This Privacy Policy describes our policies and procedures for collecting, using, and disclosing your information when you use the Service. It informs you about your privacy rights and how the law protects you.

We use your personal data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

Words with capitalized initial letters have defined meanings under the following conditions. The following definitions have the same meaning regardless of whether they appear in singular or plural.

Account: A unique account created for you to access our Service or parts of our Service.

Affiliate: An entity that controls, is controlled by, or is under common control with a party. Control means ownership of 50% or more of the voting shares or other securities.

Company: Refers to "the Company", "Rocely", "we", "us", or "our" in this agreement, and refers to Roland Peter Schilffarth.

Cookies: Small data entries stored on your device by a website to store information about you and your used services. We use various types of cookies, including Google's advertising cookies, to show you personalized advertisements and measure the effectiveness of our marketing campaigns.

Country: Refers to Germany.

Device: Any device that can access the Service, such as a computer, mobile phone, or tablet.

Personal Data: Information that relates to an identified or identifiable individual.

Service: Refers to Rocely and its provided services.

Service Provider: Natural or legal persons who process data on behalf of the Company. This refers to third-party companies or individuals employed by the Company to facilitate the Service, provide the Service on behalf of the Company, perform service-related services, or assist the Company in analyzing the use of the Service.

Third-Party Social Media Provider: Websites or social networks through which a user can log in or create an account to use the Service.

Usage Data: Automatically collected data, either generated through the use of the Service or from the Service infrastructure itself (e.g., the duration of a page visit).

Website: Refers to Rocely, accessible at https://www.rocely.com.

You: The individual using the Service, or the company or other legal entity on behalf of which the individual is accessing the Service.

While using our Service, we may ask you to provide us with certain personal data that can be used to contact or identify you. Personal data may include, but is not limited to:

Email address, first and last name, date of birth, phone number, address (country, state, postal code, city), billing address, VAT identification number.

Usage data is automatically collected when you use the Service. This may include information such as your IP address, browser type, browser version, the pages of our Service that you visit, the date and time of your visit, the time spent on those pages, unique device identifiers, and other diagnostic data.

When you access the Service through a mobile device, we may automatically collect certain information, including, but not limited to, the type of mobile device you use, your unique device ID, the IP address of your mobile device, your mobile operating system, and the mobile internet browser you use.

We may also collect information that your browser sends whenever you visit our Service or when you access the Service through a mobile device.

Information from third-party services; the Company allows you to create an account and log in to use the Service through the following third-party services:

Google, Meta (Facebook, Instagram, WhatsApp), Twitter, LinkedIn.

If you register through a third-party service or otherwise grant us access to it, we may collect personal data associated with your third-party service account, such as your name, email address, and activities or your contact list.

Depending on your location, individuals in the EU, UK, and worldwide may have certain legal rights regarding their personal data. For example, you have the right to:

Access your personal data and information about how it is processed.

Delete your personal data from our records.

Correct or update your personal data.

Transfer your personal data to a third party (right to data portability).

Restrict the processing of your personal data.

Withdraw your consent if we rely on consent as a legal basis for processing.

Object to the processing of your personal data.

Complain to your local data protection authority.

You can exercise some of these rights through your Rocely account. If you cannot exercise your rights through your account, please send your request to service@rocely.com.

The Company may use personal data for the following purposes:

To provide and maintain our Service, including monitoring the usage of our Service.

To manage your account: To manage your registration as a user of the Service. The personal data you provide can give you access to different functionalities of the Service that are available to registered users.

To perform a contract: The development, fulfillment, and execution of the purchase contract for products, items, or services you have purchased through the Service.

To contact you: To contact you by email, phone calls, SMS, or other equivalent forms of electronic communication.

To provide you with news, special offers, and general information about other goods, services, and events similar to those you have already purchased or inquired about, unless you have opted out of receiving such information.

The processing of your personal data is based on one of the following legal grounds:

Consent: You have given your consent to the processing of your personal data for specific purposes.

Contract Performance: Processing is necessary to fulfill a contract to which you are a party, or to take steps at your request prior to entering into a contract.

Legal Obligation: Processing is necessary to comply with a legal obligation to which the Company is subject.

Legitimate Interests: Processing is necessary for the legitimate interests of the Company, unless your interests or fundamental rights and freedoms override.

The Company will retain your personal data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your personal data to the extent necessary to comply with our legal obligations.

Usage data is retained for internal analysis purposes. Usage data is generally retained for a shorter period, unless this data is used to strengthen security or to improve the functionality of our Service.

Data retention by AI service providers: When you use our AI-powered features, your recipe data is transmitted to our AI service providers. These have the following retention periods:

• The Google Gemini API stores data in a cache layer for 24 hours.

Your information, including personal data, will be processed at the Company's operating offices and in any other places where the parties involved in the processing are located. This means that this information may be transferred to — and maintained on — computers located outside of your country or jurisdiction where the data protection laws may differ from those in your jurisdiction.

Data transfers outside the European Economic Area (EEA): In some cases, your personal data may be transferred to recipients outside the EEA, for example when we use services from third-party providers who operate servers outside the EEA. In such cases, we ensure that appropriate safeguards are implemented in accordance with the GDPR, such as:

- Transfer to countries for which the European Commission has issued an adequacy decision

- Use of Standard Contractual Clauses (SCCs) approved by the European Commission

- Implementation of additional technical and organizational measures to protect your data

Your consent to this Privacy Policy, followed by the submission of such information, represents your agreement to this transfer.

The Company takes all reasonable measures to ensure that your data is treated securely and in accordance with this Privacy Policy. A transfer of your personal data to an organization or country will only occur if appropriate controls are in place.

You have the right to request the deletion of your data from the Company. You can do this through your Rocely account or by contacting us at service@rocely.com. Deletion requests will be processed within 30 days, unless there are legal obligations to retain your data.

In certain cases, the Company may be required to disclose your personal data if required by law or in response to valid requests by public authorities (e.g., a court or a government agency).

The Company may disclose your personal data in good faith when necessary to:

Comply with a legal obligation.

Protect and defend the rights or property of the Company.

Prevent or investigate possible wrongdoing in connection with the Service.

Protect the personal safety of users of the Service or the public.

Protect against legal liability.

To provide and optimize our services, we use third-party providers who may process personal data of our users. This includes, in particular, services for automatic translation of content using artificial intelligence (AI), as well as API services for language recognition, such as DetectLanguage https://www.detectlanguage.com.

AI service providers: We currently use the following AI service providers as sub-processors:

• Google Gemini API

Data sent to these AI models consists solely of user-supplied recipe content (title, description, ingredients, instructions, images, tags, etc.). No account or device metadata is forwarded.

We also use user data to generate personalized suggestions, including ingredients or recipes based on user preferences. By using our platform, you expressly agree that your data may be shared with and processed by such third-party providers.

Processing is carried out exclusively for the provision, improvement, and personalization of our services. As the responsible data processor, we carefully select our third-party providers and ensure through appropriate data processing agreements that they implement adequate technical and organizational measures to protect your data. We regularly monitor compliance with these standards and take appropriate measures to protect your rights under applicable data protection laws. For more information on the processing of personal data, please refer to our Privacy Policy.

We use Google AdSense, a service for displaying advertisements from Google Inc. Google AdSense uses cookies and similar technologies to collect information about your use of our website and to show you personalized advertisements. These cookies are specifically used for personalized advertising based on your visits to our website and other websites on the internet.

Google's advertising cookies allow Google and its partners to present ads to you based on your interests and browsing behavior. These cookies do not store personally identifiable information but are based on the unique identifier of your browser and internet device. They help improve the relevance of the advertisements shown to you and measure the effectiveness of our marketing campaigns.

Important note on consent: Advertising cookies and other non-essential cookies are only placed on your device when you have given your explicit consent through our cookie consent banner. Without your consent, no advertising cookies or tracking cookies will be set.

Opt-out from personalized advertising: You can disable the use of personalized ads at any time by visiting Google's advertising settings at https://www.google.com/settings/ads. Alternatively, you can disable the use of cookies for interest-based advertising through the Network Advertising Initiative by visiting https://www.networkadvertising.org/choices/ or the Digital Advertising Alliance at https://www.aboutads.info/choices/.

Additionally, you can generally disable or restrict the use of cookies in your browser. Most browsers offer options to block or delete cookies. Please note that some features of our website may not function properly if you disable cookies.

Our cookie consent banner allows you to manage your cookie preferences granularly and choose between different categories (Necessary, Analytical, Marketing/Advertising). You can change your settings at any time via the "Cookie Settings" link in the footer of our website.

We use PostHog, an analytics tool, to collect anonymized data about the use of our website. PostHog helps us understand how users interact with our website by capturing information about specific actions such as button clicks and general usage patterns.

The data collected by PostHog includes:

General anonymized data: We collect basic information such as button clicks, pages visited, and interactions with elements on our website. This data is collected anonymously and cannot be directly linked to you as an individual.

Individual session analyses: If you have consented to analytics in our cookie consent banner, we collect more detailed information about your usage session. This may include information about your navigation path through the website, the time spent on certain pages, and your interactions with various features.

Use of data: The collected data is used exclusively to improve our website and services. It helps us identify usability issues, optimize performance, and develop new features that meet the needs of our users.

Privacy and control: PostHog is configured to comply with data protection laws, including the GDPR. You can withdraw your consent to analytics at any time through the cookie settings on our website. If you withdraw your consent, no individual session data will be collected, although basic anonymized data may still be collected.

For more information about PostHog and their privacy practices, you can view their privacy policy at https://posthog.com/privacy.

The security of your personal data is important to us, but remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

Our Service is not directed to persons under 13 years of age. We do not knowingly collect personal data from persons under 13 years of age. If you are a parent or guardian and you know that your child has provided us with personal data, please contact us. If we become aware that we have collected personal data from persons under 13 years of age without verification of parental consent, we will take steps to remove that information from our servers.

If you are 13 years or older but under 18 years of age, you must obtain the consent of a parent or guardian to use our services.

Our Service may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.

We will let you know via email and/or a prominent notice on our Service before the change takes effect and update the "Last updated" date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.