Privacy Policy

Data controller

The controller of personal data processed in the Bananarium app is PyHek Robert Torbiczuk, conducting business at: ul. Zbigniewa Romaszewskiego 4 lok. 3, 01-892 Warsaw, Poland, NIP: 1182267286, REGON: 526058423.

Contact for personal-data and privacy matters: kontakt@bananarium.app.

Data we process

We process account data (email address, Google or Apple account identifier, and optionally the first and last name provided during sign-in), BananaCoin balance, transaction, import and independent Thermomix® appliance adaptation history, referral code and history, and technical information required to operate and secure the service.

We store account-related content on our servers: saved and edited recipes, their independent Thermomix® appliance adaptations, notes and tags, collections, shopping lists, meal plans, pasted text, source links and content retrieved from those sources. Manually added photos are stored temporarily for the import; the highest-ranked photo may be saved with the recipe as its cover. Recipe notes are synchronised with the backend and are not stored only locally on the device.

When importing from a link, we may retrieve the description, metadata and publicly available comments and, for YouTube, a transcript or captions made available by the service. If the available text is insufficient to identify the recipe, we may also analyse source images, including TikTok photo slides, and selected frames extracted from temporarily downloaded Instagram, TikTok or Facebook videos. You may also manually provide one to five photos with optional text. AI analysis may read text visible in images, identify ingredients and preparation steps, and rank the photos for use as a cover. The highest-ranked photo is automatically saved as the cover, which you can later change or remove.

How we use data

We use data to import, create covers for and save recipes; automatically translate recipe views; prepare independent Thermomix® appliance instruction adaptations and links opened in Cookidoo®; synchronise notes and edits; manage collections, shopping lists and meal plans; operate BananaCoin balances; account for purchases and referral rewards; diagnose errors; and contact users.

On the public website, we store only a limited acquisition taxonomy: source, medium, campaign, button position, language version, event type and the time of a visit or App Store click. We do not store an IP address, user agent, full referrer, cookie, device fingerprint or account identifier for this measurement, and we do not link these events to a specific user. On the referral page, we additionally store an anonymous random browser identifier for up to 30 days to count a visit and App Store click once; we do not store an IP address or device fingerprint for that purpose either.

The legal bases for processing are performance of the service, accounting obligations and our legitimate interest in maintaining the app's security and quality.

Data sharing

Data may be processed by providers of infrastructure, hosting and file storage, authentication, payments, app stores and technical services, solely to the extent required to operate Bananarium.

To import a recipe, we provide relevant source content to OpenAI, L.L.C., for AI processing. This may include pasted or retrieved text, descriptions, public comments, available transcripts and source links, as well as source images, photo slides or selected video frames when needed to identify or reconstruct the recipe. If the source text is insufficient, AI may also search related public web sources to locate the recipe. To prepare an independent Thermomix® appliance instruction adaptation, we provide the relevant recipe content to OpenAI for processing. Automatic recipe-view translation is performed on the device by Google ML Kit; the input text and translation output are not sent to Google or Bananarium. ML Kit may contact Google to download or update a language model and to provide performance and usage metrics. Bananarium does not store the translated view as a separate recipe version.

When a paid adaptation is started, Bananarium prepares an independent recipe adaptation. To create a link opened in Cookidoo®, the following may be sent to a platform operated by a Vorwerk Group entity: recipe title, ingredient list, preparation instructions, proposed times, temperatures and speeds, and the recipe image if available. This transfer takes place after the adaptation is prepared, solely to provide the function chosen by the user, as performance of the contract for that service. Anyone who has the completed link may be able to access it.

Content sent to Cookidoo® is stored in accordance with that platform operator's rules and technical capabilities. Deleting a Bananarium account also starts the process of deleting related publications created by Bananarium, to the extent supported by Cookidoo®. You may request their earlier deletion at kontakt@bananarium.app and provide information that identifies the publication.

Thermomix® and Cookidoo® are trademarks of Vorwerk Group entities. Bananarium is an independent app and is not affiliated with, sponsored or endorsed by Vorwerk.

Some providers (including OpenAI, Apple and Google), and the Cookidoo® operator where required by its infrastructure, may process data outside the European Economic Area. Transfers outside the EEA use GDPR safeguards such as a European Commission adequacy decision (including the EU-U.S. Data Privacy Framework) or standard contractual clauses.

We do not sell personal data or use it for third-party advertising profiles.

Retention and your rights

We retain account data and content (including recipes, independent Thermomix® appliance adaptations, notes, collections, shopping lists, meal plans and import and adaptation history) until the user deletes it or deletes the account. After account deletion, personal data is erased or anonymised, except purchase accounting data, which is retained for the period required by tax and accounting law (generally five years from the end of the year in which the purchase was made).

You may request access to, correction or erasure of data, restriction of processing and data portability; object to processing; and withdraw consent without affecting processing lawfulness before withdrawal. We handle requests sent to kontakt@bananarium.app within 30 days. You may also delete the account in the app (Settings → Delete account).

You have the right to complain to the supervisory authority — the President of the Polish Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland).

Bananarium removes video and image files downloaded temporarily for AI extraction when extraction finishes, including when it fails. After analysing manually provided photos, we immediately delete every copy except the highest-ranked cover candidate. We delete that last temporary copy after saving the cover; the cover itself remains account content until you change it, delete the recipe or delete the account. If analysis, recipe saving or cover saving fails, we remove the remaining copies. If there are no BananaCoins, the backend does not accept the photos for storage; they remain only in the private on-device draft until resubmission, draft deletion, sign-out or an account change. This does not determine how long OpenAI retains data already sent to its service.

Security and changes

We use technical and organisational measures to reduce the risk of unauthorised data access.

This policy may be updated as the app develops. The current version is available in the app menu.