Privacy Policy

1. Who We Are

Damson Kitchen ("Damson Kitchen", "we", "us", or "our") is a recipe application built and operated by an independent individual developer based in the United Kingdom, trading as Damson Kitchen. There is no company behind it. The data controller for the limited purposes described below is that individual, contactable at hello@damsonkitchen.com.

This Privacy Policy explains how we collect, use, share, and protect personal data when you use the Damson Kitchen mobile application and associated website (together, the "Service"). It applies to users in all jurisdictions in which we operate, with additional provisions for users in the United Kingdom and the United States.

If you have questions about this policy or our data practices, contact us at hello@damsonkitchen.com.

2. Data We Collect

2.1 Content Data — We Don't Collect It

There are no accounts in Damson Kitchen, and we do not collect or store the recipes, collections, notes, or photos you create in the app. All of that content lives exclusively in local storage on your own device. Where a recipe is imported from an external URL, the source URL is saved as part of the recipe record — again, only on your device.

Damson Kitchen includes an optional Export feature that lets you bundle your recipes and photos into a single file for backup or moving to a new device. That file is created entirely on your device and handed to the sharing method you choose (e.g. AirDrop, email, a cloud drive). We do not receive, transmit, or store that file — it never touches our infrastructure, because we don't have any that your content passes through.

2.2 Usage Data

The Damson Kitchen mobile app does not currently include any analytics or crash-reporting SDK, so it does not transmit device identifiers, location, session data, or usage statistics to us. Our website (damsonkitchen.com) uses Google Analytics 4 for basic visitor analytics — see Section 9 (Cookies) for details.

2.3 Communications

If you contact us by email, we retain that correspondence and any personal data you include in it, for as long as reasonably necessary to respond to and keep a record of the conversation.

2.4 Data We Do Not Collect

We do not collect payment card details, account credentials (there are no accounts), precise GPS location, device identifiers, or the contents of your device's photo library beyond photos you explicitly choose to attach to a recipe — and even those never leave your device except via your own Export action.

3. How We Use Your Data

Because we don't collect app content or usage data, there is very little for us to "use." What little we do handle is limited to:

• Customer support — responding to questions or issues you raise with us by email.
• Website analytics — understanding, in aggregate, how visitors use damsonkitchen.com (via Google Analytics 4, with your cookie consent) to improve the site.
• Legal and policy notices — posting updates to this Privacy Policy or our Terms of Service on this website and within the app.

We do not send marketing emails, and we have no mechanism to do so since we don't collect email addresses except when you choose to email us.

4. Legal Basis for Processing (UK & EEA Users)

Where the UK GDPR applies, we rely on the following lawful bases for the limited processing described above:

5. How We Store Your Data

We don't. Damson Kitchen has no backend database, no user-content servers, and no cloud storage of any kind for recipes, collections, notes, or photos. All of that data is stored exclusively in the app's local storage on your device, protected by your device's own operating-system sandboxing and security features — the same way any other app's private data is protected on your phone.

The only server infrastructure involved in the Service at all is this static website, which has no database and stores nothing you submit through the app.

6. Data Sharing

We do not sell, rent, or trade your personal data, and — because we don't hold your app content in the first place — there is essentially nothing of yours for us to share. The limited exceptions are:

• Service providers: Google Analytics processes website visitor data on our behalf, under Google's standard terms (see Section 9).
• Legal obligations: We may disclose the limited data we do hold (e.g. support correspondence) if required by law, court order, or governmental authority in the United States or United Kingdom.
• Business transfer: If Damson Kitchen is acquired, merged, or transferred to another entity, any data we hold (e.g. support correspondence, website analytics) may be transferred as part of that transaction. Your recipe data is unaffected, since it never leaves your device.

Your Export file, if you create one, is shared only with whatever destination you personally choose when you use it — we are never a party to that transfer.

7. Data Retention

There is no account or server-side content to retain. Your recipes, collections, notes, and photos remain on your device for as long as you keep the app installed, and are removed when you delete them in-app or uninstall the app. We retain support-email correspondence for as long as reasonably necessary to handle and keep a record of the matter, and website analytics data per Google Analytics' standard retention settings.

8. Your Rights

Most data-protection rights (access, correction, deletion, portability) exist to let you control personal data that a company holds about you. Because Damson Kitchen does not hold your recipes, collections, notes, or photos anywhere — they exist only in the app's storage on your own device — those rights are already satisfied by design: you can view, edit, export, or delete that content directly in the app at any time, with nothing for us to look up, correct, or return to you.

The rights below apply to the small amount of data we do hold — primarily support-email correspondence and website analytics.

8.1 UK Users (UK GDPR)

If you are based in the United Kingdom, you have the following rights over any personal data we hold:

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — ask us to correct inaccurate or incomplete data.
• Right to erasure ("right to be forgotten") — request deletion of your personal data, subject to certain exceptions.
• Right to restriction — ask us to pause processing of your data in certain circumstances.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interests, including profiling.
• Rights related to automated decision-making — we do not make solely automated decisions that have a significant legal or similar effect on you.

To exercise these rights, email us at hello@damsonkitchen.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk .

8.2 California Users (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) grants you additional rights over any personal information we hold:

• Right to know — request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to delete — request deletion of your personal information, subject to certain exceptions.
• Right to correct — request correction of inaccurate personal information.
• Right to opt out of sale or sharing — we do not sell or share personal information for cross-context behavioral advertising. No opt-out is required, but you may contact us to confirm this.
• Right to non-discrimination — we will not discriminate against you for exercising your privacy rights.

To submit a CCPA request, contact us at hello@damsonkitchen.com. We will verify your identity before processing your request.

8.3 All Other Users

Regardless of your location, your recipes and content are always accessible, editable, and deletable directly within the app — there is no account to manage. For anything else, email hello@damsonkitchen.com.

9. Cookies and Tracking Technologies

The Damson Kitchen mobile app does not use browser cookies. Our website uses a small number of cookies:

• Essential cookies — necessary for the website to function (e.g., session management). These cannot be disabled.
• Analytics cookies — we use Google Analytics 4 (Google LLC) to understand how visitors use our website. This sets cookies (including _ga and _ga_*) that collect anonymized usage data, which is processed by Google on servers in the United States. These cookies are only set after you give consent via the banner shown on your first visit. Google's privacy policy is available at policies.google.com/privacy.

You can withdraw analytics consent at any time by clearing your browser's local storage or cookies, or by using your browser's built-in cookie controls. Your preference is stored locally in your browser and remembered for future visits.

10. Children's Privacy

The Service is not directed at children. We do not knowingly collect personal data from:

• Children under 13 (consistent with COPPA requirements applicable in the United States).
• Children under 13 in the United Kingdom (consistent with the UK Children's Code / Age Appropriate Design Code).

If we become aware that we have inadvertently collected data from a child below the applicable age, we will delete it promptly. Parents or guardians who believe a child has provided us personal data should contact us at hello@damsonkitchen.com.

11. Data Security

Your recipe content is protected primarily by your device's own operating-system security — the same sandboxing that protects any other app's private data on your phone. Where the app does make network requests (for example, fetching a webpage you're importing a recipe from), these use TLS 1.2 or higher. Our website uses TLS for all connections, and any support correspondence we hold is subject to reasonable access controls.

No method of electronic transmission or storage is 100% secure. Since we hold no server-side database of user content, the practical scope of any potential breach on our end is limited to correspondence and website analytics data.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will post a notice on this website and within the app at least 14 days before the changes take effect. The updated "Last updated" date at the top of this page will always reflect the most recent revision. Continued use of the Service after changes take effect constitutes your acceptance of the revised policy.

13. Contact Us

For privacy-related questions, requests, or complaints:

UK users may also contact the Information Commissioner's Office: ico.org.uk