1. Who We Are
Toquade ("we") places great importance on protecting your personal data. This policy explains what data we collect, why, and how you can exercise your rights, in accordance with the General Data Protection Regulation (GDPR).
[TO BE COMPLETED — publisher name, see legal notice]
Privacy contact: hello@toquade.app
2. Data We Collect
Account data
- Email address
- User identifier (generated automatically)
Content you import
- Recipe links and URLs (web, TikTok, Instagram, YouTube)
- Videos and photos you submit for recipe extraction (handwritten notes, screenshots, photos of dishes)
- Recipes created or manually edited in the App
Automatically generated data
- Structured recipes (ingredients, steps, quantities) generated by artificial intelligence from your imported content
- Automatically generated recipe images
- Personal organization (collections, tags) that you create
Technical data
- App usage data (for product improvement purposes)
- [TO BE COMPLETED if an analytics tool is used, e.g. Firebase Analytics — otherwise remove this line]
3. Why We Collect This Data
| Data | Purpose |
|---|---|
| Email, identifier | Authentication and account management |
| Imported videos, photos, links | Automatic extraction and structuring of your recipes |
| Structured recipes | Display, organization, and cooking mode in the App |
| Usage data | Product improvement, technical diagnostics |
We do not collect any data for advertising purposes and do not resell any data to third parties.
4. AI Processing
To automatically extract your recipes, your content (link, video, photo, transcript) is sent to Google Gemini via Google Cloud Vertex AI, which analyzes the content to extract ingredients, steps, and structured information.
Images illustrating your recipes are generated by Google Imagen via Google Cloud Vertex AI from the extracted information.
These processes are carried out within Google Cloud Vertex AI, whose contractual terms guarantee that data sent via the API is not used by Google to train its consumer models nor retained beyond processing the request, in accordance with the Google Cloud Data Processing Addendum.
For importing videos from social media (TikTok, Instagram), technical processing (downloading the video for analysis) is performed server-side; the video is not stored beyond the time necessary for extraction, unless you choose to attach it to your recipe.
5. Hosting and Subprocessors
Your data is hosted and processed by:
- Google Cloud Platform / Firebase / Firestore — hosting of accounts, recipes, and application data
- Google Cloud Run — server-side processing (extraction, analysis jobs)
- Google Gemini — AI recipe extraction and structuring
- Google Imagen — recipe image generation
These providers are located in the United States. Data transfers outside the European Union are governed by the European Commission's standard contractual clauses and/or Google Cloud's own safeguards (Google Cloud Data Processing Addendum).
6. Retention Period
- Account and recipes: retained as long as your account is active
- Source content (raw imported videos): deleted after extraction, unless explicitly kept by the user
- After account deletion: your data is deleted within [TO BE COMPLETED — e.g. 30 days], unless a longer legal retention obligation applies
7. Your Rights
In accordance with the GDPR, you have the following rights over your personal data:
- Right of access — obtain a copy of your data
- Right to rectification — correct inaccurate data
- Right to erasure — request deletion of your account and data
- Right to portability — retrieve your recipes in a usable format
- Right to object — object to certain processing
You can exercise these rights directly from the App (account deletion) or by contacting us at: hello@toquade.app
You also have the right to lodge a complaint with the CNIL (www.cnil.fr), the French data protection authority, if you believe your rights are not being respected.
8. Security
We implement the security measures provided by our infrastructure (Firebase/Google Cloud): encryption of data in transit and at rest, strict per-user access rules (Firestore Security Rules), secure authentication.
9. Minors
The App is not intended for individuals under [TO BE COMPLETED — e.g. 16] years of age. We do not knowingly collect data concerning minors below this age.
10. Changes
This policy may be updated. In the event of a significant change, you will be notified via the App or by email.
11. Contact
For any question regarding your personal data: hello@toquade.app