Privacy policy
Last updated: November 4, 2026.
Grammage is a service for photographing handwritten recipe notebooks in order to transcribe, organize and share them. This page explains which data we process, why, and what your rights are, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés).
1. Data controller
The company Grammage — contact: youstapp@gmail.com.
2. Data we collect
| Data | Why | Legal basis | Retention |
|---|---|---|---|
| Email address and password (encrypted) | Create your account and log you in | Performance of the contract | Until the account is deleted |
| Photos of recipe pages, transcriptions, titles, tags, notebooks, folders | Provide the service (digitizing, organizing, book mode) | Performance of the contract | Until you delete them or your account |
| Emails of the people you invite to a notebook | Give them access to the shared notebook | Legitimate interest (a sharing feature you trigger) | Until the invitation is removed |
| Number of scans performed | Apply the free quota | Performance of the contract | For the life of the account |
| Email left on the waiting list for printing your book | Notify you when it becomes available | Consent | Until you unsubscribe, or 24 months |
| Technical logs (IP address, browser, timestamp) | Security, abuse prevention | Legitimate interest | 30 days maximum at our hosting providers |
We do not collect any payment data, geolocation data or advertising profiling data.
3. Automatic reading of photos (AI)
To transcribe a recipe, the photo you send is passed to Google's Gemini API (Google Ireland Limited) only for the time needed for the transcription. Google contractually commits not to use data sent through the paid API to train its models. Avoid photographing pages that contain sensitive information unrelated to the recipe.
4. Processors and transfers
- Supabase (database, accounts, photo storage) — servers in the European Union.
- Vercel (hosting of the website and server functions) — a US company; transfers are governed by the European Commission's standard contractual clauses.
- Google (Gemini API) — Google Ireland Limited; same safeguards.
We do not sell or rent your data to anyone.
5. Sharing notebooks
When you turn on a public link, anyone with that link can read the notebook (recipes and photos) without an account. You can turn it off at any time: the link then stops working immediately. Email invitations only give access to the person who logs in with that email.
6. Cookies and local storage
Grammage uses no advertising cookies and no third-party audience measurement tools. Only your login token, and your language choice, are kept in your browser's local storage. No consent banner is therefore needed.
7. Security
Data is encrypted in transit (HTTPS). Photos are stored in a private space: they can only be accessed by you, by the people you have invited, or through a public link you have explicitly turned on. Access to data is protected by security rules at the database level (Row Level Security).
8. Your rights
You have the rights of access, rectification, erasure, restriction, portability and objection. You can:
- edit or delete your recipes and notebooks yourself in the app;
- request the complete deletion of your account and your data by writing to youstapp@gmail.com — we reply within 30 days;
- lodge a complaint with the CNIL, the French data protection authority (cnil.fr).
9. Minors
The service is intended for people aged 15 and over. Minors under 15 must obtain a parent's consent.
10. Changes
This policy may change; the update date at the top of the page is then changed. In case of a significant change, you will be notified by email or in the app.
This English version is provided for convenience; the French version prevails.