Privacy Policy

Last updated: 2026-10-21

1. Controller

Sebastian Gassmann
Lauterstr. 27, 71083 Herrenberg, Germany
Email: app.tavolino@gmail.com

2. Overview

Tavolino is a meal-planner app with recipe management, weekly planning and an optional community area. This policy explains what data we process when you use the app.

3. Data we process

a) Account and profile data (only with optional sign-in)

If you sign in via Sign in with Google or Sign in with Apple, we receive your name, email address and a provider user ID. These are used to create your profile, sync your data across devices and power the community features.

b) Content you create

Recipes, weekly plans, shopping lists, ratings and photos you create. These are stored locally on your device (SQLite). Signed-in users also get a cloud backup; content you explicitly share becomes visible to others in the community area.

c) Camera, photos and microphone

With your permission we access the camera/photos (recipe photos, photo import) and the microphone (dictating ingredients via speech recognition). Speech recognition runs through your device's system feature.

d) Push notifications

Via Firebase Cloud Messaging (Google) we manage device tokens to send you push messages (e.g. new ratings, group updates). Individual push types can be turned off in the app settings.

e) Advertising (Google AdMob, Unity LevelPlay)

We display ads via Google AdMob or Unity LevelPlay (Unity Technologies / ironSource, including Unity Ads and Meta Audience Network); which network is active is set centrally by us. These providers may process device identifiers (e.g. advertising ID), IP address and device and usage information to serve ads, prevent fraud and measure performance. In the EU/EEA we ask for your consent beforehand via a consent tool (IAB TCF standard), and on iOS additionally via the App Tracking Transparency dialog where applicable; without consent you receive non-personalized ads. Data may be transferred to third countries (in particular the USA). More: Unity privacy policy, Meta privacy policy.

f) AI features

For AI-powered features (recipe creation, URL/photo import, cooking steps, translations) we send the relevant inputs through our backend to the Google Gemini API. Only the content required for each feature is transmitted.

g) Website (mytavolino.com): cookies, consent and advertising

The website sets a strictly necessary session cookie when you sign in and remembers your chosen language in a cookie (also strictly necessary, not linked to you). If ads are shown on the website, they are served via Google AdSense or Google Ad Manager (Google Ireland Limited). These may use cookies and similar technologies and process data such as IP address, device and browser information to serve ads, prevent abuse and measure performance. On your first visit we ask for your consent via Google's consent tool (IAB TCF standard). Advertising cookies and personalized ads are only used with your consent; without consent Google shows at most non-personalized or limited ads. You can change or withdraw your choice at any time via “Privacy settings” in the website footer. Optionally you can unlock more AI requests by watching an ad video; for this we only store how many requests were credited to you in the current week. More: How Google uses information from sites.

h) Website: visitor statistics (Umami)

To understand how the website is used, we count page views with Umami, which we run ourselves on our server in the EU (Hetzner Online GmbH). Umami sets no cookies and builds no user profiles; it only stores aggregated information such as the page visited, the referring website, browser and device type, screen size, language and country. Your IP address is not stored; it is only used briefly to determine the country and to form an anonymous, regularly changing identifier, so you cannot be recognised over longer periods. We do not share this data with third parties. Legal basis: our legitimate interest in designing the website to meet users' needs (Art. 6(1)(f) GDPR).

4. Third parties (processors / recipients)

5. Legal bases (GDPR)

6. Retention

Data is stored as long as your account exists or as long as needed for the respective purpose. Locally deleted recipes stay in the trash for 30 days. On request we delete your account and associated data.

7. Your rights

Access, rectification, erasure, restriction, portability and objection. Contact us at app.tavolino@gmail.com. You may also lodge a complaint with a data protection authority.

8. Account deletion

You can request deletion of your account and all associated data at any time at app.tavolino@gmail.com.

Tavolino