Privacy policy
What we store, which services we use, and what we don't do.
Last updated: 13 October 2026
1. Who is responsible for your data
Femke Meijer, sole trader (autónoma) in Spain. See the address and NIF on our Legal notice. Email: hello@thesourdoughplanner.com.
2. What we collect, and why
| What | Why | Legal basis |
|---|---|---|
| Email address and password (stored encrypted). If you sign in with Google: your name, email and profile photo from Google | Your account | Contract |
| Your name and profile photo (optional) | Personalising the app | Contract |
| Sleep hours, recurring busy hours, kitchen temperature, preferred Amazon store | Planning bakes around your day | Contract |
| Starters, feeds, starter journey observations and notes | Tracking your starter | Contract |
| Bakes, planned and completed step times, bake notes and reviews | Planning and guiding your bakes | Contract |
| Photos and captions in your bakes | Showing your bakes to you (private) | Contract |
| Bakes you choose to share: photo, display name or social handle (or anonymous), email address, original file name | Showing your bake in the app, on social media and in the newsletter | Your consent (can be withdrawn at any time) |
| Recipe ratings and favourites, recipes you suggest | Ratings shown to others only as an average; the rest only to you | Contract |
| Subscription status, which price you pay (standard or founding) and Stripe customer ID (not your card) | Billing | Contract, legal obligation |
| How you found us (e.g. a campaign link), saved at sign-up | Understanding which channels work | Legitimate interest |
| Starter kit sign-up: email address, and your IP address to prevent abuse | Sending you the starter kit emails | Your consent (email); legitimate interest (IP) |
| Push notification subscription | Sending you reminders you switched on | Your consent |
| Technical data (IP address, browser, errors) | Security and keeping the app working | Legitimate interest |
Preferred Amazon store: if you haven't chosen a store, I use your country, as Cloudflare reports it on each visit, to open the right Amazon shop. It isn't stored.
We don't use analytics or tracking tools, and we don't sell your data or use it for advertising.
3. Feedback
When you send feedback in the app, we store your message and your account email, plus technical details that help us understand the problem: the page you were on, the app version, your device type and browser, your time zone and local time, and, for feedback about a plan, that plan's settings and step times. If you choose to attach a screenshot or add a photo, we store that image too.
Only Fem can read your feedback. Screenshots and photos are deleted 12 months after your feedback is closed; the message itself we keep to keep improving the app. You can ask us to delete your feedback at any time at hello@thesourdoughplanner.com.
4. Who helps us (processors)
We only share data with services that help us run the app:
- Supabase: database, accounts and photo storage (servers in the EU, Ireland)
- Cloudflare: hosting and security
- Stripe: payments
- Resend: emails from the app and the starter kit
- Google: sign-in with Google, if you choose it
- YouTube (privacy-enhanced mode): only if you play a video in the app
- Amazon: only if you click an affiliate link. From then on, Amazon's own privacy policy applies.
Some of these companies are based in the US. Transfers are protected by the EU–US Data Privacy Framework or by the EU's standard contractual clauses.
5. How long we keep it
- Your account data: as long as you have an account. After you ask us to delete it, we delete your account, your data and your photos within 30 days.
- Starter kit sign-up: until you unsubscribe. The IP address from your sign-up is deleted after 30 days.
- Invoices and payment records: 6 years, because Spanish tax law requires it. These are kept by Stripe and in our bookkeeping.
6. Cookies and storage on your device
We don't use tracking or advertising cookies. The app only stores what it needs to work on your device:
- a login token, so you stay signed in;
- temporary memory of forms and filters during your visit, such as a half-finished sign-up or your chosen recipe filters.
These are strictly necessary and don't require consent. A campaign link that brought you here is read only when you sign up, and is not stored on your device before that.
7. Push notifications
Only if you switch them on. You can switch them off at any time in your profile or in your phone's settings. We don't send notifications during your sleep hours.
8. AI and automated decisions
We don't use AI to make decisions about you, and we don't sell or share your data to train AI models. When you send feedback, Fem may use an AI coding assistant to help fix the problem. She only shares what's needed to fix it, never your name or email address. Your schedules and your starter's progress are calculated by fixed rules. We don't make automated decisions about you that have legal or similarly significant effects.
9. Your rights
You have the right to see, correct, delete or download your data, to object to its use or limit it, and to withdraw your consent at any time. Email hello@thesourdoughplanner.com, and we will respond within one month.
If you think we're not handling your data properly, you can file a complaint with the Spanish data protection authority (AEPD, www.aepd.es) or the authority in your own country.
10. Age
The app is intended for people aged 18 and over. We don't knowingly collect data from children.
11. Changes
If we change this policy in a way that matters to you, we will tell you in the app or by email. When we add a new service, such as an analytics or newsletter tool, we update this policy first.