Legal Information

2. What Data We Collect

We collect only what is necessary to provide the service:

• Account data: Your name and email address. If you sign up with email and password, the password is stored only as a secure hash by our authentication provider — we can never read it. If you sign in with Google, we also receive your Google profile name and picture.
• Profile preferences: Language, country/region, and the avatar you choose in your account settings.
• User-generated content: Recipes, cookbooks, and images you upload — including photos of recipe cards or cookbook pages you scan with the AI import feature.
• Payment data: Subscription status and billing period. Card details are handled entirely by Stripe and are never stored on our servers.
• AI usage logs: When you use the AI recipe import feature, we log the type of request, the model used, and whether it succeeded. No recipe content is retained in these logs.
• Security data: Short-lived request counters (keyed to your user ID or IP address) used for rate limiting and abuse prevention. These expire automatically.
• Analytics data: Aggregate, anonymised usage statistics collected via Vercel Analytics, which is cookieless and does not track individual users.

4. How We Use Your Data

• Authenticate you and maintain your account session.
• Store and display your recipes, cookbooks, and shared content.
• Process payments and manage your subscription status.
• Send transactional emails (such as invitations and receipts).
• Run AI-powered recipe import when you request it — the photo or web page you submit is sent to Google’s Gemini API solely to extract the recipe, and for no other purpose.
• Protect the platform against abuse through rate limiting.
• Measure aggregate usage to improve the service.

We will never sell, rent, or share your personal data with third parties for marketing purposes.

6. Cookies & Tracking

Family Cookbookz does not use tracking or advertising cookies, and we do not use third-party advertising networks.

• Strictly necessary cookies: Our authentication provider (Supabase) sets session cookies that keep you signed in. These are essential for the service to work and do not require consent.
• Vercel Analytics: Cookieless. It collects only aggregate, anonymised traffic metrics and cannot identify or follow individual users.
• Stripe checkout: When you upgrade, payment takes place on a page hosted by Stripe. Cookies set there are governed by Stripe’s own privacy policy.

If we ever introduce cookies that require consent, we will ask for it first and update this policy.

9. Your Rights Under GDPR

As a data subject under GDPR, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Correct inaccurate or incomplete data.
• Erasure: Have your account and personal data deleted ("right to be forgotten").
• Portability: Receive your data in a structured, machine-readable format.
• Restriction: Ask us to limit how we process your data in certain circumstances.
• Objection: Object to processing based on legitimate interests.
• Withdraw consent: Where processing is based on consent, withdraw it at any time.

To exercise any of these rights — including deleting your account — email legal@familycookbookz.com from the address linked to your account. We will respond within 30 days.

You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) at datatilsynet.no.

4. User Content & Intellectual Property

Private Content

Recipes, cookbooks, and images you create or upload and keep private remain entirely your own. We do not claim ownership of your private content. It will never be used, sold, shared, or accessed by us except as necessary to provide the service (such as storing it and displaying it to you and the family members you share it with).

Public Content

Some recipes are featured publicly on the Discover feed and on public share pages. A recipe of yours is only made public with your consent — either because you ask for it or agree to it. When a recipe of yours is made public, you grant TwoShirtz a worldwide, non-exclusive, royalty-free licence to display, distribute, and promote that content within the platform and in connection with marketing Family Cookbookz. You retain ownership, and you may withdraw a recipe from public view or delete it at any time — the licence ends when the content is made private or deleted.

Our Intellectual Property

The Family Cookbookz name, logo, design, software, and all platform content created by us are the exclusive property of TwoShirtz and are protected by copyright and trademark law. You may not copy, reproduce, or distribute our materials without prior written permission.

5. Paid Plans & Billing

Family Cookbookz offers a paid membership processed securely by Stripe. By subscribing, you authorise us to charge the applicable fee to your payment method on a recurring basis until you cancel.

• Cancellation: You may cancel your subscription at any time from your account settings. Cancellation takes effect at the end of the current billing period — you keep full access until then, and you will not be charged again.
• Right of withdrawal: If you are a consumer in Norway or the EU/EEA, you have a statutory 14-day right of withdrawal. By starting your subscription you consent to immediate access to the service; if you withdraw within 14 days, we may deduct a proportionate amount for the period already used, as permitted by the Norwegian Cancellation Act (angrerettloven).
• Refunds: Beyond your statutory rights, payments are non-refundable and we do not offer partial refunds for unused periods.
• Price changes: We may change subscription prices with at least 30 days’ advance notice by email. If you do not agree to a new price, you can cancel before it takes effect; continued use after the effective date constitutes acceptance.
• Lifetime plans: Where offered, lifetime plans are a one-time payment granting access for as long as the service operates. They are non-transferable.

6. Acceptable Use

You agree not to use Family Cookbookz to:

• Upload or share content that is unlawful, harmful, abusive, defamatory, or infringes third-party rights — including recipes or images copied from sources you do not have the right to share.
• Attempt to gain unauthorised access to any part of the platform or another user’s account.
• Scrape, crawl, or otherwise extract data from the platform through automated means.
• Circumvent rate limits, usage quotas, or any technical measures we use to protect the service.
• Use the platform for any commercial purpose other than as expressly permitted.

11. Governing Law & Dispute Resolution

These terms are governed by the laws of Norway. Disputes arising in connection with these terms shall be brought before the Norwegian courts, with Oslo District Court (Oslo tingrett) as the agreed venue of first instance.

If you are a consumer, none of this deprives you of the protection of mandatory consumer-protection rules of your country of residence, or of your right to bring proceedings in your local courts. You may also refer a dispute to the Norwegian Consumer Authority (Forbrukertilsynet) or use the European Commission's Online Dispute Resolution platform.