Privacy Policy

Last updated: September 29, 2026

This is the English translation of our German privacy policy (Datenschutzerklärung). Wochentisch is operated from Germany and is subject to the EU General Data Protection Regulation (GDPR).

1. Controller

Sascha Moritz
Westerfelder Straße 1
58339 Breckerfeld
Germany
Email: support@smolabs.de

2. Server log files

When you visit this website or use the app, our hosting provider IONOS automatically collects technical access data transmitted by your browser or the app: IP address, date and time of access, the page or endpoint requested, browser type/app version and user agent. This data is processed solely to keep our systems secure and stable (e.g. error analysis, abuse detection) and is not combined with other data sources. The legal basis is our legitimate interest in the security and stability of our systems (Art. 6(1)(f) GDPR). Log files are deleted automatically after a short period, as soon as they are no longer needed for this purpose.

3. Account & registration

When you register, we collect your email address, your name and a password (stored only as a hash, never readable in plain text). Registration is confirmed via an activation link sent by email. The legal basis is the performance of our contract with you (Art. 6(1)(b) GDPR). This data is stored for as long as your account exists.

4. Household, recipe and meal plan data

Recipes, meal plans and grocery lists that you or members of your household create are stored in order to provide the core functionality of the app (Art. 6(1)(b) GDPR). You can optionally upload photos for your own recipes; they are stored in our own self-hosted object storage (MinIO) on the same server as the rest of the application – no additional external processor is involved.

5. Recipe image suggestions (Pexels, Pixabay)

If you request an image suggestion for a recipe without its own photo, our server sends a search request containing the recipe title to the image APIs of Pexels and Pixabay. This request is made by our server, not by your device – your IP address is not transmitted to Pexels or Pixabay. The legal basis is our legitimate interest in providing a working image selection (Art. 6(1)(f) GDPR).

6. Product usage statistics

After you log in, we record minimal usage data: session start and end, which areas of the app are opened, which features are used (e.g. marking a favorite, adding a dish to the meal plan) and the fact that a search was made (but not the search term itself). In addition, we record basic technical information: platform, operating system version, app version, screen size class, language and time zone. We do not record search terms, recipe or household content, device or advertising IDs, IP addresses or location data. This data is linked to your account so that we can analyze repeat usage, and it is deleted automatically when you delete your account. The legal basis is our legitimate interest in improving the app (Art. 6(1)(f) GDPR).

7. Transactional emails

To send activation, password reset and invitation emails, we pass your email address to our email provider IONOS, which also hosts the mailbox support@smolabs.de. We have a data processing agreement with this provider. The legal basis is the performance of our contract with you (Art. 6(1)(b) GDPR).

8. Purchases & subscriptions

Wochentisch optionally offers a Premium subscription and individual recipe packs. Depending on your platform, purchases are handled through Apple's in-app purchases (App Store) or Google's in-app purchases (Google Play Store). Payment data (card details etc.) is handled exclusively by Apple or Google and never reaches our own systems. To manage purchase and subscription status, we use the service provider RevenueCat; this involves a pseudonymous purchase identifier for your device – we receive neither your real name nor any payment data. The legal basis is the performance of our contract with you (Art. 6(1)(b) GDPR).

9. Hosting

This website as well as the Wochentisch app and its server infrastructure are hosted by IONOS (server location: EU). We have a data processing agreement with this provider.

10. Users outside the EU

All data is processed and stored in the EU, regardless of where you use the app. If you use Wochentisch from outside the EU (for example from the United States), your data is therefore transferred to and processed in the EU. We do not sell your personal information, and we do not share it with third parties for advertising purposes – Wochentisch contains no ads and no advertising trackers.

11. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and the right to object (Art. 21 GDPR). You can export all of your data and delete your account yourself at any time in the app under Settings → Profile; step-by-step instructions and an overview of which data is deleted or retained can be found on our account deletion page. For any other requests, you can reach us at the email address above.

You also have the right to lodge a complaint with a data protection supervisory authority.

12. Changes to this policy

We update this privacy policy whenever our data processing changes. The current version is always available on this page.