by Larchline

Kochzettel Privacy Policy

App
Kochzettel, an iPhone app (the "app"), published under the Larchline brand.
Company
Scena Labs LLC, a limited liability company in Washington State, United States ("we", "us").
Contact
support@larchline.co
Version 1.1, 2026-10-06.
Effective from the day the app is available on the App Store.

This policy explains what data the app handles, where it is kept and who can see it. The English text is the binding one. German and French translations are provided for convenience.

1. In short

Kochzettel has no account, no server of its own and no analytics or advertising tools. Your recipes, your week plan and your shopping list stay on your iPhone and in your own iCloud. We receive none of it. Personal data reaches us in three ways only. Apple passes us crash reports if you agreed to that (section 4). You email us (section 5). And our web server sees your IP address for a moment when you open this web page (section 6).

2. What is kept on your iPhone and in your iCloud

The app stores on your iPhone:

  • your recipes, with their title, ingredients (quantity, unit, name and note), steps, servings, preparation and cooking time, tags and notes, and the recipe's and photo's web addresses;
  • your week plan: for each entry the day, the meal, the recipe and the servings;
  • your shopping lists: for each item its name, quantity, unit, supermarket aisle, whether it is ticked and which recipes it came from;
  • for each of these, when it was created, changed and deleted;
  • a setting that records whether the offer for Kochzettel Plus has already opened by itself once;
  • the address of a page you share to Kochzettel and the time, until you open the app, which imports it like a pasted link and deletes both;
  • markers on this iPhone: three are about the first start. They record whether the sample recipe is in and whether you have taken in a recipe. The third records whether you closed the note about sharing or have shared a page to Kochzettel. A further marker records whether the app has asked you for a rating once. Another marker records whether you closed the note that your recipes stay only on this iPhone, with the reason that note gave. The app deletes that last one as soon as syncing with iCloud works again. The app also records, for each shopping-list item that belongs to no list, when this iPhone first saw it. Only after a waiting time does the app add such an item to the current list. Once the item is on a list, or it is gone, the app forgets that marker the next time you open the shopping list. These markers stay on this iPhone; the app does not sync them between your devices.

When your iPhone is signed in to iCloud, the app also stores your recipes, your plan and your list in your private iCloud database. That way they sync between your devices and are backed up. That database belongs to your Apple Account. Apple keeps it under the terms you agreed with Apple. Apple gives app developers no access to their users' private iCloud databases, so we cannot read it either.

You delete a recipe, a plan entry or a list item in the app. What you delete, the app first only marks as deleted and keeps for 30 days. A deleted recipe stays in the app's trash for that time, where you can put it back or delete it for good at once. After the 30 days the app removes deleted recipes and plan entries for good when you next open your recipes. It removes deleted list items when you next open the shopping list. The app never removes a deleted shopping list itself. Its items move to the current list and go through the trash one by one. The empty list then holds only its week and the dates above. When you delete the app, your iPhone deletes its data on that device. What the app stored in your iCloud you manage in your iPhone's iCloud settings.

3. Recipe sites and recipe photos

When you import a recipe from a web address, the app fetches that one page directly from your iPhone and reads the recipe from it. As with a browser, the site sees your internet connection's IP address, the time and the address requested. It also sees technical details iOS adds to every request: the app's name and version and the iOS version. And it sees the language the app asks for the page in: French when the app is shown in French, German otherwise. The app sends no cookies and accepts none, on a redirect too. It sends the site nothing from your recipes or any other data.

The app loads a recipe's photo when it shows it, from the address the recipe page gives for it. That is usually the site itself or a server the site uses. That server also sees your IP address, the time, the address requested, the same technical details and the language the app is shown in. Here too the app sends no cookies and accepts none. While the app is open it keeps the photo in memory, so it does not load it again each time you look. It does not store it on your iPhone.

What a site does with these details is governed by its own privacy policy. We receive none of them.

When you tap a recipe's source, the page opens in your browser. When you share your shopping list, the text goes to the app or person you choose in the iOS share menu.

4. Apple

  • App Store and Kochzettel Plus. You buy the subscription from Apple. Apple takes and processes your payment. On your iPhone, the app only asks Apple whether a subscription is active and turns the Plus features on to match. Apple does not give us your name, your Apple Account or your payment details.
  • Crash reports. You may have agreed in your iPhone's settings to share analytics with app developers. Only then does Apple pass us the app's crash reports and performance data, such as launch time and hangs. With them come usage figures that Apple totals across all users who agreed. A crash report describes your device model, the iOS and app versions and the state of the app when it crashed. It holds neither your name nor your Apple Account, and we cannot link it to a person. We read this data in the tools Apple gives developers for it and use it only to find and fix faults. Apple decides how long it keeps it there. The legal basis is our legitimate interest in an app that runs without faults (Article 6(1)(f) GDPR). Without your agreement we receive none; you can withdraw it at any time in your iPhone's settings under Privacy & Security, Analytics & Improvements.
  • iCloud, as described in section 2.

Apple is responsible for the App Store and iCloud itself, under its own privacy policy.

5. When you write to us

If you write to support@larchline.co, we store your message, the address you wrote from and any name you give us. We use them only to answer you and follow up later. For this, for the crash reports of section 4 and for this web page (section 6) we are the controller.

If you subscribe to Kochzettel Plus, the legal basis is our contract with you (Article 6(1)(b) GDPR). Otherwise it is our legitimate interest in answering your question (Article 6(1)(f) GDPR).

The mailboxes are on Microsoft 365 (Microsoft Corporation). The two people who run the app read and answer your email themselves, from the United States. They build the app with Claude, an AI tool made by Anthropic PBC in the United States. A written rule binds that work: the tool never reads your emails to us.

Microsoft is on the Data Privacy Framework list for transfers from the European Union to the United States. Where that framework does not cover a transfer, we rely on the standard contractual clauses the European Commission has approved, which are part of our contract with Microsoft.

We keep support emails for up to 24 months, so we can follow up on earlier requests.

We never sell data and never use it for advertising.

6. This web page

This page is served by our own service on Google Cloud (Google LLC), on servers in Belgium (region europe-west1). Like any web server, it receives your IP address, the time, the address requested and the details your browser adds to every request. It needs them to send you the page. Our service writes no log line for a visit to this page, and we have switched off Google Cloud's request log, which would hold your IP address. The page sets no cookies and loads no analytics or advertising tools, no fonts and no other content from anyone else's servers. The legal basis is our legitimate interest in showing you the page you asked for (Article 6(1)(f) GDPR).

7. Representative in the European Union

We have not yet appointed a representative in the European Union under Article 27 GDPR. When we appoint one, it is named here.

8. Your rights

If you are in the European Union, the European Economic Area, the United Kingdom or Switzerland, you can ask us at any time to:

  • show you the data we hold about you;
  • correct it;
  • delete it;
  • limit how we use it while a question about it is open;
  • give it to you in a portable format.

Your right to object. You can object at any time to a use based on our legitimate interest (sections 4, 5 and 6). We then stop, unless we have compelling reasons that override yours. For crash reports, withdrawing your agreement in your iPhone's settings is enough.

With us, that data is your emails to us. We cannot link crash reports or page visits to a person. We do not have the data on your iPhone or in your iCloud; you change and delete it yourself (section 2).

The app makes no decisions about people by automated means.

Write to support@larchline.co. We answer within one month. If a request is complex, we may take two more months, and we tell you why within the first month. You can also complain to a data protection authority, in particular where you live or work or where you think the problem happened. In Germany that is the data protection authority of your federal state.

9. Children

The app is not directed at children.

10. Changes

When we change this policy, we publish the new version on this page with its date and version number. Before the app handles data in a new way, this page says so.

11. Contact

Scena Labs LLC 522 W Riverside Ave, Ste N Spokane, WA 99201 United States support@larchline.co