Your data
What is collected
| Data | Where | Why | Kept until |
|---|---|---|---|
| Name, email, account id | Firebase Auth | Sign in, ownership of notes | You delete your account |
| Note text, summaries, lines, tags, times, author name | Firestore, Sydney | The kitchen's record | Deleted by a member, or the kitchen is deleted |
| Notebooks, summaries, home layout, theme, experience spec | Firestore, Sydney | How your Marcus looks and works | You delete your account |
| Audio | Your phone | Speech becomes text on the phone | Kept with the note, never uploaded |
| Note text sent for sorting, summaries and answers | OpenAI API | Titling, sorting, summarising, answering | Not retained for training; OpenAI abuse-monitoring window up to 30 days |
| Anonymous usage events, and how often the app has been opened | analytics.takr.io | Seeing what gets used, what people leave, and whether they come back | Aggregated; no account link |
| The shape of a saved note: kind, counts, lengths, whether it held a checklist, chart, calculator or photo, crew size | analytics.takr.io | Knowing what Marcus is actually used for, so we build the right thing | Aggregated; no account link |
| Up to four settled tags per note, one word each | analytics.takr.io | Knowing what kitchens talk about | Aggregated; no account link. Only after your kitchen has used the tag on three notes, never a crew name |
| Crash, error and timing reports | otel.takr.io | Fixing what breaks and what is slow | Aggregated; no account link |
| Feedback text, email, screen | Firestore, Sydney | Replying to you | 12 months |
| Beta sign-up email and venue | Firestore, Sydney | Sending the TestFlight link | Public launch, or on request |
What is not collected
- No audio leaves your phone.
- No location, contacts, photos or calendar.
- No advertising identifier, no cross-app tracking, no third-party analytics SDK.
- No note text, no transcript and no question text in analytics, ever.
- No names in analytics: not yours, not your crew's, not your kitchen's.
- No tag that your kitchen has not already used on three separate notes.
Export
In the app: Settings, Your data, Export every note. You get a JSON file with every note in your kitchen, including transcripts with timestamps, summaries, sorted lines, tags, authors and times. Share it anywhere from the iOS share sheet.
Delete
- A note: open it, tap Delete. Gone for the whole kitchen.
- Your account: Settings, Delete my account. Your sign-in, your personal settings, your theme and your experience spec are removed immediately. You may be asked to sign in again first; that is Apple's and Google's rule for destructive actions.
- Your notes after you leave: they stay with the kitchen under the name you used, because the kitchen's record is the point of the product. If you and the kitchen owner both want them gone, email us and we remove them within 30 days.
- A whole kitchen: the owner emails us from the account address and we remove the workspace, its notes and notebooks within 30 days.
Access and correction
Everything we hold about you is visible in the app and in the export. If something is wrong, edit it in the app or write to us. Requests under the Australian Privacy Act or the GDPR: admin@julie-kitchen.com, answered within 30 days. Where the GDPR applies, Redchair AI is the controller and the lawful basis is performance of the contract with you; for analytics and product improvement it is our legitimate interest in knowing what gets used and making Marcus better, with no identifier tied to you and no note text, transcript or name in it.
Security
Everything travels over TLS. Firestore security rules check kitchen membership on every read and write. Model calls carry note text only; never your email, name or account id. Analytics carries counts and shapes only; never note text, a transcript or a name. Keys never ship in the app's source repository.