1. Who we are
Flourhands is operated by Kealy Studio, based in Spain. This policy explains what information we collect when you use the Flourhands mobile app and this website, how we use it, and the choices you have.
2. Information we collect
We collect the following information when you use Flourhands:
- Account information — your email address and a display name when you create an account. If you sign in with Google or Apple instead of email and password, we receive your name, email address, and (with Google) your profile photo from that provider.
- Profile photo — an avatar, if you choose to add one.
- Content you create — your recipes (including any photos you attach or scan), the recipes you save, your cook history (which recipes you cooked, when, and an optional star rating), your progress through a recipe in Cooking Mode, and the name of your household if you create one.
- Push notification token — a device token that lets us deliver notifications, for example when someone in your household cooks your recipe. It's removed when you sign out.
That's the whole list. Flourhands does not use analytics, advertising, or tracking SDKs, and it never asks for your location or contacts. This website sets no cookies and runs no trackers. Timers and dough-rest reminders in Cooking Mode are scheduled on your device itself — they don't go through our servers.
3. How we use your information
We use the information we collect to:
- Provide the app: store your recipes and cookbook, and keep them in sync across your devices
- Run household features: share recipes and cooking activity with the people in your household
- Send push notifications about activity that involves you, and occasional service announcements
- Send you a welcome email when you sign up
- Respond to your support requests
- Keep the service secure and working
We do not sell your personal information to third parties, and we don't use it for advertising.
4. Recipe scanning and AI
When you scan a recipe with the camera or upload a recipe photo, that photo is sent to OpenAI, our AI provider, to extract the recipe text from the image. Only the photo itself is sent — your name, email, and account details are not attached to the request.
One thing to know about photos: recipe photos and avatars are stored on our storage service and served from direct links that don't require signing in. They aren't listed or searchable anywhere, but anyone who has a photo's exact link can view it — so treat photos as less private than the rest of your data.
5. What your household can see
A household is a small, invite-only group. If you join one, its members can see your display name and avatar, the recipes you share to the household shelf, and your cooking activity — which recipes you cooked and the rating you gave. Your Cooking Mode progress and your account details stay private to you.
6. Third-party services
Flourhands relies on a small number of third-party services to function. Each processes data in accordance with its own privacy policy:
- Supabase — sign-in, database, and photo storage
- Google Cloud — hosts our backend service, in Frankfurt, Germany
- OpenAI — extracts recipe text from photos you scan
- Expo — delivers push notifications to your device
- Resend — sends our welcome and service emails
- Google Sign-In and Apple Sign-In — only if you choose to sign in with them
Some of these providers process data outside the EU (for example, OpenAI and Expo in the United States). Where they do, the transfer is covered by the EU's standard contractual safeguards.
7. Data retention and deletion
We keep your data for as long as your account is active. You can delete your account at any time from Settings in the app, which permanently removes your account and the data linked to it — recipes, saves, cook history, household membership, and device tokens. You can also email us to request deletion of your account and anything that remains, such as uploaded photos; we complete those requests within 30 days. See our data deletion page for details.
8. Security
Your data is encrypted in transit using TLS and at rest by our hosting providers. Access rules in our database ensure your private recipes are visible only to you and your household, and your cook sessions only to you. No method of transmission or storage is completely secure, but we work to protect your information using industry-standard practices.
9. Children's privacy
Flourhands is not directed at children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will delete it.
10. Your rights
Because we are based in the EU, the General Data Protection Regulation (GDPR) applies to how we handle your data. In plain terms, we process your data to provide the app you signed up for, to keep the service secure and working, and — for things like push notifications — because you opted in. You have the right to access, correct, export, or delete the personal information we hold about you, and to object to or restrict our use of it. To exercise any of these rights, email us at [email protected]. You also have the right to complain to your local data protection authority — in Spain, that's the Agencia Española de Protección de Datos (AEPD).
11. Changes to this policy
We may update this policy from time to time. When we do, we'll update the date at the top of this page and, for significant changes, notify you in the app.
12. Contact
If you have any questions about this policy or how we handle your data, email us at [email protected].