Ciapp privacy policy

Controller and contact

The controller of personal data processed in the Ciapp app is Mikołaj Migut, who runs Feature Creep Studio (Poland). For privacy, data access or account deletion requests, email [email protected].

Without and with an account

Ciapp works without an account. Then your bakes, notes, photos and settings stay on your device and are not sent to our server. An account is optional: once you sign in, this data is synced to the Ciapp server so you can use it on your other devices.

What data we process

Content in the app: chosen recipes and variations, baking progress (steps, check answers, timers, conscious skips), attempt history with results and self-assessments, notes, photos you pick from your library, your kitchen profile (equipment and pans), saved recipes, the chosen learning path, the preparation draft and the progress of an active bake.

Account: account identifier, email address, your sign-in methods and the information needed for secure sign-in and account recovery. When you buy Premium, Apple gives us the transaction identifier, product, period and subscription status, but not your card details or billing address.

Technical data: IP address, device type and app version, information about requests, errors and sync. We use it to run and secure the service.

Purposes and legal bases

The account, sync, linking a purchase to your account and the news notification (for accounts that turn it on) are necessary for performance of a contract (Article 6(1)(b) GDPR). Security, abuse prevention, necessary diagnostics and the protection of legal claims rely on our legitimate interests (Article 6(1)(f)).

“Help improve Ciapp” is off by default. When you turn it on we send only daily event counts (for example started and finished bakes, help opened) without an account or device identifier, based on consent (Article 6(1)(a)). This also applies without an account. You can withdraw consent in the app settings.

Sign-in and notifications

You can sign in with Apple, Google, a passkey, or an email with a password or a one-time code sent by email. With Apple or Google we receive an identifier and the shared email address, never your password for that provider. Passkeys do not share your face or fingerprint with us.

Timers and plan reminders run locally on your device. The news notification (at most one a week) is sent only to accounts that turn it on; for that we need the device’s notification token and your time zone.

Recipients and transfers outside the EEA

To the extent needed to run Ciapp, data is received by our server and backup provider, Mailtrap (sign-in code emails), Apple (sign-in, App Store, purchases and push notifications) and Google (sign-in). People authorised to maintain the service and public authorities, where the law requires it, may also receive data.

Some providers may process data outside the European Economic Area, including in the USA, based on an adequacy decision or standard contractual clauses. We will share the safeguards for a specific provider on request.

Retention and deletion

Data on your device stays until you delete it in the app. Account data and synced content are kept until you delete the content or the account, unless the law or the protection of legal claims requires longer retention.

You can delete your account in the app (My settings → Data → Delete account). Deletion covers all devices, synced history, photos, notes and purchase links; data on your device is removed after confirmation. If the account uses Sign in with Apple, we ask you to confirm with Apple so Ciapp is disconnected from your Apple ID. Deleting the account does not cancel a subscription — do that in App Store settings.

Server backups are made daily and overwritten in rotation; deleted data disappears from them after about 10 days at most.

Security

We use encrypted connections, access control and encrypted backups. Sync is not end-to-end encrypted, so the server can access synced content. Protect your device, and sign out of the app on shared devices.

Your rights

Within the limits of the GDPR you can request access, correction, deletion, restriction and portability of your data, object to processing based on legitimate interests and withdraw consent. You can also lodge a complaint with the Polish data protection authority (Prezes UODO) or the authority in your country.

Send requests to [email protected]. We may ask for information needed to confirm your identity. We reply within one month.

Changes to this policy

The date at the top shows the current version. We will tell you in the app before a significant change to how we process data takes effect.