1. Who we are
This Privacy Policy explains how Sous, operated by Gonçalo Regalado Unipessoal, Lda (“Sous”, “we”, “us”, “our”), collects, uses, and protects your information when you use the Sous mobile application and related services (the “App”).
For users in the EU/EEA or UK, Gonçalo Regalado Unipessoal, Lda is the “data controller” for your personal data.
You can contact us at [email protected].
2. Data we collect
We collect only data that is necessary to provide and improve Sous.
2.1. Account & identity data
- Email address or identifier from Apple/Google sign-in
- Display name or nickname (if you choose to provide it)
2.2. Subscription & transaction data
- Plan type (Free, Plus)
- Subscription status, renewal dates
- Limited transaction metadata from App Store / Google Play (we do not see full card details)
2.3. Usage data
- Recipes you generate, including ingredients, instructions, and selected robot models
- Interaction events (for example app opens, button taps, errors)
- Basic device and app information (OS version, app version, language, country/region)
2.4. Support communications
- Messages you send to us and associated contact information.
We do not intentionally collect special categories of data (such as health, political opinions, or religious beliefs). Please avoid including such information in your prompts.
3. How we use your data
We process your personal data for the following purposes:
To provide and operate the App
- Creating and managing your account
- Generating recipes and saving your history
- Processing subscriptions and payments
Legal basis: performance of a contract (GDPR Art. 6(1)(b)).
To improve and protect Sous
- Analyzing aggregated usage patterns
- Debugging, fixing bugs, and improving performance
Legal basis: our legitimate interests in operating and improving the App (GDPR Art. 6(1)(f)), balanced against your rights.
To communicate with you
- Responding to support requests
- Sending important service or security messages
Legal basis: performance of a contract and legitimate interests.
Optional analytics or marketing (if enabled)
- Understanding how features are used
- Sending occasional product updates or offers (email or in-app)
Legal basis: your consent where required (GDPR Art. 6(1)(a)). You can withdraw consent at any time.
We do not sell your personal data or share it with data brokers.
4. AI models and third-party services
When you request a recipe, we send your prompt and relevant context (such as ingredients, dietary preferences, robot model, and previous steps in the session) to third-party AI model providers to generate content. These providers process the data on our behalf in accordance with data-processing agreements and applicable law.
We also use third parties for:
- authentication (Apple, Google)
- hosting and database services
- analytics and crash/error reporting
These third parties may be located in other countries. We require them to protect your data and use it only to provide services to us.
We do not embed third-party advertising SDKs for targeted ads.
5. Data sharing
We may share your data with:
- Service providers / processors, such as hosting providers, AI model providers, analytics tools, and payment/identity providers, under contracts that require them to protect your data and use it only to provide services to us.
- Authorities or legal advisors, where necessary to comply with legal obligations, enforce our rights, or protect our users or others.
We do not share your personal data with third parties for their own marketing purposes.
6. International transfers
Some service providers are located outside Portugal and the EU/EEA. When we transfer your personal data internationally, we do so in compliance with applicable law, using appropriate safeguards such as Standard Contractual Clauses where required.
7. Data retention & deletion
We keep your personal data only as long as necessary for the purposes described in this Policy:
- Account & subscription data: for as long as your account is active and for a reasonable period afterwards to comply with legal and accounting requirements.
- Recipe history & usage data: while your account is active or until you delete it, plus a short backup period.
When you request deletion of your account, we will delete or anonymize personal data within a reasonable period (normally within 30 days), except where we must retain some information to comply with legal obligations or to resolve disputes. See how to delete your account.
8. Your rights
If you are in the EU/EEA or UK, you have the following rights under GDPR:
- Right of access – obtain a copy of your personal data we hold.
- Right to rectification – correct inaccurate or incomplete data.
- Right to erasure – request deletion of your data in certain circumstances.
- Right to restriction – ask us to restrict processing under certain conditions.
- Right to data portability – receive your data in a structured, commonly used, machine-readable format.
- Right to object – object to processing based on our legitimate interests.
- Right to withdraw consent – where processing is based on consent, you can withdraw it at any time.
You can exercise these rights by contacting us at [email protected]. We may need to verify your identity before responding.
You also have the right to lodge a complaint with your local data protection authority.
9. Children’s privacy
Sous is not directed to children under 13, and we do not knowingly collect personal data from children under 13. If we learn that a child under 13 has provided personal data, we will delete it.
If you are a parent or guardian and believe your child has provided us with personal data, please contact us.
10. App permissions & data access
We only request device permissions that are necessary for the App to function (for example, notifications). When we ask for a permission, we explain why we need it. You can grant or revoke permissions at any time in your device settings.
11. Cookies & similar technologies
If we use cookies or similar technologies in any web components or embedded webviews, we will:
- explain what they are used for (e.g. authentication, analytics)
- ask for consent where required by law
- allow you to change your preferences
12. Security
We use reasonable technical and organizational measures to protect your personal data, including encryption in transit, access controls, and monitoring for unauthorized access. However, no system can be completely secure; we cannot guarantee absolute security.
13. Changes to this Policy
We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date and, where required, notify you via the App or email. Please review this Policy regularly.
14. Contact
For any questions about this Privacy Policy or our data practices, contact:
Gonçalo Regalado Unipessoal, Lda
Portugal
Email: [email protected]