Privacy policy

Who is responsible

The person responsible for this website and for GrannyBakes AI under the EU General Data Protection Regulation (GDPR) is:

Granny Bakes AI
Calea Unirii 2/4
Durlesti, Moldova
Email: sergiu@grannybakes.ai

What the website processes

Feedback messages

When you send the feedback form (or the app sends feedback for you), the website emails your message, the type of note, the versions you entered and, only if you gave it, your email address to the developer's mailbox. Nothing is stored on the website itself. The mail is kept in the mailbox for as long as it's needed to answer you and to plan what to build next; ask and it's deleted. Legal basis: our legitimate interest in reading and answering what you send (Art. 6(1)(f) GDPR).

Protection against spam

To stop automated spam, the website remembers the IP address of anyone who sends a form for up to one hour, in memory only. It is never written to disk and disappears when the hour is over or the website restarts. A hidden field and a timing check also catch robots; they store nothing.

Visit counts

The website counts page views per day, page and referring website (only its domain, such as google.com), plus clicks on the download button and views of the pricing page. It stores no IP address, no browser details, no cookie and no full link you came from, so nobody can be identified from these numbers. The daily counts are kept for 400 days and summed up in a weekly mail to the developer.

Cookies

Pages with a form use one strictly necessary security cookie. See the cookie statement.

Server logs

The website itself only logs technical problems, without visitor details. Our hosting provider keeps the usual web server logs (such as IP address, time and requested page) to run and secure its servers, as described in its own privacy policy.

No third parties in your browser

Fonts, pictures and styles all come from this website. No analytics service, advertising network, social media button or video player is loaded.

What the app does

• Your data stays on your PC. Bakers, recipes, chats, Pantry files and what you spent are stored in %LOCALAPPDATA%\GrannyBakes. We never receive them.
• AI requests go directly from your PC to the AI provider you use (today OpenAI), with your own API key. The provider's own privacy policy applies to what you send it. Your key is encrypted with Windows and only ever sent to that provider.
• Updates and downloads come from GitHub. Like any website, GitHub sees the IP address of the PC that asks.
• Telegram: if you connect a Telegram bot, messages travel between your PC and Telegram's servers. We don't see them.

Feedback and reports from the app

When you press Send feedback (in the app's "?" menu or in Settings) or Send to the developer on a support report, the app sends the type of note, your message, your email address only if you typed one, the app and Windows versions and, only if you ticked it, the last 200 lines of today's log file. A support report also holds a short description of the problem and the log files of the last two days. Log files never contain your prompts, answers or keys: keys are masked, and file names in your Kitchen folder and your Windows user name are replaced before anything is sent. Show what will be sent shows the exact text first. The website emails it to the developer as described above and stores nothing. If your PC is offline, the app keeps the message in its own folder and sends it when you're back online.

Crash reports

After GrannyBakes closes unexpectedly, the next start asks whether to send a crash report: Always, Just this time or Never. You can change the answer in Settings → Help Granny. A crash report holds the kind of error, its technical description and where in the app it happened, the app and Windows versions and the last 50 lines of the log, with keys, Kitchen file names and your Windows user name masked. It never contains your prompts, answers, files or keys. It travels and is handled like feedback. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time in Settings.

Anonymous usage counts

Off unless you turn them on (on the welcome page or in Settings → Help Granny). When on, the app counts how often a few features are used, such as bakes, new bakers, Test Kitchen messages, Cookbook recipes, taste tests and Pantry files, and sends one batch a day with those numbers, the app version and the date. It sends no names, no content, no file names, no keys and no ID of you or your PC, and each batch is independent, so batches can't be linked. See what's sent in Settings shows the waiting batch. The website adds the numbers to its daily counts (kept for 400 days) and to the weekly mail to the developer. Turning them off deletes the counts that weren't sent yet. Legal basis: your consent (Art. 6(1)(a) GDPR).

Like every request, feedback, crash reports and usage counts reach the website from your IP address. It is used only for the one-hour spam protection above and is never stored with what you send.

Free trial and license

When paid licenses start, the app checks its free trial and license with this website. To tell PCs apart without knowing who you are, it sends two codes made from your PC's Windows installation ID and its hardware ID, scrambled one way (SHA-256) so the IDs themselves can't be read back, plus the app version. With a license it also sends your license key, or the signed note the website gave your PC earlier. The website stores those codes with the start and end date of your trial, or with your license, and the last time each PC checked in. It stores no IP address with them. This is how a trial can't be started twice on the same PC and a license works on its two PCs only. Legal basis: the contract with you, and our legitimate interest in a fair trial (Art. 6(1)(b) and (f) GDPR).

When you buy a license, the website stores your email address, the order (amount, date and payment reference), your confirmation that the license starts right away, and the license key in encrypted form. Your email is used to send the key, the receipt and nothing else. Your card details go only to the bank's payment page; we never see them. Order records are kept as long as tax law requires.

Who helps us

• SmarterASP.NET hosts this website and sends its mails, from a data centre in Europe.
• GitHub (GitHub, Inc.) hosts the installer and the app updates.

When paid licenses start, the bank that handles card payments (MAIB) will be added here before the first sale. The trial and license records are stored in a database at SmarterASP.NET, in the same European data centre as the website.

Your rights

You can ask to see, correct or delete the data we have about you (in practice: feedback mails), to limit or object to its use, and to receive it in a portable form. You can also complain to the data protection authority of your country. To use any of these rights, write to the contact above.

Changes

If what the website or the app does with data changes, this page changes first, with a new date at the top.