Privacy Policy
This explains what Muffin stores, why, who else sees it, and how to make it go away. It is written to be read, not to be skimmed past.
The short version. We keep what the app needs to work: your account, your recipes, and the things you save or plan. We do not sell anything, we do not show ads, and there is no analytics or tracking in the app. You can delete everything yourself, from inside the app, at any time.
Who is responsible
Muffin is operated from the Netherlands. For anything about your data, write to hello@muffinapp.nl.
What we store
Your account
Your email address and a password. We never see the password itself — it is hashed by our authentication provider. If you sign in with Google instead, we receive your email address and name from Google.
Your profile
Username, display name, an optional short bio, an optional photo, your language, your preferred units, and whether your profile is private.
What you create
Recipes and everything in them: title, description, ingredients, steps, photos, nutrition, and — when a recipe was imported from a page — a link back to the original and its author. Also your cookbooks, your shopping list, your meal plan, your personal notes on steps, and the recipes you bookmark, rate or like.
What the app records by itself
Each time the app uses AI on your behalf, we store a line with your user id, which feature it was, and when. It exists so that nobody can run the service up to an unpayable bill, and so we can size our free tier from real numbers instead of guesses. These lines are deleted after 90 days.
We do not collect location, contacts, advertising identifiers or device fingerprints. There is no analytics SDK and no third-party tracker in the app.
Who else sees it
Supabase
Hosts the database, the accounts and the images. Our data lives in their Central EU (Frankfurt) region, so it does not leave the European Union at rest.
Anthropic
This is the one worth reading carefully, because it is the least obvious. Muffin sends the following to Anthropic's API so it can be processed:
- Recipe text you paste or import, to turn it into a structured recipe.
- Ingredient names, to match them against our shared catalog and to estimate nutrition.
- Photos you upload — recipe photos and your profile picture — to check they are appropriate before they are shown.
- Recipe text, when you ask for a translation.
These requests are not used to train Anthropic's models. We send only the content itself: no name, no email, nothing that identifies you.
Brevo
Sends the emails the app has to send you — confirming your address, and resetting your password. They receive your email address and the contents of those messages. Brevo is a French company and stores this data in the European Union.
Only if you choose to sign in with Google.
That is the complete list. We do not sell personal data, and we do not share it with advertisers, data brokers or anyone else.
What other people see
Muffin has a social side, so some of this is visible on purpose. Your username, photo and bio are visible to other users. A recipe is private until you decide otherwise. If you make one public, its content and your name on it become visible to anyone using the app. Your shopping list, your meal plan and your personal notes on steps are never shown to anybody else.
Why we are allowed to hold it
- To give you the service you asked for — your account, your recipes and everything the app does with them.
- Our legitimate interest in not being abused — the usage lines described above, which keep one script from spending the project's budget in an afternoon.
How long we keep it
Your content stays until you delete it or delete your account. Usage lines are removed after 90 days. When you delete your account, deletion is immediate and total: the account, the profile, the recipes and every image are removed, and there is no grace period from which it can be restored. We cannot bring it back, so take a copy first if you want one.
Your rights
Under the GDPR you can ask to see your data, correct it, delete it, take it elsewhere, or object to how we use it. Deleting is built into the app — Settings → Delete account — and needs no request and no waiting. For anything else, write to hello@muffinapp.nl and we will answer within 30 days.
If you think we have handled your data badly, you can complain to your national data protection authority. In the Netherlands that is the Autoriteit Persoonsgegevens.
Children
Muffin is not intended for children under 16. We do not knowingly create accounts for them; if you believe we have, write to us and it will be removed.
Changes
If this policy changes in a way that matters, we will say so in the app rather than quietly editing this page.