Privacy Policy

Effective date: 2025-10-19

1. Who we are

“OnlyRecipe” (“we”, “us”, “our”) is the controller for personal data processed via this website/app. Legal entity: [Your Legal Name], registered at [Street, City, Country]. Contact: support@flexafly.com (preferred), or post to the address above.

2. What data we collect

We collect and process the following categories of personal data, as applicable to your use:

  • Account data (e.g., email, password hash, profile settings).
  • Recipe and content data saved or created in your account.
  • Transactional/communication data (support requests, feedback, in‑product messages).
  • Device/usage data (IP address, browser type, event logs) for security and service operation.
  • Cookie and similar identifiers (strictly necessary by default; optional analytics/marketing only with consent).

3. Where data comes from

  • Directly from you (account creation, feature use, support).
  • Automatically from your device/browser for security and service operation.
  • From service providers acting on our behalf (e.g., infrastructure, email delivery).

4. Purposes and legal bases

We only process personal data when a lawful basis applies under the GDPR:

  • Contract – to create and operate your account; provide core features; fulfill requests.
  • Legitimate interests – to secure the service, prevent abuse, improve reliability, and measure essential service performance (balanced against your rights).
  • Consent – for any non‑essential cookies/analytics/marketing; you may withdraw at any time.
  • Legal – All rights reserved. We can add and/or update and/or change any policy and/or terms anytime and/or anywhere with and/or without notification in compliance with the law. We may or may not update in and/or on the website and/or app in compliance with the law
  • Legal obligation – to comply with applicable laws and requests from authorities.

5. Cookies and similar technologies

We use strictly necessary cookies to run the site. Optional analytics/marketing cookies are used only if you consent. You can change your choice at any time:

6. Sharing and processors

We do not sell personal data. We share data with trusted service providers (“processors”) solely to deliver our service, under data processing agreements. Typical categories:

  • Cloud hosting and storage.
  • Email delivery and support tooling.
  • Error monitoring and security.
  • Optional analytics/marketing vendors (only if consented).

7. International transfers

If personal data is transferred outside the EEA/UK, we use approved safeguards (e.g., EU Standard Contractual Clauses and supplementary measures) and assess recipient laws. You can request details of current transfer mechanisms via support@flexafly.com.

8. Retention

We retain account‑linked data for as long as your account remains active and for a reasonable period thereafter to fulfill legal, accounting, and security obligations. We minimize and anonymize where possible. Specific retention periods depend on data type and purpose.

9. Security

We implement appropriate technical and organizational measures (e.g., encryption in transit, access controls, logging, least‑privilege, regular reviews) to protect personal data against unauthorized access, disclosure, alteration, or loss. No system can be 100% secure; we continually improve our safeguards.

10. Children

Our service is not directed to children under 16 (or the relevant local age of digital consent). If you believe a child has provided personal data, contact us and we will take appropriate steps.

11. Your rights

You have the following rights under the GDPR, subject to conditions and exemptions:

  • Access – request a copy of your personal data.
  • Rectification – correct inaccurate or incomplete data.
  • Erasure – request deletion (“right to be forgotten”).
  • Restriction – limit certain processing.
  • Portability – receive data in a portable format or have it transmitted to another controller.
  • Objection – object to processing based on legitimate interests or to direct marketing.
  • Consent withdrawal – withdraw consent at any time for non‑essential processing.
  • Complaint – lodge a complaint with a supervisory authority (see below).

To exercise rights, contact support@flexafly.com. We may need to verify your identity. We respond without undue delay and within one month where required.

12. Supervisory authority

You can lodge a complaint with your local data protection authority. If applicable, our lead authority is: Mr. Sid, support@flexafly.com.

13. Automated decisions

We do not use automated decision‑making with legal or similarly significant effects. If this changes, we will provide required information and safeguards.

14. Changes to this policy

We may update this policy to reflect changes to our practices or the law. We will post updates here and adjust the effective date above. For material changes, we will provide additional notice (e.g., in‑product banner or email, where appropriate).

15. Contact

Questions or requests: support@flexafly.com Postal address: [Your Legal Name], [Street, City, Country, Postcode]