Lardon is a family cookbook app. This policy explains what we collect when you use the Lardon app and this website, why we collect it, who can see it and what you can do about it.
The short version
- We collect only what Lardon needs to work: your account, your recipes and photos.
- We don't sell your data, show ads, use analytics or track you across apps and websites.
- Only you and the families you join can see your recipes.
- You can delete your account and data from the app at any time.
1. Who we are
Lardon is made and run by Massimo Meert, registered as a business in Belgium ("we", "us"). We decide how your personal data is used, which makes us its controller under the EU General Data Protection Regulation (GDPR). You can reach us at info@lardon.app.
2. What we collect
What you give us
- Account details: your email address, your name and, if you add one, a profile photo.
- Your recipes: the recipes, photos and meal plans you add, and the families you create or join, including who is in them and their role.
- Messages to us: if you email us, we keep your message and our reply so we can help you.
We need your email address to create your account, since that's how you sign in: without it, you can't use Lardon. Your name, photo and everything else you add are up to you.
What we receive when you sign in
- Email codes: when you sign in with your email, we send you a one-time code. We store it hashed, so we can't read it, and it expires after 5 minutes.
- Apple or Google: if you choose to sign in with Apple or Google, they send us an identifier for your account, your email address and, if you allow it, your name and profile picture. If you use Apple's "Hide My Email", we only receive the relay address Apple gives us.
- Sessions: to keep you signed in, we store a session along with the IP address and device type it was created from.
What we collect automatically
- Server logs: when the app talks to our servers, we log technical details of the request, such as the address requested, the time, whether it succeeded and your IP address. We use them to keep Lardon running, fix problems and stop abuse.
Permissions on your phone
Lardon asks for access to your photos only when you choose one to add, and only uploads the photo you pick. You can turn this permission off at any time in your phone's settings.
3. What we don't collect
- No analytics, advertising or tracking tools, in the app or on this website.
- No cookies on this website.
- No location, contacts or other data from your phone beyond the photos you pick.
- No passwords: you sign in with an email code, Apple or Google.
- No payment details: Lardon is free and has no purchases.
4. How we use it
We only use your data for the purposes below. The GDPR requires a legal reason for each one, which we list in brackets.
- To create your account, sign you in and send you sign-in codes (to provide the service you asked for).
- To store your recipes, keep them in sync across your devices and share them with the families you choose (to provide the service you asked for).
- To keep Lardon secure, limit abuse and fix problems (our legitimate interest in running a safe and reliable service).
- To answer your messages (our legitimate interest in helping you).
- To meet our legal obligations, such as answering a valid request from authorities (legal obligation).
We don't use your data for marketing, profiling or automated decisions, and we don't use your recipes or photos to train AI models. Lardon only emails you about your account, such as sign-in codes. Since we don't rely on your consent for any of this, there's no consent to withdraw, but you can object to how we use your data (see your rights).
5. Who can see it
We don't sell, rent or trade your personal data. It's only seen by:
- Your families: members of a family can see the family's name, its members' names, profile photos and roles, and the recipes and photos shared with it. Recipes you keep in your own collection are visible only to you.
- Cloudflare: hosts our servers, database and photos, and sends our emails. It processes your data only on our instructions and under a data processing agreement.
- mailbox.org: hosts our inbox, so it stores the emails you send us. It processes them only on our instructions and under a data processing agreement.
- Apple and Google: only if you choose to sign in with them. They handle that sign-in under their own privacy policies.
- Authorities: only if the law requires it, for example a valid court order.
6. Where it's stored
Your account, recipes and photos are stored with Cloudflare in data centres in the European Union. Emails you send us are stored with mailbox.org in Germany.
To keep Lardon fast, Cloudflare handles each request in the data centre closest to you, which can be outside the European Economic Area, for example when you travel. Cloudflare's systems for sending emails and keeping server logs can also run outside it, including in the United States. Transfers to the United States are covered by the European Commission's adequacy decision for the EU-US Data Privacy Framework, under which Cloudflare is certified. Transfers to other countries are covered by the Commission's Standard Contractual Clauses. Both are part of Cloudflare's data processing agreement, and Cloudflare lists the companies it works with.
7. How long we keep it
| Data | How long |
|---|---|
| Account details | Until you delete your account |
| Recipes and photos | Until you delete them, or the cookbook they're in is deleted (see below) |
| Sessions | Until you sign out, or 7 days after you last use Lardon |
| Server logs | 7 days at most |
| Emails with us | 12 months after our last message |
| Backups | 30 days |
When you delete a recipe, we erase its content and photos from our servers within seconds of the deletion reaching us, which is right away when you're online. Deleted recipes can't be restored, and Lardon on your other phones removes them the next time they sync. For a recipe you keep, its history holds earlier versions of the text, including ingredients and steps you removed, so your devices stay in sync; they're erased with the recipe. Photos you replace or remove are deleted as soon as the change reaches us. Recipes are also erased when their cookbook is deleted: your own cookbook when you delete your account, a family's when the family is deleted.
When you delete your account, we immediately delete your account details, sessions, your own cookbook and your photos, and you leave your families. Recipes you shared with a family stay with that family so its other members don't lose them. If you were the last member of a family, the family and its recipes are deleted too. Deleted data disappears from our backups within 30 days.
8. Security
All data travels between the app and our servers over encrypted connections. Sign-in codes are stored hashed, your session is kept in your phone's secure storage, and sign-in attempts are rate-limited to block guessing. Each request is checked so that you can only reach your own data and your families' recipes. Lardon's source code is public, so anyone can check how it handles your data.
No service can be perfectly secure. If a breach puts your data at risk, we'll tell you and the data protection authority without undue delay, as the law requires.
9. Your rights and choices
Wherever you live, you can:
- Access your data and get a copy of it.
- Correct it if it's wrong.
- Delete it, along with your account.
- Move it to another service: we'll send it to you as a JSON file.
- Limit how we use it, for example while we check a correction.
You can also object at any time to the uses we base on our legitimate interests, such as server logs and security checks. We'll stop unless we have compelling reasons that override yours, such as stopping abuse.
You can change your name and photo in the app's settings, and delete your account under Settings, then Delete account. For anything else, email info@lardon.app from the address of your account. We may ask you to confirm it's you, and we'll reply within one month. We haven't appointed a data protection officer, since the law doesn't require one for Lardon: you deal with us directly.
If you're unhappy with how we handled your request, you can complain to the Belgian Data Protection Authority (Rue de la Presse 35, 1000 Brussels) or the data protection authority where you live.
If you live in California or another US state with a privacy law: we don't sell or share your personal information for advertising, and you have the rights above. We won't treat you differently for using them.
10. Children
You must be at least 13 to have a Lardon account, and we don't knowingly collect data from younger children. If you think a child under 13 has given us their data, email us and we'll delete it.
11. Changes to this policy
If we change this policy, we'll update the date at the top. For important changes, we'll let you know by email and in the app before they apply.
12. Contact
Massimo Meert, Rue de la Station 13, 6181 Courcelles, Belgium. Enterprise and VAT number BE 0785.590.429. Questions about privacy: info@lardon.app.