Privacy Policy

1. Who we are

• Company name: Growith App SL
• VAT: B19425594
• Address: Avenida Doctor Severo Ochoa, 47, 1ª planta, 28100 Alcobendas (Madrid), España
• Contact: privacy@leemon.kitchen

We are the data controller of your personal data under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

2. What information we collect

Information you give us: your email at sign-up, the recipes you create or import, your dietary preferences, allergies and cooking level, and the photos, audio or text you add to your recipes.

Automatic information: device technical data (type, OS, language), Service usage information to improve features, and strictly technical cookies on the web.

We do not collect: real name, phone, address, banking data (payments are processed by Apple/Stripe), location, contacts, or advertising identifiers.

We do not use your data for advertising. Leemon shows no ads and does not share data with ad networks.

3. How we use your information

• Provide the Service: authenticate you, store your recipes, generate new recipes with AI when you ask.
• Personalize: adapt suggestions to your filters, allergies and language.
• Improve the product: analyze aggregate usage and fix bugs.
• Comply with legal obligations and protect the security of the Service.

The legal bases are performance of the contract with you (providing the Service), your consent (when using AI features), and our legitimate interest (product improvement and security).

4. Who we share your information with

We do not sell or rent your data. We share only what is strictly necessary with technology providers acting under our instructions: hosting and backend, AI model providers (for recipe generation, voice transcription and image generation), media storage, payment processor and distribution through official app stores. All are bound by data processing agreements.

Some providers are located outside the European Economic Area. These transfers rely on the European Commission's Standard Contractual Clauses and/or the EU–U.S. Data Privacy Framework.

We may also share information when required by law.

5. Use of artificial intelligence

Leemon uses artificial intelligence to create and improve recipes. When you use an AI feature (import a recipe from a photo, document, link or video; create a recipe from text or voice; improve, review, translate or complete a recipe; or calculate its nutritional information), the content you provide is sent securely to third-party AI providers acting as data processors:

• Anthropic (Claude) — recipe extraction, generation, improvement and translation, and nutritional estimation. Data sent: the text you write, the photos and documents (PDF/TXT) you select, the contents of the links you share and the audio transcripts from the videos you import.
• OpenAI (Whisper) — audio transcription: the videos you import (e.g. Instagram or TikTok), voice dictation and voice notes. Data sent: the corresponding audio track.
• fal.ai (Flux) — generation of the recipe's illustrative photo. Data sent: the recipe name and its main ingredients.
• Apify — retrieval of the public content (text, audio and video) from the links you import from social networks (e.g., Instagram or TikTok).
• Google (Gemini) — analysis of the imported video to synchronize each recipe step with the video segment where it happens.

If you import a recipe from a video (e.g., from Instagram or TikTok), Leemon may store a private copy of that video linked to your account so you can watch it inside the app while you cook. That copy is only accessible from your account, is always shown together with the attribution and link to the creator's original content, is deleted when you delete the recipe, and is deleted along with the rest of your data when you delete your account.

These providers process the content solely to deliver the service and, per their API terms, do not use it to train their models. They may retain it temporarily (for example, up to ~30 days) only for safety and abuse-prevention purposes, according to their policies. We do not include your name, email or account identifiers in the content sent to these providers: only the content needed to process your recipe.

The nutritional values shown by Leemon are AI-generated estimates based on the ingredients: they are indicative and do not replace advice from a nutrition professional.

The app asks for explicit consent the first time you use an AI feature. If you decline, the feature does not run and you can keep using Leemon with manual recipes.

6. How long we keep your data

While your account is active. If you ask to delete it, we erase your personal data within 30 days at most, except for what we must keep for legal obligations (tax, accounting) and backups, which are deleted within an additional 90 days.

7. Your rights

You have the right to access, rectify, erase, object, restrict processing, port your data and withdraw consent. Email us at privacy@leemon.kitchen stating which right you want to exercise. We will respond within one month.

If you believe we have not handled your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).

8. Security

We apply reasonable technical and organizational measures: encryption in transit and at rest, secure authentication and monitoring. In the event of a security breach affecting your data, we will notify you and the AEPD within the legal deadlines.

9. Minors

The Service is intended for users over 14. We do not knowingly collect data from younger users.

10. Cookies

The leemon.kitchen website is informational and uses only strictly technical cookies needed for the site to work (technical session and language preference). We use no analytics or advertising cookies. If we add any in the future, we will ask you first via a consent banner.

You can manage cookies from your browser settings.

11. Changes

We may update this policy to reflect legal or product changes. We will notify you of material changes via the app or email.

12. Chatbot connector (MCP)

Leemon offers an optional connector that lets you use your library from an external AI assistant (Claude, ChatGPT, Gemini or any other Model Context Protocol client). It is off by default: it only works if you connect and expressly authorize it.

The legal basis for this processing is your consent, given when you authorize the connection and withdrawable at any time from your assistant. Once revoked, the connector can no longer reach your account.

• The assistant signs in with your identity and your permissions: it can only see and modify your recipes, cookbooks, favourites and cooking journal — never anyone else's.
• Leemon only receives the specific request the assistant makes and returns the result. We neither receive nor store your conversation text or your message history.
• We log technical metadata for each call (which function was used, when, whether it succeeded, how long it took and AI usage) for security, rate limiting and diagnostics. We do not log credentials, headers, the parameters sent, or the content of your recipes.
• Your assistant's provider (Anthropic, OpenAI, Google or another) processes your conversation under its own privacy policy, over which Leemon has no control.

How to connect and disconnect it, at leemon.kitchen/en/mcp.

13. Contact

privacy@leemon.kitchen