← Back to Home

Privacy Policy

This is a translation. In case of discrepancies, the German version prevails.

Last Updated: October 2026

1. Data Controller

The data controller responsible for your personal data is:

Cornelius Illi Ventures UG (haftungsbeschränkt)
Mozartstraße 7, 72636 Frickenhausen, Germany
Email: privacy@dishwise.de

2. What Data We Collect

2.1 Account Data

When you sign in via Google, we receive your email address, name, and profile picture to create and manage your account.

2.2 Your Content

We store the content you create or import — recipes (text and images), cookbooks, and sharing settings — so it’s available to you across devices and to the people you choose.

2.3 Technical Data

To keep the App stable and secure, we automatically collect:

2.4 Usage Data (Only With Your Permission)

After you sign in, the App asks once whether DishWise may collect usage data; you choose “Allow” or “Decline”. Usage analytics are off until you allow them. With your permission we collect: screens you open, imports, cooking mode, timers and cooked recipes, shared recipes and voice commands, device type and app version, and a pseudonymous account and household ID. We use Google Analytics for Firebase (section 4); the data is kept for at most 14 months.

2.5 Records of Your Choices

When you allow, decline, withdraw or object, we keep a record of that choice: your account ID, the purpose, your choice, the version of the text you were shown, the language, the app version and platform, and the time. This record lets us prove and respect your choices (Art. 7(1) GDPR). It contains no IP address and no advertising or device identifier. We keep each record until the end of the calendar year after you withdraw, object, or delete your account, plus three years (Art. 6(1)(c) and (f), Art. 17(3)(e) GDPR); afterwards it is deleted. We count these records in aggregate, without any reference to a person, to know how many people allow usage analytics.

3. How We Use Your Data

We process your data based on the following legal grounds under the GDPR:

PurposeLegal BasisExamples
Providing the ServiceArt. 6(1)(b) — ContractAccount management, recipe storage, shared cookbooks, AI-powered recipe import
Stability and SecurityArt. 6(1)(f) — Legitimate InterestCrash reporting, error monitoring, abuse prevention; you can object at any time
Test participationArt. 6(1)(f) — Legitimate InterestUsing what you report in the App to improve DishWise while it is in testing; you can object at any time
Usage analyticsArt. 6(1)(a) — Consent; § 25(1) TDDDGUsage statistics, only with your permission
News by emailArt. 6(1)(a) — Consent; § 7(2) no. 2 UWGNewsletter, only after you confirmed by link
Records of your choicesArt. 6(1)(c) and (f)Proving and respecting your consent and objection choices
Legal ObligationsArt. 6(1)(c) — Legal RequirementTax records, requests from authorities

Emails during the test

If you use DishWise in the test, we occasionally write to your account’s email address: what a new version changes, requests for feedback on the test, and service notices. The legal basis is our legitimate interest in running the test and improving DishWise (Art. 6(1)(f) GDPR). We only send advertising or newsletters with your consent. You can object to these mails at any time: through the unsubscribe link in each of them, or by writing to privacy@dishwise.de.

News by email

If you allow “News by email” in the App, we first send you an email with a link. Only once you confirm it do we write to you when there is something new in DishWise. For this we process your email address, your first name and your language setting. The legal basis is your consent (Art. 6(1)(a) GDPR, § 7(2) no. 2 UWG). We keep a record of your request, the confirmation and a withdrawal as described in 2.5. If you do not confirm the link, we delete the request after seven days. You can withdraw your consent at any time: through the unsubscribe link in every email, in the App under Menu › Privacy Management, or by writing to privacy@dishwise.de.

4. Services We Use

We use the following services to operate DishWise. The providers process your data on our behalf.

Google / Firebase

Our backend infrastructure is provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland).

ServiceWhat It DoesData Processed
Firebase AuthenticationSecure sign-in via GoogleEmail, name, profile picture
Cloud FirestoreStorage of recipes, cookbooks, and settingsYour Content (see 2.2)
Firebase Cloud StorageStorage of recipe imagesUploaded and imported images
Firebase CrashlyticsCrash and error reports to help us fix bugsDevice model, OS version, app version, random installation ID, error type and stack trace
Google Analytics for Firebase (GA4)Usage statistics, only with your permissionFeature usage, session data, pseudonymous account and household ID (see 2.4)

Advertising features are switched off: DishWise sends no advertising signals and uses no advertising ID for analytics.

Gemini via Google Cloud Vertex AI

For the AI-powered import of recipes from links and photos, we use Gemini models via Google Cloud Vertex AI in the EU. When you import a recipe, the page text or the photo is sent to Google Cloud for processing. Google does not use this data to train its models.

Email delivery (Brevo)

We send the welcome email, the confirmation of an account deletion, the emails about the test, and the news by email with its confirmation email through Brevo (Sendinblue SAS, 17 rue Salneuve, 75017 Paris, France). For this, Brevo processes your email address, your name and the delivery data of the email (delivery, bounces, unsubscribes). Brevo adds a tracking pixel to these emails that records whether and when an email was opened.

5. Your Choices

You decide in the App under Menu › Privacy Management:

PurposeDefaultWhat You Can Do
Usage Analytics (Google Analytics for Firebase)OffAllow or decline when asked; switch on or off at any time
Crash and Error Reports (Firebase Crashlytics)OnSwitch off at any time — that is your objection (Art. 21 GDPR)
Taking part in the testOnSwitch off at any time — that is your objection (Art. 21 GDPR)

Changes take effect immediately and apply to the device you change them on; usage analytics and crash and error reports are set per installation. Withdrawing your consent does not affect processing before the withdrawal. If you decline usage analytics, the App does not ask again unless what we ask for changes, and then not within six months.

6. Sharing and Disclosure

We do not sell your data or share it with third parties for marketing or advertising purposes.

We only disclose your data when:

7. Transfers Outside the EU

Your data is primarily stored on Google Cloud servers in the European Union. Google Analytics for Firebase and Firebase Crashlytics may also process data in the USA (Google LLC). For transfers outside the EEA we rely on the EU-US Data Privacy Framework (adequacy decision of the European Commission) and, where needed, the European Commission’s Standard Contractual Clauses.

8. Data Retention

You can delete your account at any time in the App or at https://dishwise.de/delete-account. We then delete at once your account, your profile, your imports, your feedback on recipes, the links you shared recipes with, and a cookbook that only you own, with all its recipes and images. A cookbook you share with others stays with its other members. If someone saved a recipe you shared to their cookbook, it stays there with your name as the sender; we remove your account ID from it.

9. Your Rights

Under the GDPR, you have the right to:

Right to object: Where we process data based on our legitimate interest (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation (Art. 21 GDPR). For crash and error reports and taking part in the test, the switch in the App is enough (section 5).

To exercise your rights, email us at privacy@dishwise.de. You also have the right to lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.

10. Security

We protect your data with standard measures, including:

11. Children

DishWise is not intended for anyone under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

12. Changes to This Policy

We update this Privacy Policy when DishWise changes. We announce material changes in the App. The “Last Updated” date at the top shows when the policy was last revised.


Imprint · Terms of Service · Delete Account