Draft, pending counsel. Not yet in force. The binding version is the German one.
Wochenchef keeps data in the EU and shows no ads. This table lists what is stored, where, and why.
| Data | Where | Legal basis |
|---|---|---|
| Account, household, plan, shopping list, pantry, matched receipt lines, savings, recipe notes | Supabase, Frankfurt | Contract |
| Diet flags that reveal religion or health (halal, kosher, allergies, intolerances) | Supabase, Frankfurt; visible only to you (or the parent of a child under 16) | Explicit consent (GDPR Art. 9), withdrawable at any time |
| Store and time of a shopping trip | Supabase, 30 days | Contract |
| Location, postcode, receipt photos, unmatched receipt lines, loyalty cards | Your phone only | — |
| Push tokens and offer-alert topics | Supabase; Firebase (Google) | Contract; consent for offer alerts |
| Purchases | Apple, Google, RevenueCat | Contract |
| Recipe import input | Not stored by Wochenchef; processed by Anthropic. Zero data retention is requested, not yet confirmed; if Anthropic declines, processing moves to Claude on AWS Bedrock or Google Vertex AI in an EU region | Contract |
| Map tiles and technique videos | Google Maps, YouTube; loaded only after you tap | Consent |
| Crash reports without personal data | Sentry, EU | Legitimate interest |
| Product analytics | PostHog, EU | Consent |
| Request logs (IP address, user ID, path) | DigitalOcean and Supabase logs | Legitimate interest |
| Encrypted database backups | DigitalOcean Spaces, Frankfurt | Legitimate interest |
Providers based in the US are bound by Standard Contractual Clauses or the EU–US Data Privacy Framework. You can ask for a copy of your data, correct it or delete it at any time.