Who we are

AnyDough is a recipe and baking platform where users can create, save, share, schedule and publish dough and bread recipes.

If you have questions about this policy or want to exercise your privacy rights, you can contact us at hello@anydough.com.

What information we collect

The information we collect depends on how you use the service.

• Account and profile information, such as your email address, display name, handle, locale, account state, and measurement preferences.

• Authentication information from sign-in providers you choose to use, such as Google, Apple or email sign-in, together with the identifiers needed to link your account.

• Recipes, drafts, preferments, bake plans, favourites, follows, and other content you create or save through the service.

• Images and files you upload, including avatars and recipe images, plus related crop, variant and source metadata needed to render them.

• Technical and usage information, such as IP address, browser or device information, request metadata, pages visited, and logs needed for security, reliability and abuse prevention.

• Cookie and consent preferences, including whether you have accepted or declined optional tracking.

• Communications data when you contact us or when we send account, moderation or sign-in related emails.

How we use your information

• To create and maintain your account and let you sign in securely.

• To host, calculate, save, display and publish recipes, bake plans and other user-generated content.

• To process uploads, generate image variants, and serve recipe and avatar media.

• To moderate content and avatars, investigate abuse, and enforce our rules.

• To operate core features such as favourites, follows, recipe sharing, public profiles and schedules.

• To send transactional emails such as sign-in links or codes, account notices, and recipe moderation updates.

• To measure and improve the service where you have consented to optional tracking.

• To comply with legal obligations, resolve disputes, and protect the service, our users and the public.

Our legal bases

Where UK GDPR or similar laws apply, we generally rely on one or more of the following legal bases: performance of a contract with you, our legitimate interests in operating and securing the platform, your consent where required, and compliance with legal obligations.

For example, we rely on consent for optional tracking technologies, and on contract or legitimate interests for account operation, publishing workflows, content moderation, security and service administration.

Public content and profiles

If you publish a recipe or use public profile features, some of your information becomes visible to other users and visitors. This can include your handle, profile page, published recipes, recipe images, recipe descriptions, and related public metadata.

Draft recipes, private working data and unpublished moderation items are not intended to be publicly visible unless and until you publish them or otherwise choose to make them public through the service.

Account deletion and retained public content

If you delete your account, we currently remove account access, sessions, linked sign-in accounts, drafts, private recipe data, personal settings, user files and similar account-level data.

Published recipes may remain online and may be reassigned to a generic Deleted user profile so that public recipe links do not immediately break.

Your current and historical handles may remain reserved after account deletion to reduce impersonation risk and protect existing links.

Cookies and similar technologies

We use cookies and similar technologies for essential site functions and, where you consent, for analytics and tag-based tracking.

Essential cookies may be used for sign-in, security, localisation, session handling and storing your cookie choices.

Optional tracking is controlled through our consent prompt. At the time of writing, tracking through Google Tag Manager is only initialised after consent, except where equivalent native-app tracking permissions apply.

Third-party services and processors

We use third-party providers to help operate the service. Depending on how you use AnyDough, these may process personal data on our behalf or under their own policies.

• Authentication and account infrastructure, including Firebase / Firestore and the sign-in providers you choose, such as Google or Apple.

• AWS S3 and related infrastructure to store and deliver uploaded media files.

• SMTP2GO for transactional email delivery.

• Google services for reCAPTCHA and, where consented, analytics or tag management.

• OpenAI or similar AI providers if and when AI-assisted recipe or image features are made available through the product.

reCAPTCHA and abuse prevention

We use Google reCAPTCHA and related anti-abuse measures on certain authentication flows to protect the service from spam, automated abuse and fraud.

Use of reCAPTCHA is also subject to Google's Privacy Policy and Terms of Service.

How we share information

We do not sell your personal information. We may share personal information in the following situations:

• With service providers who host, secure, analyse, deliver email, store files or otherwise help us run the platform.

• With other users or the public when you publish recipes, maintain a public profile, or otherwise choose to share content publicly.

• With moderators or administrators where needed to review content, investigate misuse, or enforce platform rules.

• Where required by law, regulation, court order or valid legal process.

• In connection with protecting rights, safety, fraud prevention, abuse investigations or platform security.

International transfers

Some of our providers may process personal data outside your country, including outside the UK or EEA. Where applicable, we aim to rely on appropriate safeguards such as contractual protections, adequacy decisions, or equivalent lawful transfer mechanisms.

How long we keep information

We keep personal information for as long as reasonably necessary to operate the service, comply with legal obligations, resolve disputes, enforce agreements, and protect the platform.

Different categories of data are retained for different periods. For example, account and content records may be retained while your account is active, logs may be retained for security and operational purposes, and published recipe data may remain longer if it has been made public.

Where we no longer need information, we aim to delete it, anonymise it, or otherwise de-identify it unless we are required to retain it.

Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict or object to certain processing of your personal information, and in some cases to data portability or withdrawal of consent.

You can also control some information directly through your account, such as your profile details, handle, locale, measurement preferences and public content settings where available.

To exercise a privacy request, contact us at hello@anydough.com. You may also have the right to complain to your local data protection authority. If you are in the UK, that may include the Information Commissioner's Office.

Security

We use a combination of technical and organisational measures to protect personal information. However, no service can guarantee absolute security, and you use the internet and the service at your own risk.

You are responsible for keeping your login methods, email account and any linked authentication providers secure.

Children

AnyDough is not intended for children who are below the age required in their country to consent to online services. If you believe a child has provided personal information to us inappropriately, please contact us.

Changes to this policy

We may update this privacy policy from time to time to reflect product, legal or operational changes. When we do, we will update the last updated date on this page.