Legal
Last updated: June 2026
We collect only what we need to run Whisk & Serve. We don't sell your data. We don't share it with advertisers. We keep it secure. That's the deal.
Account info — when you sign up, we collect your email address and a display name. That's it. No phone number, no address, no credit card (unless you upgrade to Whisk & Serve+, in which case payment is handled entirely by Stripe — we never see your card details).
Recipes you create — if you use My Recipes, your recipes are stored securely and only visible to you (unless you choose to share them with the community).
Favourites and cooking activity — we store which recipes you've saved and cooked so the app can personalise your experience.
Usage data — we use Vercel Analytics to understand how people use the site. This is anonymous aggregate data — we can't link it back to you.
To run the service, keep you logged in, show you your saved recipes, and improve Whisk & Serve over time. We don't use your data to serve ads or build profiles to sell to third parties.
Supabase — our database and authentication provider. Your data lives on Supabase's infrastructure, which is GDPR compliant and hosted in the EU.
Vercel — our hosting provider. They handle the infrastructure the site runs on.
That's it. No other third parties have access to your personal data.
You can update your profile, delete your account, or ask us to export or erase your data at any time. Just get in touch and we'll sort it within 30 days.
If you're in the EU or UK, you also have rights under GDPR — including the right to access, correct, or delete your data, and the right to object to how we use it.
We keep your data for as long as your account is active. If you delete your account, we'll remove your personal data within 30 days, except where we're required to keep records by law.
If you have any questions about your privacy or your data, get in touch. We take this seriously and will always respond.