Privacy Policy

Lievanto is a baking logbook. Your recipes, bakes, notes, and photos are yours. We do not sell your data, we do not show advertising, and we do not track you across other apps or websites.

Most of the app works without an account at all. If you create one, your baking data syncs so you can use more than one device. Nothing you write or photograph is sent to an AI provider unless you ask for AI help on that specific thing, after accepting a disclosure that names exactly what will be sent.

You can export everything you have stored, and you can delete your account from inside the app.

Lievanto is operated by Shab Software Studio, registered in the Dutch Chamber of Commerce (KVK) under number 42095938, at J. Zwartstraat 19, 1507 XG Zaandam, the Netherlands.

Shab Software Studio is the data controller for the personal data described here. This policy covers the Lievanto mobile app and the website at lievanto.com.

For privacy questions, data requests, or help deleting your account, email privacy@lievanto.com. We answer data requests within one month, as the GDPR requires.

The recipe library, calculators, planner, timers, bake logging, and the Learn articles all work signed out. In that state your data stays on your device and there is no account for us to hold. Uninstalling the app removes it.

An account adds sync across devices, cloud photo backup on Pro, the AI Baking Coach, and the ability to recover your data if you lose your phone.

You can create an account with an email address and a password, or with Sign in with Apple or Sign in with Google.

When you use Apple or Google, we receive a signed identity token from them containing a stable account identifier, your email address, and your name, from Apple on the first authorization only, from Google on every sign-in. We use the name only when the account is first created, and we do not receive your password, your contacts, or anything else in your Apple or Google account. We store the account identifier and the email address so we can recognise you next time.

If you choose Hide My Email on the Apple sheet, Apple gives us a private relay address instead of your real one. That works normally: it is the address we store, and the address any email from us is sent to. We never see your real address.

If you sign up with an email address and password, we store your email address, your display name, and a bcrypt hash of your password. We never store your password itself and cannot recover it. An account created through Apple or Google has no password at all; you can add one later using the password-reset flow.

To keep you signed in, the app stores session tokens in the device keychain, which is encrypted by the operating system and excluded from unencrypted device backups.

We do not collect your location, your contacts, your health data, your advertising identifier, or your browsing on other apps and sites. Lievanto contains no advertising SDK and no cross-app tracking.

The Coach is optional and off until you turn it on. Nothing is sent to an AI provider merely because you save a bake, a recipe, a note, or a photo. A request is sent only when you tap to ask for it, and only after you have accepted a disclosure that names what that action sends.

When you use it, we send the selected bake's recipe and plan context, your session notes, observations, timings and ratings, your equipment and kitchen settings, bounded summaries of up to five recent bakes of the same recipe, your typed question or your reviewed voice transcript, and any photo you explicitly chose for that action.

We never send your email address, your password or authentication data, your billing data, server logs, unrelated recipes or sessions, or any other person's content.

Providers.Coach requests are processed by OpenAI and by Google (Gemini); one is used first and the other only if the first attempt fails. Voice transcription is processed by OpenAI. These are business API tiers, which do not use content submitted through them to train the providers' models. The current disclosure inside the app names the exact provider and model in use for each action, and it is versioned: if we change a provider, the disclosure version changes and you are asked again before anything further is sent.

Voice. Microphone access begins only when you tap to record. The recording is used to produce a transcript that you read and can edit before anything is asked. The audio is then deleted; it is never part of your Coach history and is never used for training.

Photos. A photo reaches a provider only when you select it for a specific Coach request, such as reading a crumb or scanning a flour label. Those reads use a temporary, resized, orientation-corrected copy with its metadata, including any location the camera recorded, stripped out. Your original photo is not changed.

Your profile and the learning layer. Lievanto builds a picture of how you bake, so advice fits your kitchen rather than an average one. That picture is computed on your own device from your own bakes, and most of it never leaves it. When you ask the Coach a question, a short summary is included: your per-bake ratings and dates, and the observations shown on your own profile page. You can see exactly what those observations are, and what evidence produced them, on that page.

Lievanto does not use your content to train a Lievanto-owned AI model.

You can withdraw Coach permission at any time in Settings. That stops new requests. Advice already in your history stays until you delete the item or your account.

Photos you attach to a bake stay on your device unless you subscribe to Lievanto Pro, which backs them up. On the Free tier the only time a photo leaves your device is when you explicitly choose one for a Coach action.

Backed-up photos are stored in a private Cloudflare R2 bucket. The app fetches them through Lievanto's own authenticated media API; there is no public bucket URL and no shared link. Camera and photo-library access are requested only at the moment you use them, and you can decline and still use the rest of the app.

We do not sell your data and we do not share it for advertising. We use the following processors to run Lievanto, each under a data processing agreement and each limited to what it needs:

• Fly.io hosts the application server.
• Neon hosts the account database.
• Cloudflare R2 stores backed-up photos privately.
• Resend delivers account emails such as verification and password reset.
• OpenAI and Google process AI Baking Coach requests, and OpenAI processes voice transcription, only when you use those features.
• RevenueCat and Apple handle subscriptions. Apple processes your payment; we never receive your card details.
• Sentry receives error reports so we can fix crashes.
• Vercel hosts this website.

Some of these providers process data outside the European Economic Area, principally in the United States. Those transfers rely on the EU standard contractual clauses, and where applicable the EU-US Data Privacy Framework.

We may also disclose data if the law requires it, or to establish or defend a legal claim.

You can delete your account in the app under Settings, or follow the public account deletion instructions, or email privacy@lievanto.com. Deletion asks you to confirm it is you: with your password, or, if your account signs in with Apple or Google, by signing in with that provider again.

Deleting your account permanently removes your content from our active systems. Photo deletion is queued and retried so it completes even if storage is briefly unavailable. Backups roll off on their own schedule and are not used to restore deleted accounts.

Items you delete individually, such as one recipe or one bake, are hidden from the app immediately and retained in a marked state until you erase the whole account, so that sync across your devices stays consistent. Your data export includes them, with the time you deleted them.

Deleting your Lievanto account does not cancel an Apple subscription. Cancel it in your Apple Account settings first, otherwise Apple will keep billing you.

Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or hand it to another service. Where we rely on your consent, you can withdraw it at any time.

You do not have to ask us for a copy: Settings has a one-tap export that produces a JSON file of your recipes, bakes, plans, starters, calculator presets and history, flour profiles, price book, production runs, recipe lineage, check-ins, photo metadata, Coach advice and feedback, consent history, and usage records. You can add a ZIP of your backed-up photo files. The export leaves out things that are not yours to port or not safe to hand over, such as password hashes, security and rate-limit records, and internal queues; you can still request those in writing.

If you think we have handled your data badly, please tell us first at privacy@lievanto.com. You also have the right to complain to a data protection authority. In the Netherlands that is the Autoriteit Persoonsgegevens.

Traffic is encrypted in transit. Passwords are stored as bcrypt hashes. Session tokens live in the device keychain and are excluded from unencrypted backups. Account emails and their links are held in an encrypted queue rather than in plain text. Access to production systems is limited to the developer who operates the service.

No service can promise perfect security. If a breach affects your rights, we will notify you and the Autoriteit Persoonsgegevens as the GDPR requires.

Lievanto is not for children under 16. Creating an account requires confirming you are 16 or older, including when you sign up with Apple or Google. If you believe a child under 16 has an account, email privacy@lievanto.com and we will delete it.

The app itself contains no analytics or tracking SDK.

This website stores one essential item locally: your cookie choice. Google Analytics, Vercel Web Analytics, and Vercel Speed Insights load only if you choose Accept analytics. If you reject non-essential cookies, or if Do Not Track is on and you have not explicitly accepted, they stay off entirely. Google signals and advertising personalisation are disabled. There are no advertising pixels.

You can change your choice at any time from Cookie settings in the footer.

Lievanto Learn articles are original educational summaries written for Lievanto, with source links for further reading. Third-party text, images, brand names, book titles, and trademarks remain with their owners. If you own a cited work and want a credit changed or removed, email privacy@lievanto.com.

We update this policy when the product changes. If a change materially affects your rights or how your data is used, we will give reasonable notice before it takes effect, and where the change concerns the AI Baking Coach you will be asked to accept the new disclosure before anything further is sent.

Email privacy@lievanto.com with any privacy question or request.