Privacy and data rights

Bake Window Privacy Policy

This policy explains what Bake Window collects, why it is collected, and how users can exercise GDPR rights.

Last updated: 4 June 2026

Who controls your data

Bake Window is the data controller for personal data collected through the Bake Window web app and mobile store shell. Privacy requests can be sent to privacy@breadbuddy.app.

Data we collect

  • Account and contact details you choose to provide, such as name, email address, and support correspondence.
  • Bake records, feedback, recipe notes, photos, and related metadata needed to provide Bake Window journal and community features.
  • Technical and security data such as IP address, device type, browser information, and service logs needed to operate and protect the service.
  • Subscription and purchase metadata needed to manage paid access, including store transaction identifiers and entitlement status. Bake Window does not store full card details from Apple, Google, or payment processors.

Why we use your data

  • To deliver bake planning, journaling, photo upload, community sharing, and customer support.
  • To maintain service security, prevent abuse, and diagnose operational issues.
  • To manage subscriptions, entitlement checks, refunds, and audit records for paid features.
  • To send service messages and optional notifications only where you have asked for them or where they are necessary to operate your account.

GDPR legal bases

  • Contract: when Bake Window needs the data to provide the product features you asked for.
  • Legitimate interests: when Bake Window needs limited technical or operational data to secure, improve, and support the service.
  • Consent: when you opt in to optional notifications, community sharing, or other non-essential processing.
  • Legal obligation: when records must be retained for tax, accounting, fraud prevention, or regulatory purposes.

Sharing and processors

Bake Window uses infrastructure and processing providers only where needed to operate the service, such as hosting, storage, analytics, payment, notification, or app-store billing providers. Data is not sold to third parties for advertising.

Retention

Bake records, account data, and subscription audit records are kept only for as long as they are needed to provide the service, resolve disputes, comply with tax or accounting duties, and protect the platform from abuse. When data is no longer needed, it is deleted or anonymized.

Your rights

Where GDPR applies, you can request access, correction, export, restriction, objection, or deletion of your personal data, and you can withdraw consent for optional processing at any time. Bake Window will respond in line with applicable law.

For requests, contact privacy@breadbuddy.app or use the account deletion request page. Until self-service tools are live for every data type, Bake Window handles deletion and export requests through support.

Cookies and similar technologies

Bake Window uses only the cookies and similar technologies needed for core app operation, security, sign-in state, and product reliability unless and until optional analytics or marketing tools are explicitly introduced with appropriate notice and consent where required.

Community sharing and photos

Photos, bake notes, and other community content are shown publicly only when a user chooses to share them. Shared content can be removed from public view on request or through product controls as they become available.

Questions and complaints

If you have a privacy concern, contact privacy@breadbuddy.app first so Bake Window can try to resolve it.

If you are in the UK or EEA, you may also raise a complaint with your local data protection authority.