Privacy Policy
This Privacy Policy explains how Samla ("Samla", "we", "us") collects, uses, shares and protects your personal data when you use the Samla recipe application and website (samlarecept.se). Samla is a recipe app that lets you save, organise, import, plan and shop for recipes, and share them within a household.
We act as the data controller for the personal data described here. If you have any questions, contact us at support@samlarecept.se.
1. Data we collect
We collect the following categories of personal data:
- Account data — your email address and name, provided when you register or sign in (including via Google Sign-In).
- Recipes and user content — recipes you create, import or edit, meal plans, shopping lists, and any notes or text you enter.
- Uploaded photos — images you upload for recipes or to import recipes from a photo.
- Import sources — URLs and images you submit so we can extract a recipe from them.
- Household data — the household you own or belong to, and the email addresses used to send and accept invitations.
- Usage metrics — counters such as the number of recipe imports you have performed in a period, used to enforce plan limits.
- Analytics data — if, and only if, you consent, pages visited and features used, together with a randomly generated identifier, your browser and your approximate location derived from your IP address (see Cookies and analytics below).
- Subscription data — your subscription status and payment records, handled by our payment provider (see Processors below). We do not store your card details.
2. How we use your data (purposes)
- To provide, operate and maintain the Samla app and your account.
- To store and organise your recipes, meal plans and shopping lists, and to share them with the members of your household.
- To extract recipes from URLs and photos you submit, using AI processing.
- To process subscription payments and enforce plan limits.
- To send transactional emails (sign-in, verification, invitations, account deletion, password reset).
- To understand how the app is used so we can improve it — only with your consent, and never to profile you or to advertise.
- To secure the service, prevent abuse and comply with legal obligations.
3. Legal bases (GDPR)
Where the GDPR applies, we rely on the following legal bases:
- Performance of a contract — to provide the app and the features you request.
- Legitimate interests — to secure the service and prevent abuse.
- Consent — where required, for example when you submit content to be processed by AI.
- Legal obligation — to retain records where the law requires it.
4. Processors and sub-processors
We share data with the following service providers who process it on our behalf, only as needed to deliver the service:
| Provider | Purpose | Data shared |
|---|---|---|
| Convex | Backend and database hosting | Account data, recipes and all user content |
| Mistral | AI recipe extraction from URLs and images | Submitted URLs, page content and uploaded photos |
| Polar | Subscription payments (merchant of record) | Email, subscription and payment details |
| Better-Auth | Authentication and session management | Account credentials and session data |
| UseSend | Transactional email delivery | Email address and message contents |
| PostHog | Product analytics — only after you consent | Pages visited, features used, a random identifier, browser and approximate location |
| Google Sign-In (optional login method) | Email and name from your Google account |
Some of these providers may process data outside the EU/EEA. Where that happens, appropriate safeguards (such as Standard Contractual Clauses) apply.
5. Cookies and analytics
Samla sets only the storage it needs to run: a session cookie that keeps you signed in, a cookie recording your language choice, and a record of the analytics choice described below. None of these require consent, because without them the service cannot do what you asked it to.
For analytics we use PostHog. It is switched off until you allow it: on your first visit we ask, and until you answer nothing is measured and no analytics cookie is written. If you allow it, PostHog sets cookies containing a randomly generated identifier so repeat visits can be recognised, and records which pages you open and which features you use. We do not use it for advertising, we do not sell the data, and we do not combine it with your recipes or any other content in your account.
You can change your answer at any time from the Cookies link in the site footer. Withdrawing consent stops all further measurement immediately.
6. Data retention
We retain your account and content for as long as your account is active. When you delete your account, your account, recipes, meal plans, shopping lists, household and uploaded photos are permanently deleted from our systems (see Account deletion). Certain records may be retained for a limited period where required by law (for example, payment records held by our payment provider).
7. Your rights
Under the GDPR and comparable laws, you have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — correct inaccurate or incomplete data.
- Erasure — request deletion of your data (see below).
- Portability — receive your data in a structured, machine-readable format.
- Objection and restriction — object to or restrict certain processing.
To exercise any of these rights, email us at support@samlarecept.se. You also have the right to lodge a complaint with your local data protection authority.
8. How to request deletion
You can delete your account and all associated data at any time — including after uninstalling the mobile app — from our Account deletion page. We will send a confirmation link to your email; opening it permanently deletes your data.
9. Contact
Questions about this policy or your data? Contact us at support@samlarecept.se.