Privacy policy
Last updated: 2 October 2026
Manjo is built EU-first: your data lives on EU infrastructure, we collect the minimum needed to run the service, and we never sell it. No ad networks. No ad tracking. This policy explains what we process and why, in plain language.
1. Who is responsible
The data controller is Code & Canvas, registered in the Netherlands (KvK 99849526). Contact for anything privacy-related: info@getmanjo.app.
2. What we collect on this website
This website runs no analytics, no tracking pixels and no advertising cookies. It sets no cookies at all. That is why there is no cookie banner: there is nothing to consent to.
If you join the waitlist, we store your email address and the time you signed up — nothing else. Legal basis: your consent (art. 6(1)(a) GDPR). We use it only to email you about the Manjo launch. Every email includes an unsubscribe link, and you can have your address deleted at any time by using that link or emailing us. Waitlist data is deleted once the launch campaign ends.
3. What the app collects
| Data | Purpose | Legal basis |
|---|---|---|
| Account data (email, name, sign-in identifiers) | Creating and securing your account | Contract (art. 6(1)(b)) |
| Your content (recipes, photos, cookbooks, lists, preferences) | Providing the service: storing, syncing and sharing with people you choose | Contract (art. 6(1)(b)) |
| Content you submit for extraction (links, text, images, video captions) | Turning it into structured recipes using AI providers | Contract (art. 6(1)(b)) |
| Usage counters (e.g. AI captures, video imports per month) | Enforcing plan limits and fair use | Contract (art. 6(1)(b)) |
| Crash reports and diagnostic events | Fixing bugs and keeping the service reliable | Legitimate interest (art. 6(1)(f)) |
| Subscription status | Unlocking Pro; billing itself is handled by Apple | Contract (art. 6(1)(b)) |
4. Where your data lives, and who processes it
Primary storage is in the EU (Frankfurt, eu-central-1). We use a small set of processors under data processing agreements:
| Processor | What for | Region |
|---|---|---|
| Supabase | Database, authentication, storage, functions | EU (Frankfurt) |
| Mistral AI | Recipe extraction and AI features | EU |
| Resend | Transactional and launch email | EU sending region |
| Sentry | Crash reporting | EU data residency |
| PostHog | Product analytics (app only, not this website) | EU Cloud |
We do not sell personal data and we do not share it with advertisers or data brokers — with anyone whose business is knowing things about you.
5. How long we keep it
Your content stays as long as your account exists. Deleting your account removes your personal data and content, except where we must keep records for legal reasons (for example, financial records). Crash and diagnostic data is kept for at most 90 days.
6. Your rights
Under the GDPR you can, at any time:
- access the data we hold about you and receive a machine-readable export;
- correct or delete your data (account deletion is available in the app);
- restrict or object to processing based on legitimate interest;
- withdraw consent (for example, waitlist emails) with effect for the future;
- complain to a supervisory authority — in the Netherlands, the Autoriteit Persoonsgegevens.
To exercise any of these, email info@getmanjo.app. We respond within 30 days.
7. Children
Manjo is not for children under 13, and we do not knowingly process their data. If you believe a child under 13 has an account, contact us and we will remove it.
8. Changes to this policy
If we change this policy in a way that matters, we will tell you in the app or by email before the change takes effect. The date at the top always shows the current version.