mniam

Privacy Policy

Last revised: August 2026

Introduction

BonaCode, a sole trader established in Poland (NIP: 9442258935), owner and operator of the Mniam App ("we", "us", "our"), is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal data when you use the Mniam App and related services.

This Privacy Policy applies to all users of the Mniam App, regardless of the platform (Android or iOS) and is compliant with Regulation (EU) 2016/679 (General Data Protection Regulation — GDPR) and other applicable EU data protection legislation.

Please read this Privacy Policy carefully. By using the Mniam App, you acknowledge that you have read and understood this policy. For any data-related questions, contact us at: kontakt@mniamapp.com.

1. Data Controller

The data controller responsible for your personal data is:

If you have questions about how we handle your personal data, please contact us at the email address above.

2. Personal Data We Collect

2.1 Data You Provide Directly

Registration data: email address, username, and password (or Google account credentials when using Google Sign-In).

Profile information: optional profile picture and description.

User Content: Recipes you create, including text, ingredients, steps, nutritional information, photos, tags, and collection names.

Communications: messages or emails you send to us (e.g. support requests or complaints).

2.2 Data Collected Automatically

Device information: device type, operating system version and device identifiers, recorded by the providers we rely on to sign you in (Firebase Authentication) and to verify subscriptions (RevenueCat) as part of delivering those functions.

We do not track how you use the App. The Mniam App contains no analytics or advertising software, and we do not record which screens you open, what you search for, or how long you spend anywhere. Where the App shows what is popular, that ranking is derived from how many Users have added a Recipe to their Favourites — an action you take deliberately — and it is the same for everyone; we do not build a profile of you or personalise content to you.

Log data: our servers write technical logs (errors and operational events) and our hosting and network providers keep short-lived access logs that include IP addresses. These exist to keep the service running and secure, not to analyse behaviour.

Subscription data (collected only if and when you purchase a subscription): subscription status, the store you purchased through, the product purchased, the start and end of the current billing period, and the history of purchases, renewals, cancellations and expiries on your Account. Payment details — card numbers, billing addresses and the like — are handled directly by Google Play / Apple App Store and never reach us.

2.3 Data from Third Parties

If you register using Google Sign-In, we receive your name, email address, and profile picture from Google, subject to your Google account privacy settings.

3. Legal Bases for Processing

We process your personal data on the following legal bases under GDPR Article 6:

  • Contract performance (Art. 6(1)(b)): to provide the Services, manage your Account, and fulfil your subscription, including processing payments via app stores.
  • Legitimate interests (Art. 6(1)(f)): to maintain and improve the App, prevent fraud, ensure security, and send service-related communications. We have balanced these interests against your rights and freedoms.
  • Consent (Art. 6(1)(a)): reserved for optional features such as marketing communications or analytics. We do not currently offer any such feature and therefore process no data on this basis; if that changes, we will ask for your consent first, and you may withdraw it at any time.
  • Legal obligation (Art. 6(1)(c)): where processing is required to comply with applicable EU or national law.

4. How We Use Your Personal Data

We use your personal data to:

  • create and manage your Account;
  • provide and operate the Mniam App's features and Services;
  • process and manage your Premium Plan subscription;
  • show you what other Users have found useful, ranked by how many of them added a Recipe to their Favourites (the same ranking for every User, not personalised to you);
  • respond to support requests and complaints;
  • send service and transactional notifications (e.g. subscription renewal reminders);
  • detect, prevent, and investigate security incidents or abuse;
  • investigate faults reported to us or visible in server error logs;
  • comply with legal obligations.

We do not sell your personal data to third parties. We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

5. How We Share Your Personal Data

We may share your personal data with:

  • Service providers: trusted third-party service providers who assist us in operating the App — currently application and database hosting, file storage and delivery, and the authentication and subscription providers named below. They are bound by data processing agreements and are not permitted to use your data for their own purposes.
  • Platform operators: Google Play and Apple App Store for subscription and payment processing. Their privacy policies govern the handling of payment data.
  • Subscription management: RevenueCat, Inc. (United States), which verifies purchases made through Google Play and the Apple App Store and tells us whether your subscription is active. It receives your Mniam account identifier and the purchase details reported by the store; it does not receive your payment details, which remain with the store operator.
  • Google (Sign-In): when you use Google Sign-In, data is shared with Google pursuant to their Privacy Policy.
  • Legal authorities: where required by applicable EU or national law, a court order, or to protect the rights and safety of Mniam, its Users, or the public.

We do not transfer your personal data outside the European Economic Area (EEA) unless appropriate safeguards are in place (e.g. standard contractual clauses under Art. 46 GDPR or adequacy decisions under Art. 45 GDPR).

One such transfer currently takes place: if you purchase a subscription, the subscription data described in Section 2.2 is processed by RevenueCat, Inc. in the United States, under the standard contractual clauses adopted by the European Commission pursuant to Art. 46 GDPR. This applies only to Users who purchase a subscription; if you use the Free Plan, no subscription data exists to transfer.

6. Public Content and Other Users

Recipes, collections, and profile information that you choose to make public within the Mniam App will be visible to other Users. Please be mindful of what you share publicly. If you do not wish your content to be publicly visible, use the privacy settings available within the App.

Other Users' public content visible to you within the App is subject to their own responsibility and may not be used outside the App without their consent.

7. Cookies and Similar Technologies

The Mniam App may use local storage or similar technologies on your device to maintain your session, remember your preferences, and enable core App functionality. We do not use third-party advertising cookies.

We do not use analytics tools, advertising identifiers or any other tracking technology in the Mniam App. Should that ever change, we will update this Privacy Policy and, where required by applicable EU law (including the ePrivacy Directive), obtain your consent before deploying anything non-essential.

8. Data Retention

We retain your personal data for as long as your Account is active or as needed to provide the Services. Specifically:

  • Account data is retained for the duration of your Account. Deletion confirmed in the App takes effect immediately; a deletion requested by email is actioned without undue delay. Retention beyond that point occurs only where required by law or as described below.
  • Subscription and billing records may be retained for up to 7 years to comply with tax and accounting obligations.
  • The record of what happened to a subscription — purchases, renewals, cancellations and expiries — is retained for up to one year after Account deletion, detached from your Account and identified only by the subscription identifier issued by the store, so that a billing question or a payment dispute raised after deletion can still be answered. The App states this before you confirm deletion.
  • Server and access logs are retained for as long as they are useful for security and fault diagnosis, and in any case no longer than 24 months. We hold no usage analytics to retain.
  • Support correspondence is retained for up to 3 years.

When we no longer need your personal data, we will securely delete or anonymise it.

How to Delete Your Account

You can permanently delete your Account at any time directly in the Mniam App: open your Profile, tap "Delete account", and confirm. This is free of charge and does not require contacting us.

When you delete your Account, we permanently erase your account and your private data — including your email address, profile information, private Recipes, Collections, Favourites, and uploaded photos — and remove the login credentials associated with your Account. Recipes you previously chose to share publicly are anonymised (dissociated from your Account and attributed to a generic "Deleted user") rather than removed, so they may remain visible in the App without identifying you.

If you can no longer access the App (for example, because you have uninstalled it), you may request Account deletion by emailing kontakt@mniamapp.com from the email address associated with your Account. We will action such requests without undue delay. Certain records may be retained where required by law, as described above.

9. Your Rights Under GDPR

As a data subject in the EU/EEA, you have the following rights:

  • Right of access (Art. 15): to request a copy of the personal data we hold about you.
  • Right to rectification (Art. 16): to request correction of inaccurate or incomplete data.
  • Right to erasure / 'right to be forgotten' (Art. 17): to request deletion of your personal data in certain circumstances.
  • Right to restriction of processing (Art. 18): to request that we limit processing of your data in certain circumstances.
  • Right to data portability (Art. 20): to receive your personal data in a structured, commonly used, machine-readable format.
  • Right to object (Art. 21): to object to processing based on legitimate interests.
  • Right to withdraw consent (Art. 7(3)): where processing is based on your consent, to withdraw it at any time without affecting the lawfulness of prior processing.
  • Right to lodge a complaint: with your national data protection supervisory authority (e.g. your country's Data Protection Authority).

To exercise any of these rights, contact us at: kontakt@mniamapp.com. We will respond within one month of receiving your request, which may be extended by a further two months in complex cases (with notice to you).

We may need to verify your identity before fulfilling certain requests.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include encryption of data in transit (TLS), access controls, regular security reviews, and secure hosting infrastructure.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay in accordance with GDPR Art. 34.

No method of transmission or storage over the internet is completely secure. While we strive to protect your data, we cannot guarantee absolute security. You are responsible for keeping your Account credentials confidential.

11. Minors

The Mniam App is not directed at children under the age of 16 (or the applicable age of digital consent in your EU Member State). We do not knowingly collect personal data from children below this age. If we become aware that we have inadvertently collected such data, we will delete it promptly. If you believe a child has provided us with personal data, please contact us at kontakt@mniamapp.com.

12. Third-Party Links and Services

The Mniam App may reference or link to third-party services (e.g. Google Sign-In). This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you use.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes via the App or email, with reasonable notice before the changes take effect. The date of the most recent revision is displayed at the top of this policy.

Continued use of the Mniam App after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact us at:

You also have the right to lodge a complaint with the Polish supervisory authority: Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warsaw, https://uodo.gov.pl/. If you reside in another EU Member State, you may also contact your local data protection authority. A list of EU authorities is available at: https://edpb.europa.eu/about-edpb/about-edpb/members_en.

← Back to home