This is an English translation, provided for convenience. In case of any discrepancy, the French version prevails. Version française
This policy explains what personal data Le Chaudron collects, why, on what legal basis, how it is processed, and what your rights are. It applies to the Le Chaudron mobile application (Android and iOS) and to the lechaudron.app website, together referred to as “the Services”. It complies with the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés).
The Le Chaudron Services are published by Vincent VIGOR, individual publisher.
Contact for any question about your data: [email protected]
| Data | When | Why | Legal basis |
|---|---|---|---|
| Email address | Account creation | Authentication, verification, contact | Performance of the contract (Terms of Use) |
| Password | Email sign-up | Stored encrypted (hashed) by our provider; we never see it | Performance of the contract |
| Google profile (email, name, photo) | If you sign in with Google | Creating/identifying the account. We never receive your Google password | Performance of the contract |
| Apple ID (email, possibly hidden by Apple, and name) | If you use “Sign in with Apple”, when this option is offered | Creating/identifying the account. We never receive your Apple password | Performance of the contract |
| Content you publish (recipes, ingredients, photos, videos, comments, ratings) and your username | Voluntary contributions | Publication on the Services after moderation (see §4) | Performance of the contract |
| Preferences (favorites, servings, diet, history) | Use of the app | Stored locally on your device; synced to our servers only if you turn on cloud backup | Performance of the contract |
| Subscription status | If you take out a subscription | Unlocking paid features. Payment is handled only by Google Play or the App Store: we never see your bank details | Performance of the contract |
| Device notification token | Only if you allow notifications | Sending you the notifications you agreed to | Consent (can be turned off at any time in your phone’s settings) |
| Email address for the newsletter | Only if you sign up, on the site or in the app | Sending you the newsletter, every Sunday. Nothing is sent until you click the confirmation link received by email (double opt-in) | Consent |
| Proof of your newsletter sign-up: date, a fingerprint of your IP address (not the address itself), browser, and the page you signed up from | When you sign up for the newsletter | Being able to show that you did consent, as the law requires. The IP address is never stored in clear: we only keep a fingerprint, from which it cannot be recovered | Legal obligation (GDPR, art. 7.1) |
| Technical data (IP address, logs) | Connection to the servers | Security, abuse prevention, proper operation | Legitimate interest (security of the Services) |
| Reported content and moderation decisions | Reports or moderation | Handling reports, fighting illegal content | Legal obligation (Regulation (EU) 2022/2065) and legitimate interest |
We do not sell, rent or transfer any personal data. We do no advertising profiling.
If you use the “photo → ingredients” feature, the photo is sent to our artificial intelligence provider for analysis. This photo is not kept after the analysis and is not used to train models.
A recipe or content you choose to publish becomes visible to everyone, in the app and on the lechaudron.app website, along with your username. Your email address is never displayed. The content of your private recipe book is visible only to you. The terms of use of your published content are detailed in article 3 of the Terms of Use.
We use service providers who process certain data on our behalf, only to the extent necessary for their task:
| Provider | Role | Data |
|---|---|---|
| Supabase (hosted on AWS, European Union — eu-west-1) | Authentication, database, content storage | Email, account, UGC content |
| Anthropic (Claude) | Content moderation + photo analysis + recipe generation | Submitted texts/photos (not kept, not used for training) |
| Google sign-in + payment (Google Play, if you subscribe) + delivery of our emails (Gmail): sign-up confirmation, newsletter, support replies | Google identity, purchase status, recipient’s email address and message content | |
| Apple | Payment (App Store, if you subscribe) + Apple sign-in when offered | Apple ID, purchase status |
| Expo (notifications) | Delivering notifications, if you have allowed them | Device notification token |
| Cloudflare | Secure traffic routing, bot protection | Technical data (IP) |
| Amazon (Associates Program) | Affiliate links | No personal data is passed on by Le Chaudron: only a referral ID is added to the link. When you click, you land on amazon.fr, which applies its own privacy policy and its own cookies |
Your account data and content are hosted in the European Union (AWS region eu-west-1, Ireland). The lechaudron.app website is served from a server owned by the publisher, located in France.
Some providers (Anthropic, Google, Apple, Expo, Cloudflare) are established or operate outside the European Union, notably in the United States. These transfers are covered by the safeguards provided for by the GDPR: the European Commission’s adequacy decision (EU-US Data Privacy Framework) for certified companies, and/or standard contractual clauses adopted by the European Commission.
The Services use only cookies and storage that are strictly necessary for them to work:
Under article 82 of the French Data Protection Act, these trackers are exempt from consent. The Services place no advertising, audience-measurement or social-network cookies. The buttons to our social networks are simple links: no tracker is placed unless you click.
If trackers requiring consent were ever added, a consent banner would be shown to you before anything is placed, letting you refuse as easily as accept, and change your mind at any time.
You have the rights of access, rectification, erasure, portability, restriction and objection. Where processing is based on your consent, you can withdraw it at any time, without affecting processing already carried out. You can also set instructions regarding what happens to your data after your death.
To exercise these rights, write to [email protected] or use the account deletion page. We reply within one month at most. Proof of identity may be requested if there is reasonable doubt.
You can also file a complaint with the CNIL, the French data protection authority (cnil.fr).
The app is not intended for children under 15. Creating an account requires being at least 15 years old (the French legal threshold for consenting to data processing). Content related to alcoholic drinks is reserved for adults, and alcohol should be consumed in moderation.
We implement technical and organizational measures: password encryption, data-level access control with security rules (RLS), protected server secrets, backups, and encrypted traffic routing.
This policy may change. The date of the last update appears at the top of the page. In the event of a significant change, you will be informed in the Services.
Terms of Use · Legal notice · Delete my account
Information document written for Le Chaudron. For final compliance before commercial launch, a review by a legal professional is recommended.