Privacy Policy
What data Rescue Kitchen processes, why it is needed and what rights you have.
Last updated: 18 July 20261. Controller
Maximilian Fricke
Körtestr. 22, 10967 Berlin
Email: hello@aimoxyz.xyz
2. Scope
This Privacy Policy applies to the Rescue Kitchen app and this website. The app works without a user account. We limit processing to data required for scans, cooking plans, local management and optional subscriptions.
3. Processing in the app
Photos and receipts
When you start a scan, the selected camera or library image is compressed and processed to identify ingredients and estimate freshness. Images may contain metadata or unintended personal information. Do not photograph people, payment details or other sensitive information.
The image is sent through our Supabase Edge Function to the Google Gemini API solely to perform the analysis you requested. The legal basis is Article 6(1)(b) GDPR and, where consent is required, Article 6(1)(a) GDPR.
Ingredients and cooking plans
To create a cooking plan, ingredient names, quantities, estimated freshness and app language are sent through Supabase to Google Gemini. Generated recipes are then displayed in the app.
Local app data
Ingredient lists, saved and cooked recipes, cached cooking plans, scan allowance and locally calculated savings are stored on your device. You can delete individual content in the app. Uninstalling generally removes local app data, subject to operating-system device or cloud backups.
Subscriptions
The app uses RevenueCat for Pro subscriptions. This involves an automatically generated anonymous app user ID, platform and app information, purchase history, receipt information and entitlements. Apple processes the payment. Rescue Kitchen does not receive your complete payment or card details.
Permissions and sharing
The camera and photo library are used only after operating-system permission. Sharing a savings image opens the system share sheet; further processing is governed by the service you select.
4. Recipients and processors
- Supabase, Inc. – backend proxy and technical request processing.
- Google LLC (Gemini API) – image analysis and recipe generation.
- RevenueCat, Inc. – subscription and Pro entitlement management.
- Apple – app distribution, in-app purchases and operating-system services.
Where required, we enter into data processing agreements. Transfers to third countries rely on applicable adequacy decisions or appropriate safeguards such as the EU Standard Contractual Clauses.
5. Retention
We do not intentionally store uploaded images in our own user database. Technical providers may retain requests and responses for a limited period to meet security, abuse-prevention and legal obligations. Local app data remains until you delete it or uninstall the app. Purchase and contractual records are kept as long as necessary for contract performance, evidence and legal obligations.
6. Website
This static website currently uses no first-party analytics, advertising or tracking cookies and has no contact forms. The hosting provider may process technically necessary server logs such as IP address, request time, requested file, referrer and browser data.
Hosting: Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA
7. Your rights
Subject to the GDPR, you may have rights of access, rectification, erasure, restriction, data portability and objection. You may withdraw consent at any time for the future and lodge a complaint with a data protection authority.
Because Rescue Kitchen has no accounts, we may need information that technically identifies the relevant transaction. Send requests to hello@aimoxyz.xyz.
8. AI output and changes
Ingredient detection, freshness estimates and recipes are generated automatically and may be inaccurate or incomplete. We do not make decisions based solely on automated processing that produce legal or similarly significant effects.
We update this policy when features, providers or legal requirements change. The current version is always available on this page.
