DRAFT — pending legal review. This document is a working draft and has not yet been reviewed by legal counsel.

Privacy Policy

Last updated: 22 July 2026

This Privacy Policy explains how Samla ("Samla", "we", "us") collects, uses, shares and protects your personal data when you use the Samla recipe application and website (samlarecept.se). Samla is a recipe app that lets you save, organise, import, plan and shop for recipes, and share them within a household.

We act as the data controller for the personal data described here. If you have any questions, contact us at support@samlarecept.se.

1. Data we collect

We collect the following categories of personal data:

  • Account data — your email address and name, provided when you register or sign in (including via Google Sign-In).
  • Recipes and user content — recipes you create, import or edit, meal plans, shopping lists, and any notes or text you enter.
  • Uploaded photos — images you upload for recipes or to import recipes from a photo.
  • Import sources — URLs and images you submit so we can extract a recipe from them.
  • Household data — the household you own or belong to, and the email addresses used to send and accept invitations.
  • Usage metrics — counters such as the number of recipe imports you have performed in a period, used to enforce plan limits.
  • Subscription data — your subscription status and payment records, handled by our payment provider (see Processors below). We do not store your card details.

2. How we use your data (purposes)

  • To provide, operate and maintain the Samla app and your account.
  • To store and organise your recipes, meal plans and shopping lists, and to share them with the members of your household.
  • To extract recipes from URLs and photos you submit, using AI processing.
  • To process subscription payments and enforce plan limits.
  • To send transactional emails (sign-in, verification, invitations, account deletion, password reset).
  • To secure the service, prevent abuse and comply with legal obligations.

3. Legal bases (GDPR)

Where the GDPR applies, we rely on the following legal bases:

  • Performance of a contract — to provide the app and the features you request.
  • Legitimate interests — to secure the service and prevent abuse.
  • Consent — where required, for example when you submit content to be processed by AI.
  • Legal obligation — to retain records where the law requires it.

4. Processors and sub-processors

We share data with the following service providers who process it on our behalf, only as needed to deliver the service:

ProviderPurposeData shared
ConvexBackend and database hostingAccount data, recipes and all user content
MistralAI recipe extraction from URLs and imagesSubmitted URLs, page content and uploaded photos
PolarSubscription payments (merchant of record)Email, subscription and payment details
Better-AuthAuthentication and session managementAccount credentials and session data
UseSendTransactional email deliveryEmail address and message contents
GoogleGoogle Sign-In (optional login method)Email and name from your Google account

Some of these providers may process data outside the EU/EEA. Where that happens, appropriate safeguards (such as Standard Contractual Clauses) apply.

5. Data retention

We retain your account and content for as long as your account is active. When you delete your account, your account, recipes, meal plans, shopping lists, household and uploaded photos are permanently deleted from our systems (see Account deletion). Certain records may be retained for a limited period where required by law (for example, payment records held by our payment provider).

6. Your rights

Under the GDPR and comparable laws, you have the right to:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — correct inaccurate or incomplete data.
  • Erasure — request deletion of your data (see below).
  • Portability — receive your data in a structured, machine-readable format.
  • Objection and restriction — object to or restrict certain processing.

To exercise any of these rights, email us at support@samlarecept.se. You also have the right to lodge a complaint with your local data protection authority.

7. How to request deletion

You can delete your account and all associated data at any time — including after uninstalling the mobile app — from our Account deletion page. We will send a confirmation link to your email; opening it permanently deletes your data.

8. Contact

Questions about this policy or your data? Contact us at support@samlarecept.se.