Datenschutzerklärung der CookNest-Plattform

Last modified: September 30, 2026

COOKNEST is committed to protecting and respecting your privacy. In this privacy policy ("Privacy Policy"), we explain how COOKNEST collects, uses, discloses, and protects the personal information you provide to us, including, for example, when accessing and using our website and apps, including CookNest Books (hereinafter, the "COOKNEST Platform") or when applying for employment.

The collection and automated processing of personal data is carried out for the purpose of maintaining the commercial relationship and performing tasks of information, training, advice, and other activities inherent to COOKNEST, SL.

This data will only be transferred to the entities that are necessary solely for the purpose of fulfilling the aforementioned objective.

COOKNEST, SL adopts the technical and organizational measures necessary to guarantee the security, integrity, and confidentiality of the data in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, regarding the protection of natural persons with respect to the processing of personal data and the free movement of such data, and which repeals the former LOPD, as well as the new Organic Law 3/2018, of 5 December, on Data Protection and Guarantee of Digital Rights (LOPDGDD).

The user may exercise at any time the rights of access, objection, rectification, erasure, restriction of processing, and data portability recognized in said Regulation (EU). These rights may be exercised by email at: privacy@cooknest.app or by postal mail at the following address: c/Sant Marian 19 - Puerta C, 08221 Terrassa (Barcelona).

The user states that all data provided by them are true and accurate and agrees to keep them updated, notifying COOKNEST, SL of any changes.

As used in this Privacy Policy,

1. "COOKNEST", "we", and "our" shall mean COOKNEST, SL and its affiliates.
2. For the purposes of the GDPR, other data protection laws applicable in the Member States of the European Union, and other provisions relating to data protection, "Data Controller" shall mean COOKNEST, SL, with its registered address at c/Sant Marian 19 - Puerta C, 08221 Terrassa (Barcelona).
3. "Personal information" generally means the same as personal data or personally identifiable information (PII). Personal information is defined in the data privacy laws applicable in your country. It includes any information relating to an identified or identifiable natural person. This means any individual who can be identified, directly or indirectly, by means of an identifier such as a name, an identification number, location data, online identifiers (for example, IP addresses, if they can be used to identify the person), or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person. In simple terms, this includes any data that, on its own or combined with other data in our possession or available to us, can be used to identify the individual.

1. Who is the Data Controller responsible for your data?

The Data Controller responsible for your personal data is COOKNEST, SL (hereinafter, "COOKNEST"), with tax identification number B24958423, and registered address at c/Sant Marian 19 - Puerta C, 08221 Terrassa (Barcelona).

This Privacy Policy governs the access to and use of the COOKNEST Platform that COOKNEST makes available to Internet users (hereinafter, the "Users") who are interested in the content (hereinafter, the "Content") and the services (hereinafter, the "Services") offered by COOKNEST on it. Contact email address: privacy@cooknest.app

2. Recommendations

Please read carefully and follow these recommendations:

• Keep your device equipped with properly updated antivirus software to protect against malicious software and spyware applications that may jeopardize your Internet browsing and the information stored on your device.
• Read and review this Privacy Policy and all legal texts made available by COOKNEST on the COOKNEST Platform.

COOKNEST is committed to the following key principles:

PRINCIPLE 1. WE RESTRICT HOW AND WITH WHOM WE SHARE YOUR PERSONAL DATA.

The legal basis for COOKNEST's processing of User data through the COOKNEST Platform is the User's consent to the processing of their personal data for the purpose of sending promotional communications, as well as COOKNEST's legitimate interest when the User requests information through a contact form.

For this purpose, COOKNEST processes Users' personal data in order to enable the commercial relationship requested by the User, as well as to send commercial communications and/or newsletters regarding its own products and/or services.

By accepting this Privacy Policy and checking the corresponding boxes, the User grants their consent to such processing.

At COOKNEST, we take the protection of your privacy and personal data very seriously. Therefore, your personal data will remain secure and will be processed with the utmost care, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the "General Data Protection Regulation" or "GDPR").

This Privacy Policy governs the access to and use of the service that COOKNEST makes available to Users interested in the services and content hosted on the COOKNEST Platform.

In relation to this, the User may revoke their consent at any time by sending a message to the following email address: privacy@cooknest.app, without affecting the lawfulness of the data processing based on the consent given prior to its withdrawal.

"The use of the COOKNEST application and the transfer of information received from Google APIs to any other application will adhere to the Google API Services User Data Policy, including the Limited Use requirements".

PRINCIPLE 2. WE PROCESS YOUR DATA FOR VARIOUS PURPOSES AND ON DIFFERENT LEGAL BASES.

(i) For the proper functioning of the COOKNEST Platform, COOKNEST may have access to the following data provided, where applicable, by the User:

• First and last name
• Email
• Phone number
• Postal address (the shipping address of printed book orders)
• Financial data (in the event of contracting services). Card payments are processed by Stripe; COOKNEST does not store card numbers
• Purchase history (orders of printed books)
• Social media data in the event of interaction or log-in through external platforms (Apple, Google)
• Content (e.g., recipes, images, book titles and dedications) shared by the User
• Voice recordings made to dictate a recipe, which are not stored
• Device identifiers (the push notification token and a random identifier used for analytics)
• Approximate location (city and region) derived from the IP address by the analytics service
• Usage data (how the User interacts with the apps) and diagnostic data (crash reports)

Below is a breakdown of the correspondence between the purposes of the processing and their respective legal bases:

Likewise, the personal data collected by COOKNEST may be used for the following purposes, according to the consent granted in the corresponding registration form:

1. To send promotional information by electronic means.
2. To provide the information requested by the user through the contact form.

PRINCIPLE 3. WE IMPLEMENT SECURITY MEASURES TO HELP ENSURE THE SECURITY AND CONFIDENTIALITY OF YOUR INFORMATION.

The protection of users' privacy and personal data is fundamental for COOKNEST. Therefore, it has taken all measures within its reach to prevent the misuse of such data, allowing access only to authorized personnel.

COOKNEST maintains appropriate security to protect personal data in accordance with applicable laws and has implemented all technical measures within its reach to prevent the loss, misuse, alteration, unauthorized access, and theft of the data provided by the User through the COOKNEST Platform, without prejudice to informing the User that security measures on the Internet are not infallible.

COOKNEST undertakes to respect the right to secrecy and confidentiality of the personal data processed, in accordance with applicable legislation. COOKNEST shall not be responsible for any damages that may arise from the User's failure to comply with this obligation.

PRINCIPLE 4. WE RETAIN YOUR PERSONAL INFORMATION FOR AS LONG AS NECESSARY TO FULFIL THE PURPOSES FOR WHICH IT WAS COLLECTED.

The protection of the User's privacy and personal data is fundamental for COOKNEST. Therefore, COOKNEST makes every effort to prevent the misuse of the User's data. Only authorized personnel will have access to the User's data.

The User's personal data will be retained for as long as the User's COOKNEST account remains active for the processing purposes for which they were provided, provided that the User has not withdrawn their consent by requesting the deletion of their account or the removal of specific personal data from the COOKNEST Platform. Subsequently, where necessary, COOKNEST will keep the information blocked for the legally established periods. COOKNEST undertakes to comply with its duty of secrecy and confidentiality regarding personal data, in accordance with applicable legislation.

Data on orders of printed books (amounts, dates, country, and the payment and print job identifiers) are kept for as long as tax and commercial law requires (six years under article 30 of the Spanish Commercial Code). If the User deletes their account, an order that was never paid is deleted; for a paid order, the name, shipping address, phone number and email address are erased once the book has shipped, and the PDF of the book is deleted.

Voice recordings made to dictate a recipe are not kept.

PRINCIPLE 5. USE OF THE TRUEDEPTH CAMERA.

Some Apple devices include a TrueDepth camera. CookNest uses this functionality exclusively to allow users to move through recipe steps without touching the screen, making it easier to use the app while cooking.

To do so, the app detects the presence and position of the User's face for the sole purpose of recognizing a simple gesture that allows changing steps.

The User's personal data obtained through the TrueDepth camera:

• Is not stored • Is not sent to our servers or to third parties • Is not used to identify the user • Is not used for analytics or advertising purposes • Is processed only on the device and in real time

CookNest does not create or store biometric models of the User's face nor reconstruct their facial image. The use of TrueDepth is voluntary and optional, and the app can be used without this feature.

PRINCIPLE 6. CONNECTING COOKNEST TO AI ASSISTANTS.

The User may choose to connect their CookNest account to a third-party AI assistant, such as ChatGPT (OpenAI) or Claude (Anthropic), through the CookNest connector (MCP server at mcp.cooknest.app). The connection is only created when the User signs in to CookNest from the assistant and authorizes it.

Once connected, and only when the User asks the assistant for something that requires it, the assistant can read and change the User's recipes, personal recipe notes, collections, meal plans, shopping lists and pantry, and can read the User's name, email address, language and cooking preferences. The assistant never receives the User's password, CookNest or Firebase credentials, payment details or subscription details, nor any data of other users.

The information the assistant retrieves is then processed by the provider of that assistant under its own privacy policy and terms, which the User accepted with that provider. COOKNEST does not control that processing.

The legal basis is the performance of the service the User requests (Art. 6.1 b) GDPR). The User can disconnect the assistant at any time from the assistant's settings, or by writing to privacy@cooknest.app. Disconnecting does not delete the User's CookNest data.

PRINCIPLE 7. COOKNEST BOOKS (PRINTED RECIPE BOOKS).

CookNest Books is the COOKNEST app for iPhone (app.cookNest.books) and Android (com.cooknest.books) with which the User puts together a recipe book and orders it printed. It uses the same CookNest account. In addition to what is described in the rest of this Privacy Policy, CookNest Books processes the following data:

• Order data. The name, email address, phone number and shipping address the User enters when ordering a book. They are used to process the order, deliver the book and send emails about the order.
• Payment. Card payments, including Apple Pay and Google Pay, are processed by Stripe inside the app. COOKNEST does not receive or store card numbers: it only receives the result of the payment and the identifiers Stripe assigns to the payment and the customer.
• Printing and delivery. Books are printed and shipped by Lulu Press, which receives the name, shipping address, phone number, email address and the PDF of the book. The carrier that delivers in the destination country receives the data needed for delivery.
• Purchase history. The orders placed: books, amounts, dates and the status of printing and delivery.
• Book content. The recipes, photos, book titles, sections and dedications the User adds, stored in the User's account.
• Dictation and recipe photos. When the User dictates a recipe or photographs a written one, the recording or the photo is sent to Google Gemini through Firebase AI Logic for the sole purpose of turning it into a recipe. COOKNEST does not keep the recordings.
• Saved shipping address. To prefill the next order, the last shipping address is saved only on the User's device and not on our servers.
• Analytics, notifications and diagnostics. CookNest Books uses Mixpanel for usage analytics (including an approximate location derived from the IP address), Customer.io for emails and push notifications (with the device's push token) and Firebase Crashlytics for crash reports, which are not linked to the account.
• No advertising. CookNest Books shows no advertising, does not use advertising identifiers and does not track the User for advertising purposes. Data is not shared with advertising networks or data brokers.

The legal basis for processing the order, the payment, the printing and the delivery is the performance of the contract of sale (Art. 6.1 b) GDPR). Analytics and communications follow the legal bases set out in Principle 2.

PRINCIPLE 8. WHO RECEIVES YOUR DATA.

COOKNEST uses the following providers, which process personal data on its behalf or receive it to provide the service the User requests:

COOKNEST does not sell personal data.

Tell us what you think

Our goal is to protect your privacy. To leave a comment or help us improve, please contact us by email at privacy@cooknest.app. We may ask you to provide a copy of a valid identification document.

If you believe that we are failing to comply with our obligations under data protection laws, you may file a complaint with the competent Data Protection Authority, which may be the supervisory authority in your country of residence, place of work, or the place of an alleged violation of data protection laws.

Changes to this Privacy Policy

This Privacy Policy may be amended periodically to comply with applicable legislation or to adapt it to our current business practices. We will publish any changes on the COOKNEST Platform and will make every effort to notify you via your email address. When notifying you of such changes, we will also explain the possible impact on you, where applicable. We recommend that you visit the COOKNEST Platform periodically to check for updates.

Additional information we would like you to know:

1. Transfers outside the EU/EEA

The User is informed that their personal data may be transferred to third-party companies or entities in the United Kingdom and the United States.

The provisions of Implementing Decision (EU) 2021/1773 of the Commission, of 28 June 2021, pursuant to Directive (EU) 2016/680 of the European Parliament and of the Council, regarding the adequate protection of personal data by the United Kingdom, may be applied to regulate transfers to the United Kingdom.

To this end, the European Commission declared in its Resolution of 21 May 2021 that, through the adequacy decision, the United Kingdom guarantees the minimum data protection framework and provides a solid, sufficient, and future-proof legal basis for data transfers.

COOKNEST will take measures to ensure that the processing complies with appropriate safeguards, including the requirement that the destination be a third country declared as providing an adequate level of protection, in accordance with the list that may be published either by the European Commission or the Spanish Data Protection Agency (AEPD), or under any other measure approved under the GDPR.

Several of the providers listed in Principle 8, among them Google, Stripe, Lulu Press, Mixpanel and Customer.io, are based in the United States or process data there. These transfers are made to companies certified under the EU-US Data Privacy Framework (Commission Implementing Decision (EU) 2023/1795 of 10 July 2023) or, where a provider is not certified, under the standard contractual clauses approved by the European Commission (Implementing Decision (EU) 2021/914).

When the User orders a printed book for delivery to a country outside the European Economic Area, the name, shipping address and phone number are transmitted to the carrier that delivers in that country, because this is necessary to perform the contract (Art. 49.1 b) GDPR).

Likewise, Users' data may only be used by COOKNEST for purposes necessary to properly fulfil the personal data processing purposes indicated in Principle 2 of this Privacy Policy.

1. Your rights

Users have the right to:

(i) Access their personal data;

(ii) Request the rectification of any inaccurate data;

(iii) Request the erasure of their data;

(iv) Request the restriction of the processing of their data;

(v) Object to the processing of their data;

(vi) Request the portability of their data.

(vii) Likewise, Users have the right not to be subject to decisions based solely on automated data processing.

The User can delete their account at any time from the app (Profile > Delete account) or at https://cooknest.app/delete-account. Deleting the account erases the User's data, except the order data that must be kept under Principle 4.

The User may exercise all these rights by contacting the following email address: privacy@cooknest.app indicating the reason for the request.

The User may also send their request by ordinary mail to the following address: c/Sant Marian 19 - Puerta C, 08221 Terrassa (Barcelona).

The communication sent must include information regarding the specific request.

Through this provision, and in the context of exercising their rights, the User is informed that they may be required to present documentation, depending on the circumstances, to sufficiently verify their identity if there are doubts regarding it.

Without prejudice to any other administrative or judicial remedy, the User has the right to lodge a complaint before a Supervisory Authority, in particular in the Member State of their habitual residence, place of work, or the place where the alleged infringement occurred, if they consider that their personal data have not been processed lawfully, as well as if they are not satisfied with the exercise of their rights. The supervisory authority with which the complaint is filed shall inform the complainant of the progress and the outcome of the complaint.

1. Third-party websites

The COOKNEST Platform may include links to third-party websites. This Privacy Policy does not apply to third-party websites. COOKNEST is not responsible for the use of your personal information by such third parties. The use of such websites is at your own risk. For more information on how these third parties process your personal information, please refer to their privacy policy (if available).

1. Accuracy of the data provided by users

The User guarantees the accuracy of the personal data provided and undertakes to communicate any modification to COOKNEST. In any case, the User shall be responsible for the accuracy of the data provided, and COOKNEST reserves the right to exclude from its services any User who has provided false data, without prejudice to any other legal actions that may apply.

Users are advised to protect their data with the utmost diligence by using appropriate security tools. COOKNEST is not responsible for any theft, unlawful modification, or loss of data.

Any modification or update of the data must be communicated to COOKNEST through the communication channels established in this Privacy Policy.

1. Acceptance and consent

The User declares that they have been informed of the conditions regarding the protection of personal data, accepting and consenting to the processing of such data by COOKNEST in the manner and for the purposes indicated in this Privacy Policy.

* * *