Privacy Policy
Last updated: September 30, 2026
Data controller
The data controller for the processing described here is Reza Saffari, sole trader operating under the business name Proximiti. This covers both the app and the snappmat.app website, including the launch notification email list. Contact details are under Contact at the end.
Data we collect
Account details from your Google or Apple sign-in, meaning a user identifier, an email address and, if your Google account has one, a profile picture. If you sign in with Apple and choose to hide your address from us, we receive a forwarding address Apple generates instead (private relay), not your real email. Your name, if your Google sign-in provides it or if you choose to share it the first time you sign in with Apple. The ingredient list you confirm after a scan, stored as a snapshot of your most recent scan. Recipes you save, rate or mark as a favourite. Your weekly plan, the shopping list built from it and what you have ticked off. Your dietary preferences, the ingredients you have chosen to exclude, your personal pantry staples, your household size and whether your household includes children (yes or no, no ages or names). Your language setting. The time of each scan you make, together with your account ID if you are signed in, or a random installation ID created in the app if you are not. A device identifier created locally on install and sent with every scan, whether you're signed in or not, to limit the number of scans per device. Your subscription status. The time and type of calls made to our recipe service on your behalf.
Purpose and legal basis
Account, saved recipes, ratings, weekly plan, shopping list, dietary preferences, personal pantry staples, household size, the children flag and language setting are processed to deliver the service you requested, on the basis of contract, regardless of whether the account was created via Google or Apple. Your name is used only to address you by first name in the app and in reminders, as part of the service, on the basis of contract. Household size is used to scale servings on the shopping list, the children flag is only a signal to recipe ranking and carries no information about the children's age, number or names, and your personal pantry staples determine which ingredients count as already at home when matching. Scan timestamps, the device identifier and call logs are processed to enforce the scan quota (weekly for signed-in users, a rolling 90-day per-device limit for signed-out use and daily for premium), to limit the number of recipe openings per day and to protect the service from overuse and abuse, on the basis of legitimate interest. When you scan, the recipe search receives the scan's id, so that each scan can be followed by at most three recipe searches within 30 minutes. The id contains no ingredients or images. Subscription status is processed to give you access to what you paid for, on the basis of contract. With each scan we also record your phone's platform (iOS or Android) and whether the scan was made signed out, on the free tier or on premium, and we use these, counted per day and never per person, to understand how the app is used and to plan capacity and cost, on the basis of legitimate interest.
Photos are processed and discarded
The photo you scan is sent directly to Google's Gemini model to identify ingredients and is then discarded. It is never stored on our servers, in our database or in any file storage. Only the ingredient list you confirm yourself is kept.
Third-party processing
Google processes your scanned photo for ingredient recognition, receives recipe text (title, ingredients and steps) for translation into Swedish, and receives matched-recipe details, the main protein detected in your ingredients and whether your household includes children, in order to rank and recommend recipes. Google also receives the ingredient names you confirmed, and your choice of vegetarian or vegan if you have made one, in order to create recipes for you. Google and Apple also process the sign-in itself when you create an account or sign in; if you sign in with Apple and hide your email address, Apple provides us with a forwarding address (private relay) instead of your real one. Spoonacular receives ingredient names and search filters in order to return recipes, and never receives any identifier linked to you. Supabase runs the account system, database and server functions, with the database located in Stockholm. RevenueCat handles subscriptions and receives your user identifier, your purchase receipts, platform and country. The RevenueCat software starts when the app opens, including before you have signed in or purchased anything. Apple and Google handle the payment itself. We never see your card or payment details. Cloudflare runs the snappmat.app website and stores the launch notification email list in a database on Cloudflare’s network. Cloudflare receives the address and the timestamp, nothing else.
Transfers outside the EU and EEA
Google, Apple, Spoonacular, RevenueCat, Supabase and Cloudflare are established outside the EU or may process data outside the EU and EEA. Such transfers rely on the European Commission's standard contractual clauses or an equivalent safeguard. You can request information about the safeguards that apply using the contact details below.
No tracking or advertising
The app contains no analytics software, no crash reporting and no advertising networks. The same is true of the snappmat.app website, which sets no cookies, stores nothing else in your browser, and loads nothing from a third-party server. We build no marketing profiles, sell no data and share no data for advertising purposes.
Retention
Saved recipes, ratings, weekly plans, dietary preferences and language settings are kept until you remove them or close your account. The ingredient list from your most recent scan is overwritten by the next scan and only the latest version is kept. Scan timestamps and the device identifier are deleted automatically 90 days after they are recorded. That is the same window the anonymous scan limit is counted over, so a device that hasn't scanned in 90 days gets its scans back. The log of calls to the recipe service, with the device identifier when it was sent, is deleted automatically 30 days after it is recorded. Subscription status is kept for as long as the account exists. Scan history is not stored at all, neither on the server nor on your device, and disappears when the app closes. Your reminder settings, such as the time you choose, whether reminders are on and when the app was last opened, are stored only on your device and are never sent anywhere. Reminders are created and scheduled locally on your phone and do not go through any push service. If you have planned dinner, the app reads the dish name from your own weekly plan and puts it in the reminder on your device.
Account deletion
When your account is deleted, everything linked to your user identifier is removed, including saved recipes, ratings, weekly plans, shopping lists, dietary preferences, language setting, the scan snapshot, scan timestamps and the subscription mirror. Data held by RevenueCat, Apple and Google is deleted according to their own terms and is outside our control.
The snappmat.app website and the email list
This section is about the snappmat.app website, not about the app. Nothing described here happens inside the app, and none of it requires an account. On the website you can leave your email address to be told when the app launches. If you do, we store the address and the time it was submitted. Nothing else is stored: no IP address, no information about your browser and no record of where you came from. The purpose is a single message, sent when the app launches. The address is not used for anything else, is not sold and is not passed on. The legal basis is your consent, which you give by typing the address yourself and submitting the form. You can withdraw that consent at any time. That is a right of its own, separate from the right to erasure, and withdrawing it does not affect the lawfulness of the processing carried out beforehand. The address is kept until the launch message has been sent or until you ask us to remove it, whichever comes first. If no launch happens, the list is deleted no later than six months after the address was submitted. Because the list is not linked to any user identifier, you cannot remove yourself through an account, and you do not need to. Email info@proximiti.se from the address you want removed, or say which address it concerns, and we will delete the row and confirm. The right to erasure and the right to withdraw consent are exercised the same way. The address is stored in a database at Cloudflare, described under Third-party processing and under Transfers outside the EU and EEA. The website stores nothing in your browser. No cookies, no local storage, no session storage and no in-browser database. The language choice is two separate addresses, snappmat.app and snappmat.app/en, so the choice lives in the link and never needs to be remembered on your device.
Your rights
You have the right to request access to your personal data, rectification of inaccurate data, erasure, restriction of processing, data portability, and to object to processing carried out on the basis of legitimate interest. Contact us as below to exercise these rights. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection if you believe we process your data incorrectly.
Children
The service is not directed at children under 13, and accounts are not intended to be created by children below that age.
AI recognition can be wrong
The ingredient list identified from your photo is an AI-generated suggestion and may contain errors, missing items or incorrect amounts. The confirmation screen exists so that you can review and correct the list before it is used.
Nutrition figures are estimates
Nutrition figures shown for a recipe are calculated from estimated ingredient weights and estimated nutrient density, partly with the help of AI. They are not measured values and not medical advice, and are deliberately shown rounded rather than exact. Consult a healthcare professional for diet-related medical decisions.
Allergy warning
The app does not identify allergens and is not an allergy tool. The dietary preferences and ingredient exclusion are taste settings for recipe search, not safety filters, and must never be used to avoid an allergen. We cannot guarantee that a recipe or its ingredients are free from allergens or traces of allergens. Always check the ingredient list and the recipe against your own allergies and dietary needs before cooking or eating a dish.
Changes to this policy
We may update this policy. Material changes are announced in the app before they take effect.
Contact
Questions about this policy or about your personal data can be sent to info@proximiti.se.