πŸŽ‚

BakeBuddy

Privacy Policy

Version date: October 27, 2026

← back to home page

1. General Information

This Privacy Policy describes the rules for processing personal data of users of the BakeBuddy mobile application.

The administrator of personal data is the owner of the BakeBuddy application.

2. Scope of Data Collected

The application may process the following user data:

Providing data is voluntary, but necessary to use the application's features.

3. Methods of Data Collection

a) Registration in the app

During registration, the user provides an email address, username, and password. The password is stored exclusively in encrypted form (hash).

b) Google Sign-In

The application allows login via Google Sign-In. In this case, the application receives user data from the Google account (first name, last name, email address, Google ID) in accordance with the user's privacy settings. The legal basis for processing is the performance of a contract (Art. 6(1)(b) GDPR) and the user's consent.

c) Sign in with Apple

The application allows login via Sign in with Apple. In this case, the application receives the user's Apple ID and, optionally, their name and email address. The user may choose to hide their real email address, in which case Apple provides a private relay address. Data is processed in accordance with Apple's privacy settings. The legal basis for processing is the performance of a contract (Art. 6(1)(b) GDPR) and the user's consent.

d) Issue report form

The user may provide additional information when reporting problems via the in-app form. Optionally, the user may attach a photo to the report. Photos are stored only for the time necessary to handle the report and are then deleted.

e) Error logs and diagnostics

The application records error logs and crash data to ensure stability and improve application performance. This data is transmitted to and stored on Microsoft Azure servers and in Sentry (Functional Software, Inc.), with Sentry data stored in the European Union (Germany). Logs may contain a user identifier but do not contain sensitive data.

f) In-app purchases

The application offers a premium subscription available for purchase via Google Play and the App Store. Purchases are handled by the respective store (Google LLC or Apple Inc.) and RevenueCat Inc., which processes subscription status data. The application receives information about active entitlements and subscription expiration date. Payment data (card numbers etc.) is processed exclusively by Google or Apple and is not accessible to the application administrator.

g) Advertising measurement (Meta)

The application uses the Facebook SDK provided by Meta Platforms Ireland Ltd. We share with Meta the device advertising identifier (IDFA on iOS, Google Advertising ID on Android) and the app usage events listed in section 2 (app launch, account registration, start of a free trial, subscription purchase). This data is used to measure the effectiveness of BakeBuddy advertising campaigns on Facebook and Instagram and to display personalized ads. We do not share your email address, name or account identifier with Meta.

iOS: data is shared with Meta only after you grant permission in the system "Allow Tracking" prompt. You can withdraw your consent at any time in Settings β†’ Privacy & Security β†’ Tracking.

Android: you can delete or reset your advertising identifier at any time in Settings β†’ Google β†’ Ads (or Settings β†’ Privacy β†’ Ads, depending on the device). You may also object to this processing by contacting us at service.bakebuddy@gmail.com.

More information on how Meta processes data: Meta Privacy Policy

4. Purpose and Legal Basis for Processing

User data is not used for automated decision-making that produces legal effects concerning the user. Meta may use the data shared with it for profiling for advertising purposes, in accordance with its own privacy policy.

5. Email Communication

The application sends email messages exclusively in the following cases:

Messages are sent via Google infrastructure (Gmail SMTP).

6. Data Retention

After account deletion, user data is deleted or anonymized in accordance with the above rules.

7. Data Security

8. Cookies and Similar Technologies

The mobile application does not use cookies. It may use session mechanisms and authentication tokens to maintain the user session and ensure proper login functionality.

The application uses the device advertising identifier for advertising measurement, as described in section 3(g).

9. Transfer of Data to Third Countries

User data may be transferred to countries outside the EEA, in particular to the United States, via:

Data transfers are carried out on the basis of standard contractual clauses approved by the European Commission or the EU-U.S. Data Privacy Framework.

More information: Google Privacy Policy Β· Microsoft Privacy Β· Meta Privacy Policy Β· Sentry Privacy Policy

10. Sharing of Data

Data is shared with third parties only to the extent described in this policy:

Data is not sold. Data is shared for marketing purposes only with Meta, to the extent described in section 3(g).

11. User Rights

In accordance with the GDPR, the user has the right to:

Art. 15 GDPRaccess to their data
Art. 16 GDPRrectification of data
Art. 17 GDPRerasure of data
Art. 18 GDPRrestriction of processing
Art. 20 GDPRdata portability
Art. 21 GDPRobjection to processing

Where processing is based on consent, the user may withdraw it at any time, without affecting the lawfulness of processing carried out before its withdrawal.

To exercise your rights, please contact the administrator:

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, kancelaria@uodo.gov.pl.

12. Account Deletion

The user may delete their account at any time directly from within the application (in account settings). Deleting the account results in permanent deletion of personal data in accordance with the rules described in section 6.

If you experience any difficulties, please contact the administrator: service.bakebuddy@gmail.com

13. Children

The application is not intended for children under the age of 13, and the administrator does not knowingly collect personal data from such individuals. If the administrator learns that data of a child under 13 has been collected without verifiable parental or guardian consent, it will be deleted immediately.

14. Changes to the Privacy Policy

The privacy policy may be updated as needed. Users will be informed of any significant changes within the application or by email. The current version of the policy is always available at: