Munch Cooking Privacy Policy
Last updated: 25 October 2026
Parameter Corp Ltd, trading as Munch Cooking ("Munch Cooking", "we", "us"), is responsible for your personal data (our details are in "Who we are" below). This Privacy Policy explains how we collect, use, share and otherwise process personal information. It applies when you use the Munch Cooking app, munch.cooking, or any related feature or service (the "Service").
We are the "controller" (UK and EU law), the "business" (US state law), and the organisation responsible for your personal information (Canadian law).
Contact: privacy@munch.cooking (privacy, data rights and our Privacy Officer) · legal@munch.cooking (legal) · support@munch.cooking (support)
EU/EEA representative. We have appointed a representative in the European Union under Article 27 of the EU GDPR. You can contact them at eunotice@munch.cooking, and we will provide their name and address on request.
This policy forms part of our Terms of Service.
1. Summary
- What we collect: an anonymous account identifier, your recipe preferences, your saved and hidden recipes, your subscription status, and — only if you choose to give them — your allergies and dietary requirements, and your email address if you ask for our weekly email.
- What we do not collect: your name, your address, your location, your contacts, advertising identifiers, or anything that tracks you across other apps and websites.
- How we use it: to run the app and to filter out food you cannot or do not want to eat.
- Anonymised statistics: we may create aggregated statistics that cannot identify anyone, and sell, license or share those for any purpose. Every published figure covers at least 100 users (Section 6).
- We do not sell, rent or share personal information. Only our three service providers see it, and only to do their job for us.
- No advertising and no tracking. The only email we send is the weekly special, and only to people who have asked for it. You can unsubscribe from any one of them in a single click.
- Your rights: you can access, delete, correct, export, object and withdraw consent. You can delete your account, and everything in it, from inside the app. Email privacy@munch.cooking.
2. Information we collect
| Category | Examples | Source |
|---|---|---|
| Account identifier | An anonymous identifier created when you first open the app. If you choose Sign in with Apple, the identifier Apple gives us and — only if you choose to share it — your email address. We never see a password | You; Apple |
| Preferences | Cuisines you like or hide, your cooking goal, how you prefer to read a recipe | You |
| Allergen and dietary | Allergies, intolerances and dietary requirements, and choices that may reveal religious or philosophical beliefs | You, only if you choose to provide it |
| Your recipes | Recipes you save to "To try" and "Made it", the star rating you give a dish you cooked, and recipes you swipe away. These are private to you | You |
| Use of recipes | Which recipes you opened on a given day, and when you reached the daily fair-use limit | Our systems |
| Purchases | Subscription status, plan, whether you are in a trial, and when it expires. We do not receive card details | Apple; RevenueCat |
| Email address | Your email address, only if you ask for the weekly special (Section 9). We also record which screen you gave it on, when, and the exact wording you agreed to, and the date you unsubscribed if you do | You, only if you choose to provide it |
We do not collect your name, postal address, phone number, date of birth, contacts, photographs, precise or approximate location, device or advertising identifiers, crash or performance data, or any record of your browsing beyond the recipe counts above.
We count how many times each recipe is opened, saved, cooked and hidden. Those counts have no person attached to them at all, so they are not personal information and cannot be traced to you.
Our hosting provider processes your internet address in the ordinary course of delivering the Service. We do not keep logs of it ourselves.
If you do not provide information we need, we may not be able to provide some or all of the Service.
3. How we use information
We use personal information for the following purposes. The legal bases listed apply under UK and EU law.
| Purpose | Legal basis |
|---|---|
| Providing and operating the Service, including your feed, search, your saved lists and your preferences | Contract |
| Filtering out recipes that conflict with the allergies and dietary requirements you have given us (Section 5) | Explicit consent |
| Processing subscriptions and entitlements, and handling refunds and chargebacks with Apple | Contract; legal obligation |
| Sending you the weekly special, if you have asked for it, and keeping the record of that request (Section 9) | Consent |
| Enforcing a fair-use limit on how many recipes can be opened in a day, to prevent bulk copying of our recipes | Legitimate interests (protecting our content) |
| Creating anonymised, aggregated statistics, and using, selling and licensing them (Section 6) | Legitimate interests (developing our business) |
| Safety, security, fraud and abuse prevention, and enforcing our Terms | Legitimate interests; legal obligation |
| Complying with law and legal requests, and establishing, exercising or defending legal claims | Legal obligation; legitimate interests |
| Corporate transactions, including financing, merger, acquisition, reorganisation, insolvency or sale of assets | Legitimate interests |
Where we rely on legitimate interests, we have balanced them against your rights. Where we rely on consent, you can withdraw it at any time. Withdrawal does not affect processing that has already taken place.
We do not use your personal information to train artificial intelligence models, ours or anyone else's. Our recipes and photographs were generated before you installed the app, from cuisine and dish names, and the companies whose models generated them receive nothing about you.
4. How your feed is put together
Your feed is ordered by a fixed calculation using the cuisines you have chosen, how recently a recipe was added, and a random element that changes each time you refresh. Recipes that conflict with your allergies or dietary requirements are removed outright.
We do not make decisions based solely on automated processing that produce legal or similarly significant effects on you within the meaning of Article 22 of the UK/EU GDPR.
5. Allergen and dietary information
This information may be special category data (UK/EU law), sensitive data or consumer health data (US laws). Because of this:
- we collect and use it only with your explicit consent. It is optional, and you can use Munch Cooking without giving it;
- we use it to filter recipes for you. A dish that conflicts with it is never offered to you in your feed, and is shown crossed out and cannot be opened in the cookbook;
- we may also use it to create anonymised statistics as described in Section 6, which cannot identify you;
- we do not sell it, and do not share it with anyone other than the service providers in Section 8 who store it for us; and
- you can change or delete it at any time in Profile, or by emailing privacy@munch.cooking, and it is deleted outright when you delete your account.
The app tells you this where it asks:
We use this to filter recipes for you and, fully anonymised, to understand dietary trends. Change or delete it anytime.
Allergen filters are not a safety system. See the food safety section of our Terms of Service.
6. Anonymised and aggregated statistics
We create statistics that have been aggregated so that they no longer identify you or reasonably relate to you ("Anonymised Statistics") — for example, the share of users avoiding gluten in a given country, or which cuisines are trending.
Anonymised Statistics are, in every case, all four of the following:
- aggregated totals only — never a record about any individual;
- free of identifiers — nothing in them points back to a person;
- based on at least 100 users for every figure published; and
- not reasonably capable of being traced back to anyone.
A figure that fails any of these is not published.
Anonymised Statistics are not personal information. We may use them, and sell, license, disclose or otherwise exploit them, for any purpose, without restriction or payment to you, including making them available to AI developers and research labs, food brands, retailers, market researchers and other businesses, for AI and machine-learning training, research, analytics and commercial purposes.
We publicly commit to maintain and use Anonymised Statistics only in aggregated form and not to attempt to re-identify anyone from them, and we require recipients by contract to do the same.
Our recipes and photographs are not licensed for AI training, under the terms of the services that generated them.
Because Anonymised Statistics cannot be linked back to you, they cannot be withdrawn or deleted on request.
7. How we share information
We share personal information with three service providers, and no one else.
| Recipient | What they receive | Where |
|---|---|---|
| Supabase | Everything in Section 2. It is our database, our sign-in system and where our recipe photographs are stored | Ireland (eu-west-1) |
| RevenueCat | Your account identifier and what Apple reports about your purchase — the product, whether it is a trial, and when it expires | United States |
| Apple | Your purchase, and the Apple ID behind it. We never see your Apple ID, your card or your receipt | Apple |
Each acts on our instructions and may not use your information for their own purposes.
We have not yet chosen a provider to send the weekly special. Until we do, no email is sent and no address leaves Supabase. When we choose one, it will receive your email address and nothing else — not your allergies, not your saved recipes, not your subscription — and we will name it in this table before the first email goes out.
We may also disclose personal information:
- to professional advisers, insurers, investors and lenders, under confidentiality;
- to a buyer or successor in a merger, acquisition, financing, reorganisation, insolvency or sale of assets;
- where required by law, to respond to legal process, to protect rights, property and safety, or to prevent fraud or abuse; and
- to anyone else with your consent or at your direction.
We do not sell, rent or share your personal information with third parties for their own purposes, and we never have.
8. No advertising and no tracking
Munch Cooking contains no advertising. We use no advertising, analytics, attribution, crash-reporting or measurement services, no cookies, no pixels and no third-party software development kits of that kind.
We do not access your advertising identifier (Apple's IDFA), and we do not track you across other companies' apps or websites. Because we do not, the app never asks you for permission to.
The munch.cooking website sets no cookies and makes no third-party requests.
9. Communications
The weekly special is the only email we send, and only if you ask for it. It is one email a week of new recipes. You are never added to it automatically, never as a condition of anything, and never as a side effect of paying.
We ask in two places and nowhere else: a card in Profile, and — once, ever — a message in the app shown to people who have been subscribers for at least five days. Whether you say yes or no, we do not ask again.
The legal basis is your consent, and we record it: the exact wording that was on screen, the date, and which of the two screens asked. If we change the wording, your record keeps the wording you actually agreed to.
You can unsubscribe at any time, in three ways, and none of them needs you to sign in or to contact us:
- the unsubscribe link at the foot of every weekly special, which also works as a one-click unsubscribe from your mail app's own button;
- the Unsubscribe button in the app, under Profile; or
- deleting your account, which deletes your address along with everything else.
We may send you service, transactional and legal messages where necessary, for example about your subscription or a change to these terms. Those are not marketing and unsubscribing from the weekly special does not stop them.
The app sends one notification: a reminder 24 hours before a free trial ends, if you have allowed notifications. It is scheduled on your device and its content never leaves your phone.
10. International transfers
Your information is stored in Ireland. Our subscription provider is in the United States, and Apple processes your purchase on its own infrastructure.
Where information is transferred outside the UK or the EEA, we rely on transfer safeguards including adequacy decisions, the UK International Data Transfer Agreement or Addendum, EU Standard Contractual Clauses, and the EU–US and UK–US Data Privacy Frameworks. Information held abroad may be accessible to foreign courts and authorities. Contact privacy@munch.cooking for details of the safeguards.
11. Retention
| What | How long |
|---|---|
| Your account, preferences, allergies and dietary requirements, saved recipes and hidden recipes | Until you delete them, or delete your account |
| Your subscription record | Until you delete your account |
| Your email address and the record of the consent you gave for it | Until you delete your account. Unsubscribing records the date you left and keeps the row, so that a later opt-in is visibly a new one |
| The daily record of which recipes you opened | 90 days, then deleted automatically |
| The record of when you reached the daily fair-use limit | 90 days, then deleted automatically |
| The record of how often your device asked us to check your subscription | 7 days, then deleted automatically |
The last three are deleted every night by an automated job.
We may keep information for longer where we need it to comply with legal, tax or regulatory requirements, to establish, exercise or defend legal claims, or to prevent fraud and abuse. When information is no longer needed, we delete it. Anonymised Statistics may be kept indefinitely.
Deleting your account deletes everything at once. Every record we hold is attached to your account identifier, so deleting it removes all of them together.
12. Security
We use measures we consider reasonable to protect personal information. Your sign-in credentials are held in your iPhone's Keychain, and information in transit is encrypted. No system is completely secure, and we do not guarantee the security of any information. You are responsible for keeping your device secure.
13. Your rights
Depending on where you live, you may have rights to:
- access your information;
- correct it;
- delete it;
- export it (portability);
- restrict processing of it;
- object to processing based on legitimate interests;
- withdraw consent;
- opt out of sale, sharing, targeted advertising and profiling — we do none of these, so there is nothing to opt out of;
- limit use of sensitive information;
- appeal a refusal of a request; and
- not be discriminated against for exercising your rights.
How to exercise them: you can delete your account, and everything in it, from inside the app — Profile, then Delete account. You can unsubscribe from the weekly special from any email, or in the app under Profile, without signing in or asking us. For anything else, email privacy@munch.cooking. We may verify your identity before acting on a request. Authorised agents may act for you where the law allows. We respond within the time the law requires. Some rights are subject to legal exceptions.
Complaints and appeals. You can complain to a data protection authority. These include:
- the ICO (UK);
- your local EU or EEA data protection authority;
- the Office of the Privacy Commissioner of Canada, or the Commission d'accès à l'information (Quebec); and
- your state Attorney General, if we deny a US appeal.
To appeal a refusal, reply to our response with "Appeal" in the subject line.
EU/EEA representative: contactable at eunotice@munch.cooking. We will provide their name and address on request.
Quebec: our person in charge of the protection of personal information is our Privacy Officer, at privacy@munch.cooking.
14. Age
Munch Cooking is for adults. You must be 18 or over to use the Service. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided us with information, contact privacy@munch.cooking.
15. Third-party services
The app links to Apple's own subscription management and to our website. Apple's handling of your purchase and your Apple ID is governed by Apple's privacy policy, not this one.
Who we are
Parameter Corp Ltd, trading as Munch Cooking.
- Registered in: England and Wales
- Company number: 16836489
- Registered office: First Floor Lipton House, Stanbridge Road, Leighton Buzzard, Bedfordshire, United Kingdom, LU7 4QQ
Contact: privacy@munch.cooking (privacy, data rights and our Privacy Officer) · legal@munch.cooking (legal) · support@munch.cooking (support)
EU/EEA representative. We have appointed a representative in the European Union under Article 27 of the EU GDPR. You can contact them at eunotice@munch.cooking, and we will provide their name and address on request.
16. Changes
We may change this policy at any time by posting an updated version. Where the law requires, we will notify you or ask for your consent.
Appendix A – US State Privacy Notice
We have not sold personal information, or shared it for cross-context behavioural advertising, and we do not do so. We have no advertising partners and run no advertising.
| Category (CCPA) | Examples | Purposes | Disclosed to | Sold or shared |
|---|---|---|---|---|
| Identifiers | Anonymous account identifier; email address if you ask for the weekly special, or if you share it through Sign in with Apple | All purposes in Section 3 | Supabase; RevenueCat; Apple | No |
| Commercial information | Subscription status and history | Providing the Service; billing | Supabase; RevenueCat; Apple | No |
| Internet and network activity | Which recipes you opened, saved and hid | Providing the Service; fair-use limit | Supabase | No |
| Sensitive personal information | Allergen and dietary information | Filtering recipes for you; with your consent, anonymised statistics | Supabase | No |
We do not collect geolocation, biometric information, photographs or video, contents of communications, or inferences drawn to create a profile about you.
Sources and retention are described in Sections 2 and 11.
Appendix B – Consumer Health Data Privacy Policy
This appendix applies to residents of Washington, Nevada and other US states with consumer health data laws.
- Data we collect: allergy, intolerance and dietary information you choose to provide.
- Sources: you.
- Purposes: filtering recipes for you and, in anonymised and aggregated form only, statistics as described in Section 6.
- Sharing: with the service provider that stores it for us. We share it with no other third party.
- Sale: we do not sell it.
- Your rights: you can confirm whether we collect, share or sell this data; access it, including a list of the third parties it has been shared with; withdraw consent; and delete it, either in the app or by emailing privacy@munch.cooking. You may appeal a refusal as described in Section 13.