Privacy policy
The short version. A BakeDaddy recipe is worked out on your phone, and nothing about it is sent anywhere. An account is optional. Usage data is sent only if you say yes, and never what you type. We don’t sell data, show ads or track you across other apps.
Who is responsible
Herje Banan AS (org. no. TODO), TODO, is the controller for the personal data described here. It covers the BakeDaddy app and this website.
Questions about privacy, or a request to use your rights: hei@bakedaddy.app.
This website and the waitlist
Waitlist. If you join the waitlist we store your email address, the time you gave consent, your language, and which link brought you to the page (for example an Instagram post), so we can tell which posts work.
- Why: to email you once when BakeDaddy launches, and now and then with a baking tip.
- Legal basis: your consent (GDPR art. 6(1)(a), and section 15 of the Norwegian Marketing Control Act).
- How long: until you unsubscribe or ask us to delete it, and at the latest 12 months after launch.
- Where: in our Supabase database in the EU. The list can be read only by us.
You can withdraw consent at any time with the link in every email or by writing to us.
Analytics. The website counts visits with Cloudflare Web Analytics, which sets no cookies and builds no profile of you. The site uses no cookies at all.
Hosting. Cloudflare serves this website. Like any web host it processes your IP address briefly to deliver pages and keep the site secure.
Using the app without an account
Recipes are calculated on your phone by BakeDaddy’s own rules. Your kitchen settings, flours and saved recipes stay on the phone, and making a recipe sends nothing over the network.
Your account (optional)
If you sign in - with Apple, Google or email - we store:
- your email address and a user id;
- which sign-in method you used;
- your saved recipes, your kitchen settings and flour shelf, and your bake log (when you baked a recipe).
Why: so your recipes and kitchen follow you between phones and are not lost if you change phone. Legal basis: our agreement with you (art. 6(1)(b)). How long: until you delete your account. Deleting it removes all of the above from our servers.
If you sign in with Apple, Apple may give us a relay address instead of your real email. If you delete your account, we also revoke BakeDaddy’s access in your Apple ID.
Ask BakeDaddy and flour lookup (Pro)
These two features use an AI model, Claude, from Anthropic.
- Ask BakeDaddy sends the recipe you’re asking about and your messages to Anthropic to produce an answer.
- Adding a new flour sends its name to Anthropic to look up how it bakes. BakeDaddy blends send the flours, the grams you have and the bread you’re after.
We send nothing else about you: no name, no email. Anthropic processes the data on our behalf to answer, and does not use it to train its models. The chat itself is stored only on your phone.
To keep the service fair we count how many AI requests each account makes per day. Legal basis: our agreement with you (art. 6(1)(b)).
Purchases
BakeDaddy Pro is bought through Apple. Apple handles the payment and we never see your card details. RevenueCat, which manages subscriptions for us, receives the purchase receipt from Apple together with your user id so that your account gets Pro. Legal basis: our agreement with you (art. 6(1)(b)). Purchase records are kept as long as accounting law requires.
Usage data - only if you say yes
Once you have set up your kitchen, the app asks whether you want to share how you use it. Only if you say yes does it record what you do - the steps you take, the bread you make, when you bake and how you use Pro - so we can see what works and fix what doesn’t.
- It is sent under a random id, not your name, and the id is replaced when you sign out.
- It never includes what you type: no recipe names, no chat messages, no email.
- It is stored with us in the EU and in PostHog’s EU region.
- Legal basis: your consent (art. 6(1)(a)).
You can change your mind at any time in the app under Settings → Share usage data. Turning it off deletes the usage data that has been sent, here and at PostHog.
Our servers also record technical events - for example that an AI request was made, or that a subscription started - for everyone. They are linked to your account in PostHog only if you have said yes on one of your phones.
Weekly totals from accounts
If you are signed in, the bakes saved in your account count towards weekly totals: how many people bake each week, whether they come back to the same recipe, how much Pro and AI are used, and what kind of bread (technique, flours, hydration) people make. We use only totals; any group smaller than ten is never shown, and no total is linked to the usage data above.
- Why: to know whether BakeDaddy works and to make its questions and defaults fit the bread people actually bake.
- Legal basis: our legitimate interest (art. 6(1)(f)). We have weighed this against your interests; nothing new is collected for it, and it leads to no decisions about you.
- Your right to object: turn off Settings → Count my bakes in weekly totals. It takes effect at once.
Who helps us
We use these processors. Each processes data only on our instructions and under a data processing agreement.
| Processor | What for | Where |
|---|---|---|
| Supabase | Accounts, database, server functions, waitlist | EU |
| Anthropic | Ask BakeDaddy and flour lookup | USA |
| RevenueCat | Subscriptions | USA |
| PostHog | Usage data, only with consent | EU |
| Cloudflare | Hosting and analytics for this website | Global network |
| Apple | App Store, payments, Sign in with Apple | Apple’s own terms apply |
| Sign in with Google, if you choose it | Google’s own terms apply |
When data goes to a country outside the EEA, the transfer is protected by the EU-US Data Privacy Framework where the recipient is certified, and otherwise by the European Commission’s standard contractual clauses.
What we never do
We don’t sell your data, we don’t show ads, and we don’t track you across other apps or websites.
Your rights
You have the right to access the data we hold about you, have it corrected or deleted, restrict or object to its processing, get it in a portable format, and withdraw any consent you have given.
- Delete your account in the app under Settings → Account → Delete account, or ask us on the support page.
- To use any other right, write to hei@bakedaddy.app. We answer within 30 days.
If you think we handle your data wrongly, you can complain to the Norwegian Data Protection Authority, Datatilsynet.
Children
BakeDaddy is not made for children under 13, and we don’t knowingly collect data about them.
Changes
If we change this policy, we update the date at the top. If a change matters for how your data is used, we tell you in the app before it takes effect.