Home

Privacy policy

Effective from 30 October 2026. This is a translation; the Polish version prevails.

Who is behind the app

Miskai is created by Michał Mróz, who is also the data controller. Website: miskai.app. For any privacy matter, write to mmroz17@gmail.com.

The app is built with the help of artificial intelligence (AI): it helped write the code and texts, and AI models read and translate imported recipes.

What data we process

  • A random device identifier — it replaces an account if you don't sign in.
  • If you sign in with Google: your Google account ID, email address, name and profile photo. We never receive your password or access to your email, Drive or contacts.
  • The recipes you save, with the source link, your notes and photos.
  • A count of successful imports (for the plan limit), with an account also per calendar month (for the Premium safety cap), plus your Premium status and the promo code you used.
  • Your name and profile photo, if you add them.
  • The app language you chose — stored on your phone and sent with requests so that messages and new recipes are in that language.
  • The material you send for import: a link, pasted text, photos or PDF files.
  • Technical data recorded by our hosting provider (e.g. IP address and request time in logs).

We don't collect your location or contacts, show no ads and use no tracking tools. The miskai.app website uses no cookies or analytics — it only remembers your chosen language in your browser.

Google account and the sign-in cookie

An account is optional. After you sign in, the recipes from your device move to your account, so you can see them on every phone you sign in on. We remember your sign-in with one strictly necessary cookie (valid for up to a year or until you sign out). We use no advertising or analytics cookies, which is why we don't ask for cookie consent.

How importing and AI work

When you add a link, the app's server fetches the publicly available description and thumbnail from that service (e.g. Instagram, TikTok, YouTube, Facebook or a recipe website). We send this material — or your photos and text — to Google (the Gemini model) only to read the recipe, translate it into the language chosen in the app (Polish, English or Spanish), convert the units and tidy it up. The result is saved in your library. For YouTube videos without a recipe in the description, the model may watch the video itself.

Google processes this material under the Gemini API terms. For users in the European Economic Area, Switzerland and the UK, Google does not use it to improve its products and keeps it for a limited time only to detect abuse. Even so, please don't import photos containing personal data (e.g. documents or other people's faces).

A reel's video plays directly from the service it comes from and is subject to that service's privacy rules.

Discover

When you import a recipe from a public link (reel, video, website), the content read by the app — title, ingredients, steps, thumbnail and the creator's name — may appear in the Discover tab for other users of the same language. We don't show who saved it: we only count how many people did and when (to calculate sections such as “Trending” or “Rising”).

  • Your notes, photos and edits never go there, nor do recipes from photos, files or typed in by hand.
  • You can opt out in Profile → “Take part in Discover” — we then remove your saves from the counters. Deleting your data or account removes them too.
  • Reporting a recipe is anonymous; we store the report with your device or account ID only so that one person can't report it repeatedly.

The legal basis is our legitimate interest in showing popular recipes (Art. 6(1)(f) GDPR).

Shared recipes

When you share a recipe, we create a public link. Anyone who has it can see the recipe (without your notes) and save it — we don't show who shared it. The link updates with the recipe and stops working when you turn it off or delete the recipe.

Feedback and contact

When you send feedback (a bug, an idea), we store its content, your name and email if you give them, the app version, your type of phone and — for reports about a recipe or import — the link to that recipe. We use them only to reply and improve the app. We delete the report once it's dealt with, at the latest after 2 years, and also together with your data or account. Legal basis: your request and our legitimate interest in developing the app (Art. 6(1)(b) and (f) GDPR).

Where we store data and who we share it with

  • Cloudflare — app server, database and photo storage.
  • Google (Gemini API) — processing of import material by the AI model.
  • Google (sign-in) — confirming your identity if you choose “Sign in with Google”.
  • Google Fonts — loading the app's typefaces.

Providers may also process data outside the European Economic Area, based on safeguards provided for in the GDPR (e.g. standard contractual clauses). We don't sell data or share it for marketing. Data is only sent over an encrypted connection (HTTPS) and our providers store it encrypted at rest; only the app's creator has access to the database.

Usage statistics

To know whether the app is useful and how our campaigns work, we count anonymous statistics. We do it ourselves, on our server — without Google Analytics, ad pixels, cookies or other third-party tools.

  • With the device identifier we store: the days the app was opened, the type of device (Android, iPhone, computer), whether the app is installed, its version and the source of the first visit (e.g. a campaign name from an ad link or the page you came from).
  • In aggregate, with no identifier: the number of imports (successful and failed, with source and duration) and how often features are used, e.g. cooking mode or search.
  • We don't store search terms or links, don't track you on other sites and don't combine this data with data from other sources.

The legal basis is our legitimate interest in improving the app (Art. 6(1)(f) GDPR). We keep usage days for up to 400 days. You can turn statistics off at any time in Profile → “Anonymous statistics”, and deleting your data or account also deletes data linked to your devices. With an account we remember which devices are linked to it — only to count how many people saved a recipe.

App administrator and security

The app's creator (administrator account) can see the list of accounts: name, email, sign-up and last sign-in dates, the number of recipes and imports, and the plan. Emails are partly masked in the list; the full address is shown only on a person's card. The administrator can block an account or device for breaking the terms, grant Premium, sign an account out of all devices and delete an account at the user's request. Every such action — including just viewing the data — is recorded in a log kept for a year. The administrator session expires after 14 days, and blocking or deleting accounts requires a fresh sign-in. After a blocked account is deleted we keep only its identifier and the reason for the block, so that the block can't be bypassed (legitimate interest, Art. 6(1)(f) GDPR).

Legal basis and retention

We process data to provide the service you use (Art. 6(1)(b) GDPR) and in our legitimate interest of protecting the app from abuse (Art. 6(1)(f) GDPR). We keep recipes, notes, photos and account data until you delete them; the sign-in session for up to a year or until you sign out. We keep the import history (without content) for 2 days for the daily limit.

Deleting your account and data

In the app: Profile → “Delete account and data” (without an account: “Delete all data”) and confirm. Deletion happens immediately, on all your devices.

Without the app: email mmroz17@gmail.com from your Google account's address with the subject “Delete my Miskai account”. We'll delete your account and data within 30 days (usually sooner) and confirm by email. You don't need to install the app. If you have a paid subscription, cancel it in the store (Google Play → Payments & subscriptions) — deleting your account doesn't cancel it.

What we delete: your account (Google ID, email, name, photo), all recipes, notes and photos, your profile, shared links, feedback messages, sign-in sessions, import counters, Premium, links to your phones, statistics linked to your devices and your saves in the Discover counters.

What we keep: anonymous snapshots of recipes from public links in Discover (without notes or any data about you), copies of recipes other people saved from your shared link, aggregate statistics without identifiers, administrator log entries (up to a year) and — for a blocked account — its identifier and the reason for the block. Our provider's database backups expire after 30 days at the latest.

These steps are also on the miskai.app account deletion page.

Your rights

  • Access and rectification — you can edit every recipe.
  • Erasure — a single recipe while editing it, or everything in Profile → “Delete all data” (with an account: “Delete account and data”).
  • Portability — move your recipes to another device by signing in with Google or with a transfer code.
  • Objection and restriction of processing — write to the address above.
  • A complaint to a supervisory authority — in Poland the President of the Personal Data Protection Office (UODO), or the authority in your country (in the UK: the Information Commissioner’s Office).

The transfer code works like a key to your recipes — don't give it to anyone.

Content from the internet

You save recipes for private use. The rights to original content, photos and videos belong to their authors — that's why every recipe keeps the creator's handle and a link to the source. In the creators ranking in Discover we show their public profile photo or the site's icon. A creator who doesn't want to be there can write to us — we'll remove their recipes and photo from Discover.

Children

The app is intended for adults (18+) and is not directed at children.

Changes

We'll tell you about significant changes to this policy in the app. The current version is always available in Profile → “Privacy policy” and at miskai.app. The rules for using the app are set out in the terms of use.