Privacy Policy

시행일: May 1, 2026

RecipeKey (“we,” “our,” “us”) is operated by MonoTools, a business registered in the Republic of Korea (Business Registration No. 609-44-03467). We are committed to protecting your personal data in accordance with the EU General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act (CCPA), and Korea's Personal Information Protection Act.

1. Information We Collect

  • Account information: email address, name, and profile image (received from a third-party OAuth provider such as Google).
  • Usage data: IP address, access logs, device information (OS, browser), cookies, the YouTube URLs you submit for extraction, and feature usage history.
  • Payment receipts: transaction ID, purchase date, and product ID returned by the app store. We do not collect or store payment card details — these are handled directly by Apple App Store or Google Play.

2. How We Use Your Information

  • Authenticate users and prevent abuse
  • Process recipe extraction requests and deliver results
  • Verify subscription status and entitlements
  • Improve the service, develop new features, and respond to support inquiries
  • Comply with legal obligations

3. Legal Bases for Processing (GDPR)

  • Performance of a contract — to provide the service you signed up for
  • Legitimate interest — service improvement, abuse prevention
  • Consent — optional analytics, marketing communications (where applicable)
  • Legal obligation — record-keeping under Korean commerce law

4. Data Retention

  1. We delete your personal data without undue delay when you close your account or once the original purpose is fulfilled.
  2. The following records are retained for the periods required by Korean law:
    • Records of contracts or withdrawal of subscription: 5 years
    • Records of payment and supply of goods or services: 5 years
    • Records of consumer complaints or dispute resolution: 3 years
    • Access logs: 3 months

5. Sub-processors

We use the following service providers to operate RecipeKey. Each acts under a data processing agreement that limits how your data may be used.

  • Google LLC — OAuth authentication, video analysis API
  • Cloudflare, Inc. — traffic delivery, edge security, DNS
  • Google Cloud Platform — payment notifications (Pub/Sub), cloud infrastructure
  • Supabase Inc. — managed database hosting

6. International Data Transfers

RecipeKey is operated from the Republic of Korea. If you access the service from the EU, the UK, or other regions, your personal data may be transferred to and processed in Korea. The European Commission has issued an adequacy decision for the Republic of Korea (December 2021), which means data transfers from the EU to Korea are permitted without additional safeguards.

For transfers to other regions where required, we rely on Standard Contractual Clauses or other appropriate safeguards.

7. Your Rights

Depending on your jurisdiction, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate or incomplete data
  • Request deletion of your data (“right to be forgotten”)
  • Restrict or object to processing
  • Data portability — receive your data in a machine-readable format
  • Withdraw consent at any time, where processing is based on consent
  • Lodge a complaint with your local data protection authority

California residents (CCPA): You may also request to know what categories of personal information we collect and disclose, and may opt out of the sale or sharing of personal information. We do not sell personal information.

To exercise any of these rights, contact us at 0119kimsoo@gmail.com. We will respond within 30 days.

8. Security

  • Transport encryption (HTTPS/TLS)
  • One-way hashing of credentials
  • Least-privilege access controls and audit logging
  • Tamper-evident retention of access logs
  • Periodic security reviews

9. Cookies

We use a minimal set of essential cookies to operate the service. We do not currently use third-party advertising or tracking cookies. You can control cookies through your browser settings.

10. Children's Privacy

RecipeKey is not directed to children under 14, and we do not knowingly collect personal data from anyone under 14 (or under 16 in jurisdictions where that is the GDPR age of consent). If you believe we have collected such information, please contact us so we can delete it.

11. Data Protection Officer / Contact

  • Data Protection Officer: Hyunsoo Kim
  • Email: 0119kimsoo@gmail.com
  • Postal address: MonoTools, C-302, 93 Dobong-ro 169na-gil, Dobong-gu, Seoul, Republic of Korea

12. Changes to This Policy

We may update this policy to reflect changes in law, technology, or our services. Material changes will be announced at least 7 days before they take effect, in-app or via email.

This Privacy Policy is effective from May 1, 2026.