This translation is provided for information; the French version prevails.
Privacy policy
Effective as of 10/11/2026.
Sizzle records what you eat, which constitutes health data. This policy describes the data we process, why we process it, the recipients to whom it is disclosed and how to exercise your rights.
This policy applies to the Sizzle app, on both web and mobile. It is drawn up in accordance with Regulation (EU) 2016/679 of 27 April 2016 on data protection (“GDPR”) and the Belgian Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data.
1Data controller
| Data controller | Luca Corona |
|---|---|
| Address | Rue de Namur 150 1400 Nivelles, Belgique |
| Contact | info@sizzle.cooking |
No data protection officer has been appointed, as the processing does not fall within any of the cases in which such an appointment is mandatory. Any request relating to your data may be sent to the contact above.
2Data collected
Account data
Your email address, display name, language, account creation date and, depending on how you sign in, a hash of your password or the identifier provided by Google or Apple.
Food diary (health data)
- the foods and meals you record, their dates and nutritional values;
- your weigh-ins, if you record any;
- if you set a goal: your sex, age, height, weight and activity level, which are needed to calculate it.
Contents of your recipe library
Your recipes and their ingredients, collections, shopping lists, fridge and cupboard contents, meal planner, notes, corrections you suggest and photographs you take of packaging. The app also retains the matches you correct (for example, the food corresponding to an ingredient) so that they can be reused.
Service usage data
Each analysis performed by a language model generates a technical record: the date, type of analysis, volume of text processed and its cost. These records are used to enforce usage limits and detect abnormal use.
Subscription
If you take out a subscription through the app, we retain the purchase information provided by the app store you bought it from: the product, dates, status and renewal. We do not receive any payment data.
If your subscription is cancelled or refunded, we send you a message confirming what changes for your account and inviting you to tell us why. Replying is optional: your answers (the reasons you tick and your comment) are used solely to improve Sizzle, are read without your name or address, and are deleted with your account.
3Purposes and legal bases
| Purpose | Data concerned | Legal basis |
|---|---|---|
| Create and manage your account, provide the app's features (recipes, shopping, fridge, meal planner) | account data, contents of your recipe library | performance of the contract (Art. 6(1)(b) GDPR) |
| Maintain your food diary and calculate your goals | health data | your explicit consent (Art. 9(2)(a) GDPR) |
| Share your recipes with a Family or post them in the Community | recipes, display name, username, profile picture | performance of the contract, at your initiative |
| Enforce usage limits, prevent abuse, moderate published content | usage data, reports | legitimate interest (Art. 6(1)(f) GDPR) |
| Manage your subscription, confirm its cancellation or refund | purchase information, email address | performance of the contract |
| Understand why a subscription ends | your optional answers (reasons, comment) | your consent, by choosing to reply (Art. 6(1)(a) GDPR) |
| Send you account-related messages (email address verification, password reset, invitation) | email address | performance of the contract |
Your data is not subject to any automated decision-making or profiling that produces legal effects concerning you. It is neither sold nor used for advertising purposes.
4Health data and consent
Your food diary, weigh-ins and goal profile are health data within the meaning of Article 9 GDPR. They are processed only with your explicit consent, obtained before your first entry, separately from any other acceptance, and with its date recorded.
You can withdraw this consent at any time in the app's settings. Withdrawal and erasure are two separate operations: the screen offers both.
Effect of withdrawal. Your refusal is recorded along with its date. From that point, the app no longer records data in your food diary, weigh-ins or hydration tracking, and informs you of this. Until you have answered, you are asked the question again.
Data already recorded is retained until you request its erasure, which is then immediate.
5Recipients and processors
Analysis by a language model
Sizzle uses OpenAI to analyse a video, photograph or label. The data transmitted depends on the action you perform:
| When you… | Data transmitted to OpenAI |
|---|---|
| import a video | its title, description, hashtags, soundtrack and images extracted from the video |
| import a recipe from a website | the recipe published on the page: title, ingredients and steps — no data about you |
| photograph your plate | the photo itself |
| photograph your fridge | the photo itself; the list extracted from it is presented to you for review before it is saved |
| dictate your fridge contents | the text of your dictation, with the same review before saving |
| read a label | the recognised text — the photo does not leave our servers; it is read there |
| photograph a recipe page | the text, recognised on our servers. If the page could not be read there — handwriting, for example —, the photo itself, with its capture metadata (date, location) removed |
| paste a recipe | the text, as it is |
| import a recipe that needs to be translated for your recipe cards | the text of the resulting recipe card — title, section headings, steps and equipment — if its language differs from your account's language, and the names of its ingredients if your account is not in French, in order to translate them |
| use Sizzle in a language other than the one your recipe cards are written in | the text of your own recipe cards — title, section headings, steps and ingredient names — including those you wrote or dictated yourself, in order to display them in your account's language |
| add an ingredient | its label, to find the corresponding food |
| import, dictate or edit a recipe | its title, number of servings and ingredient lines (label and quantity), to estimate each ingredient's weight and check the food it was matched to — no data about you |
The following are never transmitted to OpenAI: your food diary, weigh-ins, goals, email address, shopping lists and recorded fridge contents. A fridge photograph is not retained after analysis.
OpenAI processes this data in the United States under the EU-U.S. Data Privacy Framework and the European Commission's standard contractual clauses. It is not used to train its models. OpenAI may keep it for up to 30 days to detect abuse, then deletes it unless required by law to retain it.
Other recipients
| Recipient | Role and data concerned |
|---|---|
| Oracle Cloud (Amsterdam, Netherlands) | hosting of all data, within the European Union |
| Cloudflare | traffic routing |
| Resend (European region) | sending emails: the recipient's address and the message text |
| Google, Apple | authentication, if you use these sign-in methods |
| Your phone's app store | sale of the subscription, if you take one out: they receive your account's technical identifier, without a name or address; payment and billing remain with them |
| Your browser's or phone's notification service | the encrypted content of notifications, if you enable them |
| TikTok, Instagram, Facebook, YouTube | the address of the video you import |
| Website from which you import a recipe | the page request, made by our servers: the website receives neither your IP address nor your browser information |
Sizzle uses no audience measurement tools or advertising trackers. Your data is neither sold nor shared for commercial purposes.
6Retention periods
| Data | Period |
|---|---|
| Your account and its contents | until the account is deleted |
| The sign-in session | 30 days |
| A password reset link | 2 hours |
| Analysis cost records | retained after account deletion, anonymised |
| Backups | 7 days |
No data is automatically deleted due to inactivity: a food diary is only useful over time, and deleting it is your decision.
Backups. Deleting your account immediately erases all your data, including files. A copy remains in backups from the previous seven days, which are themselves deleted at the end of that period.
7Sharing within a Family
A Family is a group of up to eight people, which you can join only by a personal invitation sent to a specific email address. There is no user search by name or address: it is impossible to check whether someone has an account by trying their email address.
While you are a member, the other members can see your recipes, display name and profile picture, and can copy a recipe into their own recipe library. You can stop sharing a recipe at any time.
Your fridge. It is not shared by default: sharing it is a separate setting that you enable from your Family's screen and can disable at any time.
A shared fridge is a common fridge. Once sharing is enabled, other members can change the quantity, date and location of your items, and remove them when cooking. When you disable sharing or leave the Family, your fridge becomes invisible again immediately. No copy is made for the other members.
What a Family never sees: your food diary, weigh-ins, goals, weight, height and age. These are health data, which membership of a Family does not allow you to share.
When you leave a Family or are removed from it, access ends immediately, in both directions. Recipes already copied by a member remain in their recipe library. An invitation you decline cannot be sent to you again for that group.
Username. You can choose a username; it is the only way another user can find you. Without a username, your account cannot be found. You can remove it at any time.
Invitation link. An invitation can also be sent as a link. This link grants access only to the person whose email address was invited and cannot be used by anyone else. A pending invitation allows an account to be created for the invited address, even when sign-ups are closed.
8Posting in the Community
Nothing is published without your action. A recipe is private or shared with your Family; making it public is an action you take on a specific recipe, and can be undone in the same way.
A published recipe can be read by anyone. We cannot tell you who has viewed it.
The following then become visible: the recipe (title, ingredients, steps, times, nutritional values), your username, display name, profile picture, bio if you write one, and your contributions to other users' recipes: published reviews (rating, tags and any comment), questions and “I've cooked this” entries. Likes are displayed as a count, without your name; only the recipe's author can be notified of them.
The review you record in your own recipe card (“My review of this recipe”) is personal: it is never published or included in an average. The same applies to a memo written after cooking.
The following are never published, under any circumstances: your food diary, weigh-ins, goals, weight, height, age, fridge, shopping list, meal planner and email address.
Unpublishing. You can unpublish a recipe at any time: it becomes private or Family-only again and disappears from public screens. Copies already saved by other users cannot be taken back. The date of first publication is retained so that a request about what was made public can be answered.
Recipes imported from TikTok, Instagram, Facebook or YouTube. They can be published, but the creator's video and image are not republished: the recipe mentions the original platform and links to the original. Its origin (created, adapted or imported) is determined automatically.
Reporting and blocking. You can report a recipe, comment, review or profile, and block a user. We review reports and retain them with the decision taken, including after the content has been removed. A review removed by moderation disappears from screens and averages; its author sees it marked as removed so that they can challenge the decision.
Deleting your account deletes your posts, comments, reviews and follows; the averages for the recipes concerned are recalculated.
9Food entries created by users
When you create an entry for a food missing from the database, it is added to the shared database used by everyone. If your account is deleted, this entry is retained but is no longer linked to you: nothing indicates that you created it any longer. Deleting it would make the food diaries of people who use it inaccurate.
10Your rights
You have the right of access, rectification, erasure, restriction of processing, objection and data portability, as well as the right to withdraw your consent at any time.
| Right | How to exercise it |
|---|---|
| Access and portability | Settings → Export my data: a file is generated immediately |
| Erasure | Settings → Delete my account, confirmed by entering your email address; details, requests without the app and partial deletion: delete your account |
| Rectification | directly in the app |
| Withdrawal of consent | Settings, see section 4 |
| Objection, restriction | in writing, to the contact listed in section 1 |
Requests submitted in writing receive a response within one month.
Export contents. Your recipes, food diary, weigh-ins, goals and the measurements used to calculate them, collections, lists, fridge and cupboards, settings, notes, label photographs, suggested corrections, reports, notifications, imports, food entries you created and learned matches.
The export does not contain your password (only a hash is retained), or your device and notification tokens, which allow access to your account.
11Cookies and local storage
Sizzle uses a single cookie, strictly necessary to keep you signed in. It does not require consent. No audience measurement or advertising cookies are placed. Your browser also stores certain preferences locally (such as the theme), which are not sent to us.
12Security
All communications are encrypted (HTTPS). Passwords are stored as hashes and are never readable, including in your export. Your label photographs are accessible only to you.
13Complaints
If you have any questions or complaints, we invite you to contact us first. You can also lodge a complaint with the Data Protection Authority (APD / GBA), the Belgian supervisory authority: autoriteprotectiondonnees.be.
If you live in another European Union Member State, you can also contact your country's supervisory authority.
14Changes to this policy
This policy may be amended. You will be notified in the app of any change concerning the recipients of your data or the processing of your health data.
For any question about your data, write to the data controller listed in section 1.
info@sizzle.cooking