This is a translation. In case of discrepancies, the German version prevails.
Last Updated: October 2026
The data controller responsible for your personal data is:
Cornelius Illi Ventures UG (haftungsbeschränkt)
Mozartstraße 7, 72636 Frickenhausen, Germany
Email: privacy@dishwise.de
When you sign in via Google, we receive your email address, name, and profile picture to create and manage your account.
We store the content you create or import — recipes (text and images), cookbooks, and sharing settings — so it’s available to you across devices and to the people you choose.
To keep the App stable and secure, we automatically collect:
After you sign in, the App asks once whether DishWise may collect usage data; you choose “Allow” or “Decline”. Usage analytics are off until you allow them. With your permission we collect: screens you open, imports, cooking mode, timers and cooked recipes, shared recipes and voice commands, device type and app version, and a pseudonymous account and household ID. We use Google Analytics for Firebase (section 4); the data is kept for at most 14 months.
When you allow, decline, withdraw or object, we keep a record of that choice: your account ID, the purpose, your choice, the version of the text you were shown, the language, the app version and platform, and the time. This record lets us prove and respect your choices (Art. 7(1) GDPR). It contains no IP address and no advertising or device identifier. We keep each record until the end of the calendar year after you withdraw, object, or delete your account, plus three years (Art. 6(1)(c) and (f), Art. 17(3)(e) GDPR); afterwards it is deleted. We count these records in aggregate, without any reference to a person, to know how many people allow usage analytics.
We process your data based on the following legal grounds under the GDPR:
| Purpose | Legal Basis | Examples |
|---|---|---|
| Providing the Service | Art. 6(1)(b) — Contract | Account management, recipe storage, shared cookbooks, AI-powered recipe import |
| Stability and Security | Art. 6(1)(f) — Legitimate Interest | Crash reporting, error monitoring, abuse prevention; you can object at any time |
| Test participation | Art. 6(1)(f) — Legitimate Interest | Using what you report in the App to improve DishWise while it is in testing; you can object at any time |
| Usage analytics | Art. 6(1)(a) — Consent; § 25(1) TDDDG | Usage statistics, only with your permission |
| News by email | Art. 6(1)(a) — Consent; § 7(2) no. 2 UWG | Newsletter, only after you confirmed by link |
| Records of your choices | Art. 6(1)(c) and (f) | Proving and respecting your consent and objection choices |
| Legal Obligations | Art. 6(1)(c) — Legal Requirement | Tax records, requests from authorities |
If you use DishWise in the test, we occasionally write to your account’s email address: what a new version changes, requests for feedback on the test, and service notices. The legal basis is our legitimate interest in running the test and improving DishWise (Art. 6(1)(f) GDPR). We only send advertising or newsletters with your consent. You can object to these mails at any time: through the unsubscribe link in each of them, or by writing to privacy@dishwise.de.
If you allow “News by email” in the App, we first send you an email with a link. Only once you confirm it do we write to you when there is something new in DishWise. For this we process your email address, your first name and your language setting. The legal basis is your consent (Art. 6(1)(a) GDPR, § 7(2) no. 2 UWG). We keep a record of your request, the confirmation and a withdrawal as described in 2.5. If you do not confirm the link, we delete the request after seven days. You can withdraw your consent at any time: through the unsubscribe link in every email, in the App under Menu › Privacy Management, or by writing to privacy@dishwise.de.
We use the following services to operate DishWise. The providers process your data on our behalf.
Our backend infrastructure is provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland).
| Service | What It Does | Data Processed |
|---|---|---|
| Firebase Authentication | Secure sign-in via Google | Email, name, profile picture |
| Cloud Firestore | Storage of recipes, cookbooks, and settings | Your Content (see 2.2) |
| Firebase Cloud Storage | Storage of recipe images | Uploaded and imported images |
| Firebase Crashlytics | Crash and error reports to help us fix bugs | Device model, OS version, app version, random installation ID, error type and stack trace |
| Google Analytics for Firebase (GA4) | Usage statistics, only with your permission | Feature usage, session data, pseudonymous account and household ID (see 2.4) |
Advertising features are switched off: DishWise sends no advertising signals and uses no advertising ID for analytics.
For the AI-powered import of recipes from links and photos, we use Gemini models via Google Cloud Vertex AI in the EU. When you import a recipe, the page text or the photo is sent to Google Cloud for processing. Google does not use this data to train its models.
We send the welcome email, the confirmation of an account deletion, the emails about the test, and the news by email with its confirmation email through Brevo (Sendinblue SAS, 17 rue Salneuve, 75017 Paris, France). For this, Brevo processes your email address, your name and the delivery data of the email (delivery, bounces, unsubscribes). Brevo adds a tracking pixel to these emails that records whether and when an email was opened.
You decide in the App under Menu › Privacy Management:
| Purpose | Default | What You Can Do |
|---|---|---|
| Usage Analytics (Google Analytics for Firebase) | Off | Allow or decline when asked; switch on or off at any time |
| Crash and Error Reports (Firebase Crashlytics) | On | Switch off at any time — that is your objection (Art. 21 GDPR) |
| Taking part in the test | On | Switch off at any time — that is your objection (Art. 21 GDPR) |
Changes take effect immediately and apply to the device you change them on; usage analytics and crash and error reports are set per installation. Withdrawing your consent does not affect processing before the withdrawal. If you decline usage analytics, the App does not ask again unless what we ask for changes, and then not within six months.
We do not sell your data or share it with third parties for marketing or advertising purposes.
We only disclose your data when:
Your data is primarily stored on Google Cloud servers in the European Union. Google Analytics for Firebase and Firebase Crashlytics may also process data in the USA (Google LLC). For transfers outside the EEA we rely on the EU-US Data Privacy Framework (adequacy decision of the European Commission) and, where needed, the European Commission’s Standard Contractual Clauses.
You can delete your account at any time in the App or at https://dishwise.de/delete-account. We then delete at once your account, your profile, your imports, your feedback on recipes, the links you shared recipes with, and a cookbook that only you own, with all its recipes and images. A cookbook you share with others stays with its other members. If someone saved a recipe you shared to their cookbook, it stays there with your name as the sender; we remove your account ID from it.
Under the GDPR, you have the right to:
Right to object: Where we process data based on our legitimate interest (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation (Art. 21 GDPR). For crash and error reports and taking part in the test, the switch in the App is enough (section 5).
To exercise your rights, email us at privacy@dishwise.de. You also have the right to lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.
We protect your data with standard measures, including:
DishWise is not intended for anyone under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
We update this Privacy Policy when DishWise changes. We announce material changes in the App. The “Last Updated” date at the top shows when the policy was last revised.