → Export My Data (machine-readable JSON)
Object to processing Art. 21 Toggle analytics in Settings → Privacy, or email us for other objections
Withdraw consent Art. 7(3) Toggle analytics off in Settings → Privacy at any time
Automated decision-making Art. 22 Resimply uses AI to extract recipe content, but does not make automated decisions that produce legal or similarly significant effects on you.

For requests that cannot be handled in-app, visit our Data Requests page or email contact@resimply.app. We respond within 30 days (GDPR Art. 12(3)).

10. Retention

Your data is retained as long as your anonymous identity exists in our system. When you delete your account (Settings → My Account → Delete Account), all data associated with your identity is deleted immediately and permanently.

Anonymous identities with no saved recipes may be pruned after an extended period of inactivity. Consent records and GDPR request logs are retained as required by law.

11. Children

Resimply is not directed at children under 17. We do not knowingly collect data from anyone under 17. If you believe a minor has submitted data to us, please contact us at contact@resimply.app and we will delete it promptly.

12. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top reflects the most recent revision. For material changes, we will notify you in-app before the change takes effect.

13. Contact and supervisory authority

For privacy questions or requests, contact us at contact@resimply.app.

You also have the right to lodge a complaint with your national data protection authority. The competent authority for Germany is the Bundesbeauftragter für den Datenschutz und die Informationsfreiheit (BfDI): www.bfdi.bund.de. If you are in another EU member state, you may contact your local supervisory authority instead.