Basilo
Privacy Policy
Last updated: 7 November 2026. This is a translation; the German version prevails.
This policy applies to the Basilo app (iOS) and the website basiloapp.com. Basilo shows no ads, does not measure usage (no analytics tools, no tracking), sets no cookies and sells no data. Your data is not sent to any artificial intelligence.
1. Controller
Rami Rouatbi, Periplus, Albanstr. 11, 12277 Berlin, Germany
Email: contact@basiloapp.com, phone: +49 152 15316113
2. What data we process and why
2.1 Account (Sign in with Apple or Google)
To sign you in, Apple or Google gives us a user identifier, your email address and, if you allow it, your first name (with Apple only at the first sign-in). With Apple you can hide your email address; we then receive a relay address. We use this data to provide your account and to keep your data in sync between your devices. Legal basis: Art. 6(1)(b) GDPR (contract).
2.2 What you enter in the app
Country, language, supermarket, household size, cooking days, budget, preferred styles, foods you dislike, kitchen appliances, your weekly plans, shopping lists (including items you add yourself), dishes cooked, ratings and favourites. We use them to create your weekly plan, your shopping list and suitable recipes. Legal basis: Art. 6(1)(b) GDPR.
2.3 Allergies and diet
If you enter them, we store your allergies and intolerances and your diet (for example vegetarian). This is voluntary; you can change or remove it at any time in Settings. We use it only to leave out recipes you cannot or do not want to eat. It is not shared with third parties, except our database provider (section 3).
2.4 Subscription
You buy the subscription through Apple's App Store; Apple handles the payment. We receive no payment details. Through our service provider RevenueCat we learn which subscription you have, from when to when it is valid, whether a trial is running, and the identifiers of the purchases; they are linked to your account identifier. Legal basis: Art. 6(1)(b) GDPR.
2.5 Error reports
If the app crashes or an error occurs, it sends an error report to Sentry: device model, operating system, app version, time and the technical trace of the error. Your name and email address are not sent. Purpose: finding and fixing errors. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a working app).
2.6 Recipes and photos
The app downloads the recipe catalogue and the photos from our database provider and stores them on your device, so that Basilo also works offline. For technical reasons your IP address is processed. Legal basis: Art. 6(1)(b) and (f) GDPR.
2.7 Website
When you visit basiloapp.com, our hosting provider Netlify processes technically necessary data (IP address, time, page visited, browser) in server logs. The website sets no cookies and loads no content from other servers. Legal basis: Art. 6(1)(f) GDPR (secure operation of the website).
2.8 Contact by email
If you write to us, we process your message and your email address to answer you. Legal basis: Art. 6(1)(b) or (f) GDPR.
3. Recipients
We use the following service providers. Contracts under Art. 28 GDPR are in place with the processors.
| Provider | Purpose | Location |
|---|---|---|
| Supabase Inc. | Database, sign-in, storage of recipes and photos (processor) | Data centre in Frankfurt am Main (EU) |
| RevenueCat Inc. | Subscription management (processor) | USA |
| Functional Software Inc. (Sentry) | Error reports (processor) | EU data centre (Germany) |
| Netlify, Inc. | Website hosting (processor) | USA |
| Apple Inc. / Apple Distribution International Ltd. | Sign in with Apple, sale of subscriptions (own responsibility) | Ireland / USA |
| Google Ireland Ltd. / Google LLC | Sign in with Google (own responsibility) | Ireland / USA |
Where data is transferred to the USA, this is based on the EU-US Data Privacy Framework if the provider is certified under it, otherwise on the European Commission's standard contractual clauses (Art. 46 GDPR). The privacy policies of Apple and Google also apply to signing in and purchasing.
4. Storage period and deletion
- We keep your account and app data as long as your account exists.
- With "Delete account" (Account → Delete account) you delete your account yourself. All your data in our database is deleted, as are your customer data at RevenueCat and, if you signed in with Apple, the link to your Apple ID. A running Apple subscription is not cancelled by this.
- Where our database provider makes backups, they are overwritten after 7 days at the latest.
- Error reports are deleted after 90 days.
- The website's server logs are deleted automatically by the hosting provider after a short time.
- Data stored on your device is removed when you delete the app.
- Statutory retention obligations remain unaffected.
5. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). Write to us at contact@basiloapp.com.
You can also lodge a complaint with a data protection supervisory authority, for example the Berlin Commissioner for Data Protection and Freedom of Information.
6. Further information
- Basilo is intended for people aged 16 and over.
- We make no automated decisions with legal or similarly significant effects (Art. 22 GDPR). The recipes of your weekly plan are chosen automatically from what you entered.
- Providing your data is required to use the app, unless described above as voluntary.
- We update this policy when the app or the law changes. The version published here applies.