Privacy Policy
Last updated: 2026-02-23
App: Haustakt
This Privacy Policy explains how personal data is collected, used, stored, and shared when you use the Haustakt mobile and web application ("Haustakt", "we", "us", "our").
1. Data Controller
The data controller responsible for processing your personal data is:
Thomas Frei
Acting as an individual based in Switzerland
Operating the App under the name freiventures
Contact email: contact@freiventures.com
2. Scope
This Privacy Policy applies to:
- iOS, Android, and web app usage
- Account registration and authentication
- Household collaboration features
- Meal planning, shopping list, to-do list, calendar/event, and recipe features
- Recipe upload and image update
- AI-assisted recipe extraction features
3. Categories of Personal Data
3.1 Account and Profile Data
- Name
- Email address
- Authentication credentials (managed via Firebase Authentication)
- Language preference
- Account metadata (creation/update timestamps)
3.2 Household Collaboration Data
- Household name and settings
- Membership information
- Invite metadata (inviter, invitee, timestamp)
3.3 User-Generated Content
- Recipes and related metadata (ingredients, instructions, tags, nutrition values)
- Recipe images
- Images and PDFs submitted for AI-assisted recipe extraction
- Shopping lists, to-do lists, and event entries
3.4 Technical and Usage Data
- Basic diagnostics, logs, and error reports
- Security-related metadata
- Firebase-generated service metadata necessary for app functionality
Haustakt does not use advertising identifiers or third-party marketing tracking technologies.
4. Camera Access
Haustakt requests camera access solely for recipe-related functionality:
- Capturing photos of recipes (e.g., cookbooks or handwritten notes)
- Uploading images for AI-assisted extraction
- Updating recipe images
Camera access is never used for background monitoring or unrelated tracking.
5. Purposes and Legal Bases of Processing
Where the GDPR applies (EU/EEA users), processing is based on:
| Processing Activity | Legal Basis (Art. 6 GDPR) |
|---|---|
| Account creation and management | Art. 6(1)(b) – Performance of a contract |
| Household collaboration features | Art. 6(1)(b) – Performance of a contract |
| Recipe storage and synchronization | Art. 6(1)(b) – Performance of a contract |
| AI-assisted extraction | Art. 6(1)(b) – Performance of a contract |
| Security, diagnostics, fraud prevention | Art. 6(1)(f) – Legitimate interests |
| Device permissions (e.g., camera) | Consent |
Under Swiss law (revDSG), processing is carried out in accordance with statutory data protection principles.
6. AI Processing
When you use the AI-assisted recipe extraction feature:
- Uploaded images or PDFs are processed via a secure server-side function.
- Content is transmitted to OpenAI for structured recipe generation.
AI-generated output is probabilistic and may contain inaccuracies. Users are responsible for verifying extracted content.
No automated decision-making with legal or similarly significant effects is carried out.
7. Service Providers and Data Processors
We use third-party service providers acting as data processors under data processing agreements pursuant to Art. 28 GDPR:
- Google Firebase (Google Ireland Ltd / Google LLC) – Authentication, Firestore, Storage, Cloud Functions
- OpenAI OpCo, LLC (USA) – AI processing for recipe extraction
Data may be processed outside Switzerland or the EU/EEA. Where required, international transfers rely on:
- EU Standard Contractual Clauses (SCCs)
- Adequacy decisions (where applicable)
- Additional safeguards where legally required
8. Data Sharing
We do not sell personal data.
Data may be shared only:
- With contracted processors necessary to operate the service
- Where legally required by authorities
- In connection with lawful business restructuring (subject to safeguards)
9. Data Retention
Personal data is retained only as long as necessary to:
- Provide the service
- Fulfill contractual obligations
- Comply with legal requirements
- Resolve disputes and enforce agreements
User-generated content is generally retained until deletion by the user or account closure.
Backups and logs may persist for a limited technical period.
10. Your Rights
Depending on applicable law (GDPR / Swiss revDSG), you may have the right to:
- Access your personal data
- Rectify inaccurate data
- Request deletion
- Restrict processing
- Object to processing
- Data portability
- Withdraw consent (where applicable)
You may exercise these rights by contacting: contact@freiventures.com
If you reside in the EU/EEA, you also have the right to lodge a complaint with your competent supervisory authority.
In Switzerland, you may contact the Federal Data Protection and Information Commissioner (FDPIC).
11. Security
Appropriate technical and organizational measures are implemented to protect personal data, including authentication controls and secure backend configurations.
However, no method of transmission or storage can be guaranteed to be completely secure.
12. Children
Haustakt is not intended for individuals under 16 years of age. We do not knowingly collect personal data from children without appropriate authorization where required by law.
13. International Transfers
Due to the use of cloud infrastructure, personal data may be processed in countries outside your country of residence.
Where required, legally recognized safeguards such as Standard Contractual Clauses are implemented.
14. Changes to this Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via the app or other appropriate means.
15. Contact
For privacy-related inquiries: