Cuisson Privacy Policy

Who is responsible

Andrew McHarg is the data controller responsible for your personal information in connection with Cuisson, an independent software product from Kitchen Docs. Our privacy contact is privacy@kitchendocs.co.uk.

What we collect

When you apply for the beta, we collect your name, email address, role or type of business, computer platform, current recipe tool and any explanation you choose to give about what you need. Please avoid putting sensitive personal information in your application.

We keep your application status, review information, beta licence and email delivery records. If you opt in to marketing, we record when you did and which version of the consent wording you saw. We do not collect an IP address or browser fingerprint as evidence of marketing consent.

If you sign up to try the web demo, we collect your email address and record when you agreed to the demo terms and which version you agreed to. We give your sign-up a random demo ID. If you ask us to email you a link to the demo, we also record a random link code, when we sent it and how many times. If you tick the box for Cuisson news, we record that choice as described under Your email choices.

Cloudflare processes request and security information, including IP addresses and browser or device information, to serve and protect the site.

Why we use your information

• Beta applications and access: to review applications, contact you about your application and participation, issue licences and provide support. Where this is needed to arrange or deliver access you request, the basis is steps before a contract or performance of a contract. Administration, reviewing suitability and maintaining a reliable beta programme rely on our legitimate interests.
• Operational emails: to confirm your application, send invitations and licence keys, and tell relevant participants about access, compatibility, critical bugs, security or participation requirements. These use the same bases as managing your beta access. They are sent regardless of your marketing preference and must relate to your application or participation.
• Optional marketing: to send occasional Cuisson feature, launch and product news when you affirmatively opt in. This relies on consent. Declining or withdrawing consent does not affect beta eligibility.
• Reliability, support and security: to diagnose problems, protect services and respond to reports, relying on our legitimate interests. We use consent where a particular optional activity requires it. We keep records necessary to meet applicable legal obligations on that basis.
• Web demo: to give you access to the demo you asked for, to send a demo link when you ask for one, and to keep a record of the demo terms you agreed to. This relies on our legitimate interests in offering the demo and demonstrating your agreement. Demo analytics and session replays rely on your consent.
• Consent and objection evidence: to demonstrate your choices and honour withdrawals, relying on our legitimate interests and applicable legal obligations.

Your email choices

Marketing is optional, and the checkbox on the beta application and on the demo sign-up starts unchecked. We add you to our marketing list, held by our email provider Resend, only if you tick it. Reapplying without ticking it does not change an earlier choice.

Every marketing email contains an unsubscribe link. It works without signing in or giving a reason. Unsubscribing stops further marketing emails; it cannot recall one already sent. Resend also stops marketing to addresses that bounce or report spam. Important emails about your application and beta access continue regardless of your marketing choice.

You can also withdraw by emailing the privacy contact above. If you change your mind later, ask us at the same address; we never add you to the marketing list without your own affirmative choice.

Website analytics and cookies

Cloudflare Web Analytics is enabled for this domain. It provides website usage and performance measurements without analytics cookies, local storage identifiers or visitor fingerprinting. The main website does not use PostHog or record browsing sessions. The web demo, at kitchendocs.co.uk/demo, is different, and is described in the next section.

Cloudflare may use cookies needed for security checks, and the private owner dashboard uses Cloudflare Access authentication cookies. These serve security and sign-in purposes.

Help articles can link to or offer content hosted by other services. Loading that content may send your IP address and browser information to that provider. External interactive embeds are loaded only when you choose to open them.

The web demo

The demo runs entirely in your browser, on a made-up kitchen. The recipes and prices you enter stay in your browser and are not sent to us, and nothing is kept once you close or reload the page.

To open the demo, your browser stores a note that you agreed to the demo terms, and your demo ID. These are needed for the demo to work, and they never contain your email address.

Before it records anything, the demo asks whether we may use cookies and similar storage to understand how it is used. This is separate from agreeing to the demo terms, and the demo works the same whichever you choose. If you accept, PostHog records the pages and features you use and a replay of your visit: what appears on screen, your clicks, and technical details such as error messages. Text you type into the editor and into form fields is hidden in the replay where you type it, but it can still show where the demo displays it back, so please don't type personal information into the demo. Replays and events are linked to your demo ID, never your email address. We use this on the basis of your consent. You can change your choice at any time with the Cookies button in the demo, and doing so stops the recording and clears what PostHog stored in your browser.

If you sign up on a phone, the demo can't run there, so we offer to email you a link to open it on a computer. We send it only if you ask. It is not marketing, and the link opens the demo with the terms you already agreed to.

To stop automated sign-ups, Cloudflare counts sign-up requests by IP address for a short time. We do not store your IP address with your sign-up.

Desktop telemetry and support reports

Cuisson includes telemetry, which is on by default and which you can turn off at any time. It is separate from website analytics and optional email marketing. When it is on, Cuisson sends selected error and feature-use events to PostHog's EU ingestion service to help diagnose faults and improve the app. Events can include app version, operating system, the part of the app involved, error categories, a random installation ID and your beta group. Versions 0.21.1 and earlier also include your beta licence ID, which can be linked to the licence we issued you; later versions do not send it, and PostHog does not build a profile of you from your events.

To turn it off, use the Send error reports switch in Settings → Privacy & Diagnostics; the switch also controls selected product-use events. We use telemetry on the basis of our legitimate interests in finding faults and improving Cuisson, and the switch is how you object. Taking part in the beta does not require you to leave it on. We use telemetry to produce statistics about how the app is used and to find and fix faults, not to make decisions about individual users. Automatic telemetry does not intentionally include recipe or invoice contents, names, email addresses or kitchen prices. Variable diagnostic values are redacted, but redaction is a safeguard rather than a guarantee that every possible piece of free text contains no personal information. The app does not implement automatic desktop session recording.

Separately, the app checks beta feature availability with PostHog using the installation ID and licence cohort information, even when telemetry is turned off. This supports the beta access you request. Feedback reports are sent only when you choose to send them and include your message and diagnostics. A screenshot is optional and shown before sending; it can contain kitchen or personal information visible in the window. Turning off automatic telemetry does not stop a support report you explicitly send.

Opting in to marketing does not affect telemetry, and turning telemetry off does not affect your beta access or your marketing choice.

Services that process information

• Cloudflare: website hosting, our website database (hosted in Western Europe), security, owner sign-in and cookieless website analytics.
• Resend: email delivery (including the demo link if you ask for one), delivery records and suppression handling, and our marketing list. If you opt in, your email address is added to that list, and Resend records if you unsubscribe.
• PostHog: app diagnostics and selected product events, beta feature checks and feedback reports, and, if you accept cookies in the web demo, demo analytics and session replays, all sent to PostHog's EU region.
• Apple iCloud Mail: receiving and storing correspondence you send to the privacy contact.

We do not sell your information.

How long we keep information

We use the following retention periods, approved by Andrew McHarg. We apply them by reviewing our records at least every three months and deleting what has passed its period. Copies in email inboxes and provider services are reviewed in the same way.

• Pending beta applications: six months after submission or your latest substantive correspondence about the application. Our outgoing or automated emails do not extend that period.
• Rejected applications: three months after the decision, after which unnecessary application details are deleted.
• Approved participants: while beta access is active, plus twelve months after it ends. Application answers and review notes are removed six months after approval unless a specific continuing support need is recorded. We keep the minimal licence record needed for a licence that remains valid and review that need annually.
• Marketing permission: lasts until you unsubscribe or ask us to stop.
• Consent evidence: the minimum evidence needed while we rely on permission, plus three years after withdrawal or its last use, whichever is later, with an annual necessity review.
• Do-not-contact and delivery suppression records: the minimum matching address or protected identifier, reason and date for as long as needed to prevent unwanted sending, reviewed annually. Deleting application details does not remove an opt-out.
• Feedback, support and privacy correspondence: twelve months after resolution. Optional screenshots are removed within thirty days of resolution unless needed for a documented continuing issue. Unresolved cases are reviewed every three months.
• Copies of the emails we send, and their delivery logs: ninety days after sending. We keep only minimal delivery records (dates, status and provider references) where needed to avoid duplicate emails, support a valid licence or show consent, and review these annually.
• Web demo sign-ups (email address, demo ID, terms version and link records): twelve months after sign-up.

Desktop telemetry: one year. PostHog keeps telemetry events for one year, which lets us compare how the app behaves across releases; older events are no longer kept for analysis.

Web demo session replays: 30 days. Web demo analytics events: one year, the same as desktop telemetry.

A specific support case, dispute or legal obligation may require limited information to be retained longer. We record the reason and review any such case at least every three months. Keeping information for a case does not extend marketing permission. A deletion request covers your related email records, correspondence and licence records, except the minimal consent or opt-out record needed to keep honouring your choices.

International processing

Some of these services process information outside the UK. Resend stores data in the United States; its data processing terms protect these transfers with the UK Addendum to the EU standard contractual clauses, and Resend is certified under the UK Extension to the EU-US Data Privacy Framework. Cloudflare's data processing terms use the same safeguards. PostHog stores our telemetry and demo analytics in its EU region (Frankfurt) under its data processing agreement, which covers any access from outside the UK and EU. Correspondence you send to our privacy contact is stored by Apple iCloud Mail under Apple's terms and may be processed outside the UK.

Your rights and complaints

Depending on the processing and applicable law, you can request access to your information, correction, erasure, restriction or portability. You can object to processing based on legitimate interests and withdraw marketing consent at any time. Withdrawal does not affect the lawfulness of earlier processing.

Contact Andrew McHarg at the privacy address above to exercise your rights. We may need proportionate information to verify your identity. You can also complain to the UK Information Commissioner's Office.