AirBitePrivacy Policy
Effective date: 4 July 2026
AirBite is operated by Meverix Software s.r.o., Lidická 700/19, 602 00 Brno, Czechia ("we", "us"). We are the data controller for the personal data described here under the EU General Data Protection Regulation (GDPR). Contact for privacy requests: support@airbite.app. We have not appointed a Data Protection Officer or EU representative; the controller contact above handles all privacy requests.
The short version: we collect only what the app needs to work, we do not track you, we do not show ads, and we do not sell your data. This website itself sets no cookies and loads no third-party scripts.
What we collect and why
| Data | Purpose | Legal basis | Processor / recipient | Retention | When you delete your account |
|---|---|---|---|---|---|
| Email address and optional first name | Your account: sign-in, service emails | Contract | Supabase (auth, database), Resend (transactional email) | While your account exists | Deleted |
| Account identifier (app-user UUID) | Linking your account and subscription across our service providers | Contract | Supabase, RevenueCat | While your account exists | Deleted |
| Preferences: cuisines, dietary restrictions, household size, air-fryer brand/model | Personalizing recipes and cook times | Contract | Supabase | While your account exists | Deleted |
| AI chat messages (your prompts and the responses) | Generating recipes and answering cooking questions | Consent (requested in-app before first AI use) | OpenAI (AI generation), Supabase | While your account exists; a per-request server log (ai_query_log) is kept and a periodic purge is planned | Deleted; the request log is purged no later than 90 days after account deletion |
| Cooking history: completed cook sessions with optional rating, doneness verdict, appliance snapshot | Your history and improving your suggestions | Contract | Supabase | While your account exists | Deleted |
| Favorites | Your saved recipes | Contract | Supabase | While your account exists | Deleted |
| Subscription state | Knowing whether AirBite Plus is active | Contract | RevenueCat (receives your app-user ID), Apple (handles payment — we never see payment details) | While your account exists | Deleted |
All of the above is linked to your account. None of it is used for tracking or advertising. We use no analytics SDKs, no advertising SDKs, and no cross-app identifiers. Transactional emails already delivered are retained by Resend according to its own policy.
AI features and your consent
AI recipe generation and chat are powered by OpenAI. The app asks for your explicit consent before your first AI use, naming OpenAI. If you decline, AI features are simply unavailable. To withdraw consent after accepting, contact us at support@airbite.app — there is currently no in-app toggle to revoke it. Recipe images are generated by Fal.ai from prompts derived from recipe titles; no personal data is sent for image generation.
Processors and international transfers
We share data only with the processors needed to run the service:
- Supabase — hosting, authentication, database
- OpenAI — AI recipe generation and chat (US)
- Fal.ai — recipe image generation (no personal data)
- RevenueCat — subscription state (US)
- Apple — payments and push notifications
- Resend — transactional email delivery (US)
Where processors are located in the United States, transfers rely on the EU Standard Contractual Clauses and/or the EU–US Data Privacy Framework.
Data stored on your device
The app keeps your last 50 chat messages on your device for convenience. They are wiped when you sign out.
Deleting your account
You can delete your account directly in the app: Profile → Delete account. This deletes all account-linked data listed in the table above. If you prefer, email support@airbite.appand we will delete it for you.
Your rights
Under the GDPR you can request access to your data, correction, deletion, a portable copy, and you can object to or restrict certain processing. Write to support@airbite.app. You also have the right to lodge a complaint with the Czech Data Protection Authority (Úřad pro ochranu osobních údajů, uoou.gov.cz) or your local supervisory authority.
Legal bases we rely on: performance of our contract with you (providing the service), your consent (AI processing), and our legitimate interest in keeping the service secure and working.
Children
AirBite is not directed at children under 16.
Changes
If we change this policy in a meaningful way, we will update this page and notify you in the app.