ollyolly · Privacy
Privacy Policy
This policy explains what personal data Buzl Studio collects when you use olly on iOS or Android, why, who helps us process it, and the rights you have over it.
At a glance
- We use your data to run olly — never to sell it or to show you ads.
- Your account data is stored in the EU, in Frankfurt, Germany.
- You can delete your account and everything in it from the app, at any time.
- Guest accounts delete themselves 7 days after they are created.
01Who is responsible
Buzl Studio is the controller of your personal data. Buzl Studio is established in the Netherlands and registered with the Netherlands Chamber of Commerce (KVK) under number 42078842.
Contact: support@buzlstudio.com.
02What we collect, why, and on what basis
| Data | What it is | Why we use it | Legal basis |
|---|---|---|---|
| Account | Email address, display name and username. If you sign in with Apple or Google, the name and email they share with us. A guest account has no email, only an anonymous identifier. | To create, secure and run your account. | Contract (Art. 6(1)(b) GDPR) |
| Your content | Recipes, notes, cookbooks, tags, menus, meal plans and shopping lists, including any amount you choose to record for a shop. | To provide olly’s features and keep your content in sync. | Contract |
| Photos | Recipe photos you take or choose from your photo library. | To read a recipe from them and show them as recipe images. | Contract |
| Imported links | The address of a post or video you share with olly, and the caption, audio and images needed to read a recipe from it. | To turn the post into a recipe. | Contract |
| Preferences | Language, country (from your device’s region setting), currency and notification settings. | To show olly in your language and format amounts correctly. | Contract |
| Onboarding answers | Age range, cooking goals, usual cooking time, where you save recipes from, and how you heard about olly. | To tailor the app to you and learn which channels bring people to olly. | Legitimate interest (Art. 6(1)(f)) |
| Subscription | Your plan, its status and purchase history. Payment details stay with Apple or Google; we never see them. | To unlock Pro and apply its limits. | Contract |
| Push token | An address for your device, created only if you allow notifications. | To tell you when a recipe is ready, about shared lists and about your account. | Consent (Art. 6(1)(a)) — turn notifications off at any time |
| Ad attribution (iOS only) | If you installed olly after tapping an Apple Search Ads ad: the campaign, ad group and keyword that led to the install, as reported by Apple. | To measure which of our ads work. | Legitimate interest |
| Support messages | What you send us and our replies. | To help you. | Contract or legitimate interest |
Apple provides ad attribution through its AdServices framework. It tells us which of our own ads led to an install; it does not track you across other companies’ apps or websites.
03Shared lists
When you share a shopping list, everyone on it can see its items and who added them, your display name and avatar, and the shops completed on that list — including who completed each shop and any amount recorded. Leaving a list, or being removed from it, ends that access.
04Who processes data for us
We use the service providers below. They process data on our behalf and only on our instructions; Apple and Google also act as independent providers of their own services under their own privacy policies.
- Supabase — hosting, database, sign-in and file storage, on servers in Frankfurt, Germany.
- OpenAI (USA) — reading recipes from captions, transcripts and images, and transcribing audio.
- Groq (USA) — transcribing the audio of imported videos.
- Apify and TikWM — fetching the public content behind links you import. They receive the link, not your account details.
- RevenueCat (USA) — managing subscriptions and purchase receipts.
- Apple — Sign in with Apple, App Store payments, notifications on iOS and Apple Search Ads attribution.
- Google — Sign in with Google, Google Play payments, and Firebase Cloud Messaging for notifications on Android.
- Vercel (USA) — hosting this website and the pages behind links you share from olly.
05Transfers outside the EU
Your account data is stored in the EU. Some of the providers above are based in the United States. Where data goes there, the transfer relies on the EU–US Data Privacy Framework for providers certified under it, or on the European Commission’s Standard Contractual Clauses.
06How long we keep data
- For as long as your account exists.
- When you delete your account, your data is deleted immediately and permanently — see Delete your account.
- Guest accounts are deleted automatically 7 days after they are created, unless you turn them into a full account first.
- Shopping records are deleted automatically after 12 months.
- Apple, Google and RevenueCat keep purchase records under their own retention rules, for example for tax purposes.
07Your rights
Under the GDPR you can ask to access your data and get a copy of it, correct it, delete it, restrict it or object to how we use it — including any use based on our legitimate interests — and receive it in a portable format. Where we rely on your consent, such as for notifications, you can withdraw it at any time; this does not affect what happened before.
You can delete your account and edit most of your data in the app. For anything else, email support@buzlstudio.com. We reply within one month, and may ask you to send the request from the email address on your account so we know it is yours.
You also have the right to complain to a data protection authority: in the Netherlands the Autoriteit Persoonsgegevens, or the authority in the country where you live.
08Security
Data is encrypted in transit (TLS). Access is restricted per account at the database level, so no user can read another’s data unless it is shared with them. Passwords are handled by our sign-in provider and never stored in readable form.
09No ads, no selling, no tracking
olly shows no ads. We do not sell or rent personal data, do not share it with advertisers or data brokers, do not use third-party analytics, and do not track you across other companies’ apps or websites. We make no decisions about you based solely on automated processing that have legal or similarly significant effects.
10This website
buzlstudio.com sets no cookies and uses no analytics, and its fonts are served from our own host. Vercel processes technical data such as your IP address to deliver the site and protect it from abuse.
11Children
olly is not directed at children under 13, and we do not knowingly collect their data. If you are under 16, please use olly with the consent of a parent or guardian. If you believe a child has given us personal data, contact us and we will delete it.
12Changes to this policy
If we change this policy we will update the date at the top, and tell you in the app before any significant change takes effect.
13Contact
Questions or requests about your data: support@buzlstudio.com.