Privacy Policy

Last updated: 2026-08-06

TL;DR: We collect the minimum data needed to run Grelife (email, name, password). We don't show ads and we don't sell your data. Optional analytics cookies (off by default) help us improve the app only if you allow them. AI suggestions are optional and require your consent. Your data is hosted in the European Union (Germany), and encrypted backups are kept there too. You can export or delete everything on request.

1. Who is responsible

Loïc Gremaud Email: contact@grelife.ch

2. What we collect and why

We also store what you create: recipes, meal plans, shopping lists, ingredients, tags, and family invitations. This data belongs to your family and is isolated from other families: every query is scoped to your family, and the database additionally carries row-level security policies (see section 12).

We may analyze aggregated or anonymized usage patterns to improve the service (for example, better meal suggestions or faster performance). This never exposes one family's data to another.

3. How we treat your data today

• No data selling. Your data is not a product.
• No third-party tracking. No tracking pixels, no fingerprinting, no advertising profiles.
• Optional analytics only. Any analytics are self-hosted and stay off until you choose to allow them (see section 5).
• No ads. Grelife is ad-free.
• No sharing except with OpenAI for AI suggestions (and only with your consent).

If this changes, we will update this policy, notify you, and give you a choice (see Terms of Service, section 6).

4. AI meal suggestions (optional)

This feature requires your family's explicit consent. When enabled, we send the following to OpenAI (based in the United States):

• Recipe names, ingredient names, and tag names
• Meal history (last 8 weeks: dates and meal names)
• Your language preference
• Custom meal instructions (if provided)

We never send your email, password, or personal identifiers to OpenAI.

You can withdraw consent and disable this feature at any time. The data transfer to the US is covered by Standard Contractual Clauses (SCCs) in our Data Processing Agreement with OpenAI.

5. Cookies and analytics

Strictly necessary (always on, no consent needed):

Optional analytics (off by default, only if you allow them):

We ask for your choice with a cookie banner. Analytics stay off unless you select Allow analytics, and you can change your mind anytime via Cookie settings in the footer.

If you allow analytics, we collect data about how the app performs in your browser: the addresses of the pages you open and of the data those pages load, page-load and Web Vitals timings, resource timing, JavaScript errors, which elements you click or tap (the text you see and type is masked, never recorded), and a session identifier. This helps us find and fix slow or broken pages. It is:

• Off by default. We collect nothing until you click Allow analytics.
• Self-hosted. The data goes to our own monitoring system on our EU servers, never to a third-party analytics provider.
• Minimal. We do not build advertising profiles, we do not sell or share it, and we keep your IP address minimal (not used for location profiling).
• Withdrawable. Reject or change your choice anytime. Your choice is remembered for 6 months, then we ask again. We also ask again sooner if we ever widen this: collect something new, use it for something new, or send it to someone new. We do not re-ask when we narrow what we collect or correct a mistake in this section, because interrupting you to re-approve less is how consent banners become noise.
• Not stored against your account. Analytics events carry no account identifier: only a session identifier that expires with your browsing session. Because there is no account key to look them up by, they are not part of your data export or account deletion, which cover your personal data (profile, recipes, meal plans, shopping lists).
• Not anonymous, and we will not call it that. Two things could still connect a browsing session back to you if we went looking: the page addresses above can contain the identifier of something you created (a specific recipe, for example), and when we investigate an error we can match a browser session to the matching server-side request records, which do identify your account. What we do not do is store analytics events under your account, or use any of this to build a profile of you.

6. Third parties

No third-party analytics providers, no ad networks. Optional analytics and error monitoring are self-hosted on our own EU servers (see section 5).

7. Where your data lives

Your data is hosted in the European Union (Germany) on servers we manage at Hetzner Cloud. We run the application stack ourselves (the PostgreSQL database and Valkey cache); Hetzner provides the underlying infrastructure and does not access your data. Encrypted backups are kept in Germany, alongside the servers. We are adding a second encrypted copy in Switzerland; this section will say so once that is running, and not before.

If this changes, we will update this policy.

8. How long we keep your data

We don't keep data longer than necessary. When you delete something, it is removed from the live database immediately. Automated backups kept for disaster recovery may still contain deleted data for up to 30 days, after which they are permanently deleted. We never restore individual data from backups to reverse a deletion you requested. If we ever perform a full database restore, we make reasonable efforts to re-apply deletion requests that occurred after the backup date.

9. Your rights

You can always:

• See your data: request a copy of everything we have about you.
• Fix your data: correct anything that's wrong.
• Delete your data: request full deletion of your account and data.
• Export your data: get your data in a machine-readable format.
• Restrict processing: ask us to limit how we use your data.
• Object: object to processing based on legitimate interest.
• Withdraw consent: turn off AI suggestions or analytics at any time.

Contact us at contact@grelife.ch. We respond within 30 days.

10. Access to your data

We only look at your data when:

• You ask us for help (support request)
• We need to fix a technical issue affecting your account
• We are legally required to (court order, legal obligation)

We never browse your data out of curiosity.

11. Children

Children can use Grelife only through a parent or guardian's invitation. We don't allow direct registration for minors. The inviting parent is responsible for their children's access.

12. How we protect your data

• Passwords are hashed with Argon2id (industry best practice)
• Sessions use cryptographically random identifiers
• Authentication cookies are HttpOnly and Secure
• CSRF protection via custom headers and SameSite cookies
• Rate limiting on login and registration
• Every query is scoped to your family, so one family's data is never returned to another. Row-level security policies are defined in the database as a second layer; enforcing them at the database role level is in progress

13. If something goes wrong

If we discover a data breach that puts your rights at risk:

• We notify the Swiss data protection authority (FDPIC) as quickly as possible
• We notify the relevant EU authority within 72 hours (if GDPR applies)
• We inform you directly if the breach poses a high risk to you

14. Where to complain

You can lodge a complaint with:

• Switzerland: FDPIC, https://www.edoeb.admin.ch
• EU: The data protection authority in your country

15. Changes to this policy

When we update this policy, we change the date at the top. For significant changes, we notify you by email or in the app.