Privacy notice
Your family archive deserves careful handling
This notice explains what Rita’s Recipes actually collects, why we use it, how long we keep it and the choices you have.
Last updated: 22 September 2026.
Who is responsible for your data
Rita’s Recipes is operated by Dark Knight Holdings Ltd, trading as Rita’s Recipes, company number 16961271. Our registered office is 36A Bulkington Road, Shilton, Coventry, England, CV7 9JT. For privacy questions or rights requests, email privacy@ritasrecipes.co.uk.
What we collect
- Account information such as your email address, display name and sign-in records.
- Your Recipe Book memberships, roles, invitations and family-sharing relationships.
- Recipes, ingredients, methods, notes, stories, people, photographs, scans and other material that you or another family member choose to add.
- Product settings, meal-planning and shopping information, favourites and other content needed to provide features you use.
- Technical, security and operational records needed to protect the service, diagnose faults and keep reliable audit records.
- Optional referral attribution after you choose it and, if you choose to provide it, dietary or allergy information.
A family member may add information about another person, for example who a recipe came from or a family story. If that happens, we receive the information from that family member rather than directly from the person it describes.
Why we use personal data
| Purpose | Typical lawful basis |
|---|---|
| Provide your account, private Recipe Books, sharing and requested features | Contract, or steps you ask us to take before entering a contract |
| Keep the service secure, prevent misuse, diagnose faults and maintain audit records | Our legitimate interests in operating a secure and reliable service; legal obligation where applicable |
| Service messages about your account or Recipe Books | Contract and legitimate interests |
| Optional referral attribution using device storage; analytics is not active today | Your consent where required |
| Optional dietary or allergy information that may reveal health information | Your consent and, for special-category health data, your explicit consent |
| Tax, accounting, fraud prevention or legal claims if paid services are introduced | Legal obligation and legitimate interests, as applicable |
Where we rely on legitimate interests, we use data only where those interests are not overridden by your rights and interests. You can object to processing based on legitimate interests by contacting us.
Who can see family content
Recipe Books are private by default. Members can see content according to their role. A recipe or collection can also be shared through a secure link or invitation when a user deliberately chooses that option. Anyone who receives a live share link may be able to open the content covered by that link, so treat share links as private information and revoke them when they are no longer needed.
We do not sell your family content or personal data, and we do not use private recipes to target advertising at you.
Photographs, scans and private media
Recipe images and memory media are stored in private storage rather than public buckets. Access is controlled through the application and Recipe Book permissions. Core database and private media storage are configured in Supabase’s London region.
Recipe reading and AI
Recipe reading can turn photographs, scans, pasted text and website content into editable recipe drafts. Typing, structured recipe storage and Cooking Mode do not depend on AI reading being available.
We use the OpenAI API to process content you deliberately submit for AI recipe reading. This may include recipe images, text and website content. Drafts are shown for you to check before saving. API content is not used to train OpenAI models by default. We request that responses are not stored, but standard abuse-monitoring logs may retain content for up to 30 days, subject to legal exceptions. Processing may take place outside the UK. See OpenAI’s API data controls for details.
Service providers and transfers
We use specialist suppliers to run Rita’s Recipes, including Supabase for authentication, database and private storage, and Lovable for application hosting and deployment. Public pages also currently request brand fonts from Google Fonts. Those suppliers may receive the technical information needed to provide their service, such as IP address, browser information or the data handled by the relevant feature.
Some suppliers may process limited service data outside the UK. Where UK data-protection law requires a safeguard for a restricted transfer, the appropriate adequacy or contractual transfer mechanism must be in place. Supplier and transfer reviews are part of our launch and integration controls.
No production payment processor or marketing-email provider is connected to Rita’s Recipes today. If that changes, this notice will be updated before those new uses begin.
How long we keep information
- Active account and Recipe Book data is kept while the account or Recipe Book is in use, subject to deletion controls and legal requirements.
- A Recipe Book removed by its owner can be restored for 30 days. After that, the retention job permanently deletes the Recipe Book and its private stored recipe/memory media.
- An optional referral code is stored on the device for no more than 60 days. Unmatched server-side attribution records are purged after 90 days.
- Client error records are purged after 180 days.
- Certain completed operational records are kept for up to 400 days so we can investigate reliability, security and delivery issues.
- Consent records and necessary audit/legal records may be kept for longer where needed to demonstrate choices, protect users or meet legal obligations.
- Offline recipe copies remain on your device until you remove them or clear site data. Short Cooking Mode session state expires automatically.
Closing your account and deleting content
Closing your account deletes the account and personal profile/list data that belongs to it, subject to legal/audit records we must retain. If you contributed recipes, photographs, notes or memories to a shared family Recipe Book, that family content may remain in the archive. Direct identity links are removed or detached where the service model supports it. If personal information inside family content should be removed, contact us and we will assess the request under data-protection law and the rights of others.
Your data rights
Depending on the circumstances, you may have the right to:
- ask for a copy of personal data we hold about you;
- correct inaccurate or incomplete personal data;
- ask us to erase personal data;
- restrict how personal data is used;
- receive eligible data in a portable format;
- object to processing based on legitimate interests; and
- withdraw consent at any time where consent is the basis for processing.
Rita’s Recipes does not currently use automated decision-making that produces legal or similarly significant effects about you.
Cookies and device storage
Our Cookies & device storage page explains authentication storage, offline copies, short Cooking Mode state and referral choices. Analytics is not active today. Optional referral attribution is not stored before you choose it.
Complaints
You can raise a data protection complaint from Settings or by emailing privacy@ritasrecipes.co.uk. We will acknowledge complaints within 30 days, investigate without undue delay, keep you informed and communicate the outcome. You also have the right to complain to the UK Information Commissioner’s Office (ICO), the UK data-protection regulator.
Changes to this notice
We review this notice when the product, suppliers or legal requirements change. If a material change affects how existing account data is used, we will bring it to account holders’ attention before the new use begins where required.