Privacy Policy

1. Who We Are

Toquade ("we") places great importance on protecting your personal data. This policy explains what data we collect, why, and how you can exercise your rights, in accordance with the General Data Protection Regulation (GDPR).

Publisher: Mael Galite, sole trader (micro-entreprise), trading as Toquade (see the legal notice)
Privacy contact: hello@toquade.app

2. Data We Collect

Account data

• Email address
• User identifier (generated automatically)

Content you import

• Recipe links and URLs (web, TikTok, Instagram, YouTube)
• Videos and photos you submit for recipe extraction (handwritten notes, screenshots, photos of dishes)
• Recipes created or manually edited in the App
• Messages you exchange with the AI Sous-Chef assistant, and the recipe drafts that result from them

Automatically generated data

• Structured recipes (ingredients, steps, quantities) generated by artificial intelligence from your imported content
• Automatically generated recipe images
• Personal organization (collections, tags) that you create

Technical data

• If you turn on notifications: the device's notification token, its platform (iOS or Android) and the App's language
• App error and performance reports, collected by Sentry: device model, operating system, App version, IP address, and your account's identifier and email address
• Session recordings (Sentry Session Replay) for 10% of sessions and for sessions in which an error occurs. Text, images and input fields are masked in them.
• No audience measurement or marketing analytics tool is used.

3. Why We Collect This Data

We do not collect any data for advertising purposes and do not resell any data to third parties.

4. AI Processing

To automatically extract your recipes, your content (link, video, photo, transcript) is sent to Google Gemini via Google Cloud Vertex AI, which analyzes the content to extract ingredients, steps, and structured information.

When you use the AI Sous-Chef, your messages, the recipe in progress and the constraints you stated (an allergy, for example) are sent the same way to Google Gemini via Vertex AI, to produce the reply and update the draft.

Images illustrating your recipes are generated by Google Gemini via Google Cloud Vertex AI from the extracted information.

These processes are carried out within Google Cloud Vertex AI, whose contractual terms guarantee that data sent via the API is not used by Google to train its consumer models nor retained beyond processing the request, in accordance with the Google Cloud Data Processing Addendum.

For importing videos from social media (TikTok, Instagram), technical processing (downloading the video for analysis) is performed server-side; the video is not stored beyond the time necessary for extraction, unless you choose to attach it to your recipe.

5. Hosting and Subprocessors

Your data is hosted and processed by:

• Google Cloud Platform / Firebase / Firestore — hosting of accounts, recipes, and application data
• Google Cloud Run — server-side processing (extraction, analysis jobs)
• Google Gemini — AI recipe extraction and structuring
• Google Gemini — recipe image generation
• Firebase Cloud Messaging (Google) and Apple Push Notification service — sending notifications
• Sentry (Functional Software, Inc.) — error and performance monitoring, session recordings

These providers are located in the United States. Data transfers outside the European Union are governed by the European Commission's standard contractual clauses and/or Google Cloud's own safeguards (Google Cloud Data Processing Addendum).

6. Retention Period

• Account and recipes: retained as long as your account is active
• Source content (raw imported videos): deleted after extraction, unless explicitly kept by the user
• AI Sous-Chef conversations and drafts: deleted automatically 7 days after their last update, or as soon as the draft is saved as a recipe or deleted
• Notification token: deleted when you sign out of the App or delete your account
• Account deletion:you can delete your account directly from the App (Profile → Delete My Account). Your data is then deleted immediately: your account, recipes, collections and generated images. If you can no longer access the App, write to hello@toquade.app and the deletion is handled within 30 days at most. Error reports already sent to Sentry expire according to that service's retention period.

7. Your Rights

In accordance with the GDPR, you have the following rights over your personal data:

• Right of access — obtain a copy of your data
• Right to rectification — correct inaccurate data
• Right to erasure — request deletion of your account and data
• Right to portability — retrieve your recipes in a usable format
• Right to object — object to certain processing

You can exercise these rights directly from the App (account deletion) or by contacting us at: hello@toquade.app

You also have the right to lodge a complaint with the CNIL (www.cnil.fr), the French data protection authority, if you believe your rights are not being respected.

8. Security

We implement the security measures provided by our infrastructure (Firebase/Google Cloud): encryption of data in transit and at rest, strict per-user access rules (Firestore Security Rules), secure authentication.

9. Minors

The App is not intended for individuals under 15 years of age, the age of digital consent in France. We do not knowingly collect data concerning minors below this age.

10. Changes

This policy may be updated. In the event of a significant change, you will be notified via the App or by email.

11. Contact

For any question regarding your personal data: hello@toquade.app