Privacy Policy

Last updated: 1 September 2026

Controller

Christian Jakob Egli-Weitz, Kahlkamp 22, 22587 Hamburg, Germany. Contact: info@makesugo.com.

This website

makesugo.com is an informational site. No Google Analytics, no ad pixels, no tracking cookies. Language preference (German or English) is stored only locally in the browser. There are coarse first-party events (page view, App Store click) without cookies and without personal identifiers — only path, language, and platform.

What the app processes

Account: email address and a password hash, or Sign in with Apple. Recipes you save (title, ingredients, steps, times, optional photo, source URL, tags, rating). Optional notes stay private on your copy. Camera and photo library only when you submit a cookbook photo — text is read on-device (OCR); what goes to the server is the recognised text, not necessarily the photo. Share sheet: the URL or file you deliberately send to Sugo. Box invitations: an email or link you create.

Purposes

Contract performance (Art. 6(1)(b) GDPR): account, extraction, saving, cooking, shopping list, shared box. Legitimate interest (lit. f): abuse and fair-use protection. Consent (lit. a) for optional camera/library access, withdrawable in iOS Settings.

Processors

Hosting in Germany (Hetzner Online GmbH). Extraction via selected AI providers (currently OpenRouter, USA) — only the content you send for extraction (URL or OCR text). No sale of data. Public recipe links (makesugo.com/r/…) make that one recipe available without an account; you can revoke the link in the app.

Subscription and payment

Payments run through Apple In-App Purchase. Payment data sits with Apple, not with me.

Retention

Account and recipe data for as long as the account exists. After a deletion request or account closure, personal data is removed unless a legal retention duty applies.

Your rights

Access, rectification, erasure, restriction, portability, objection (Arts. 15–21 GDPR) and complaint to the HmbBfDI. Contact: info@makesugo.com.