Privacy Policy

Last updated: October 5, 2026

Fond is operated by Fond Kitchen, a French société par actions simplifiée (SAS) with share capital of €500, registered with the Paris Trade and Companies Register under 130 417 363 R.C.S. Paris. Its registered office is 173 rue de Courcelles, 75017 Paris, France. See our Legal Notice.

This policy explains how we handle personal data when you visit fond.kitchen or use the Fond application.

Data controller

Fond Kitchen is the controller responsible for the personal data described in this policy. Privacy requests can be sent to hello@fond.kitchen or to our registered office.

What we collect

Waitlist & account

When you join our waitlist or create an account, we collect your email address and account identifiers. We use WorkOS AuthKit to handle sign-in, credential verification, social sign-in providers, and sessions. Depending on how you sign in, account data may include your name, profile image, verification status, and session information. Fond stores your profile and product data and uses an account identifier to connect your data and subscription status.

Usage analytics

We use PostHog to understand how people use Fond. On the website this may include pages visited, button clicks, device type, and similar usage information. In the mobile app this may include product events such as app opens, screen views, onboarding steps, paywall events, import outcomes, meal plan actions, shopping list actions, August usage counts, device family, app version, OS version, locale, authentication state, and subscription status.

Mobile analytics are designed not to include recipe titles, ingredients, instructions, chat text, imported URLs, email addresses, phone numbers, or user-entered notes. Session replay is disabled for the v1 mobile app.

Mobile product events can be linked to your Fond account identifier after sign-in; omitting your email does not make those events anonymous. If you choose to answer an in-app survey, PostHog can also receive the answers you provide.

Recipe & meal data

When you use the Fond app, your recipes, recipe imports, photos or screenshots you select for import, meal plans, shopping lists, pantry settings, recipe notes, preferences, August messages, and related app content are stored to provide the service. We do not claim ownership of your content; imported material can remain subject to its original creator’s rights. You can request a copy of your data or account deletion by contacting us. See Delete your Fond account for the account deletion request path and retention notes.

AI processing

Some Fond features use AI to parse recipes, extract recipe structure, enrich recipe metadata, resolve ingredients, detect timers, and answer August cooking questions. To provide those features, relevant inputs such as recipe text, selected images, imported URLs, pantry or planning context, and August messages may be processed by the Fond backend and by AI service providers, including OpenRouter and model providers routed through OpenRouter. OpenRouter says it does not use inputs or outputs for model training, but model provider practices can differ. Avoid sending sensitive personal information in recipes, images, or August messages.

Purchases and subscriptions

If you subscribe in the app, purchases are processed by Apple or Google Play and entitlement status is managed with RevenueCat. Fond receives subscription and entitlement information such as product identifiers, purchase status, platform, app user ID, and restore status. Fond does not receive or store your full payment card details.

Diagnostics and security

We use Sentry to collect crash reports, handled errors, stack traces, device and OS details, app version, build number, and related technical context so we can diagnose bugs and protect the service. We may also process IP address, request metadata, logs, and security events through our backend and infrastructure providers.

Cookies and device storage

Essential storage supports sign-in in the application, your chosen theme, waitlist confirmation, and browser tools you request, such as the local meal planner. Browser-saved plans remain on that browser until you clear them or its storage.

On this website, PostHog measures page visits and the interactions described above in cookieless mode: it sets no cookies and stores nothing on your device. To count unique visitors, PostHog's servers compute a hash of your IP address and browser details with a salt that changes every day, so visits cannot be linked from one day to the next. The results are used only for aggregate audience statistics. No session replay, personal profiles, or advertising tracking are used.

You can turn website analytics off at any time using Analytics preferences, also available in the footer. We store that choice in your browser for 180 days. Turning analytics off stops future collection; it does not erase events already collected. Contact us if you also want to exercise your data rights. The website preference does not control the mobile app’s telemetry.

We do not sell your data, use it for advertising, or share it with data brokers. We do not train our own AI models on your personal recipes or August messages.

Data storage & security

We use HTTPS for service connections and restrict access to data and service systems. Security also depends on how production infrastructure and provider accounts are configured; no online service can promise absolute security.

Recipients and international processing

Access is limited to authorised people at Fond Kitchen and the providers needed to operate the feature concerned. Authentication, email, analytics, diagnostics, infrastructure, and AI providers process relevant data for their functions. Apple and Google also process store-account and purchase data under their own privacy policies.

Providers can process data outside the European Economic Area, including in the United States. A provider’s privacy policy alone is not a transfer safeguard. Where GDPR requires a transfer safeguard, this must be an applicable adequacy decision or an appropriate mechanism such as the European Commission’s standard contractual clauses, with any necessary supplementary measures. Contact hello@fond.kitchen for information about the safeguards applicable to your data and how to obtain a copy.

Purposes and legal bases

  • Account, sign-in, saved content, synchronisation, and requested AI features: performance of our contract with you (GDPR Article 6(1)(b)). Your email and account identifiers are necessary to provide an account. Recipe inputs, images, and August messages are optional; choosing not to provide them limits the corresponding feature.
  • Purchases and subscription access: performance of the contract for entitlement checks, purchase restoration, and billing support; compliance with legal obligations for records we must keep for tax or accounting purposes (Article 6(1)(c)).
  • Support, essential diagnostics, and security: our legitimate interests in answering requests, fixing faults, preventing fraud, and protecting accounts and infrastructure (Article 6(1)(f)); performance of the contract where the request concerns providing your service.
  • Waitlist and product emails: your consent (Article 6(1)(a)). You can withdraw it using the unsubscribe link in marketing emails or by contacting us. Necessary account, security, purchase, or support messages are separate from marketing.
  • Website audience measurement: our legitimate interest in measuring how the website is used (Article 6(1)(f)), limited to cookieless aggregate statistics; see Cookies and device storage. You can object at any time by turning analytics off.
  • Mobile usage analysis: our legitimate interest in understanding feature use and improving Fond, subject to your right to object. This does not replace any consent required for access to information on your device.

We do not use August to make decisions with legal or similarly significant effects about you.

How long we keep data

We keep account and saved-content data while providing your account. When you request erasure, we assess the request and remove the personal data covered by it, subject to the limited legal exceptions explained below. Sending a request does not itself delete your account. See the deletion instructions.

Waitlist data is used to manage your place and the updates you request. Unsubscribing stops marketing but does not by itself delete the waitlist record; you can separately request erasure. We may keep the minimum suppression information needed to honour your choice.

Support records are kept for resolving your request and any resulting complaint. Security and diagnostic records are kept only for investigating faults, abuse, or incidents. Where a law requires records to be retained, or records are necessary for a specific legal claim, we retain the relevant records for the applicable legal period, with access restricted to that purpose.

Deleted data can remain temporarily in recovery copies and service-provider logs until their retention cycles expire. Recovery copies are not used as an active account. Apple and Google maintain their own purchase and store-account records under their policies.

Maximum periods:

  • Account and saved content: while your account is open. If an account has been inactive for 3 years, we email you and then delete it unless you sign in again.
  • Waitlist and marketing emails: 3 years after your last contact with us, or until you ask us to delete the record.
  • Support messages: 3 years after your last message.
  • Product analytics events: 25 months.
  • Crash reports: 90 days.
  • Server and security logs: 12 months.
  • Backups and recovery copies: 30 days after deletion.
  • Accounting and tax records: 10 years, as required by French law.

Your rights

You can at any time:

  • Access your data by requesting a copy by email
  • Request deletion of your account and associated personal data from account settings or through the account deletion request path
  • Manage subscriptions through the App Store or Google Play account where you subscribed
  • Unsubscribe from marketing emails using their unsubscribe link
  • Correct inaccurate personal data by contacting us

We respond to data-rights requests without undue delay and normally within one month of receiving them. If complexity or the number of requests requires up to two additional months, we explain the extension within the first month. We request proportionate identity verification only where needed. If we cannot fulfil a request, we explain why and the available complaint routes. Requests are normally free.

Subject to the conditions set by applicable data protection law, you can request access, correction, erasure, restriction of processing, or a portable copy of your personal data. You can object to processing based on legitimate interests and withdraw consent where processing relies on it. Withdrawing consent does not affect earlier lawful processing. Contact hello@fond.kitchen to exercise these rights; we may need to verify your identity. You can also lodge a complaint with the French data protection authority, the CNIL, or your local supervisory authority.

Third-party services

  • WorkOS AuthKit — credential handling, verification, social providers, and session services
  • RevenueCat — subscription entitlement management
  • Apple App Store and Google Play — app distribution, in-app purchases, subscriptions, and store account management
  • PostHog — product analytics
  • Sentry — crash and error diagnostics
  • OpenRouter and model providers — AI routing and generation for August, recipe import, and recipe enrichment
  • Google Cloud — application servers and database hosting
  • Backblaze B2 — storage of recipe photos and imported images
  • Weaviate Cloud — recipe search indexing
  • Temporal Cloud — coordination of background tasks such as recipe imports
  • Cloudflare — website hosting, CDN, and media delivery
  • Resend — waitlist, product, and transactional email delivery

Children

You must be at least 16 to create a Fond account, and Fond is not directed at children under 16. If you believe someone under 16 has created an account or provided personal data, contact us so we can delete it.

Changes to this policy

We may update this policy as the product evolves. Significant changes will be communicated via email to registered users. The “last updated” date at the top reflects the most recent revision.

Contact

Questions about your privacy? Email us at hello@fond.kitchen.

Contact Fond Kitchen at hello@fond.kitchen, by phone at +33 6 99 95 21 14, or by post at 173 rue de Courcelles, 75017 Paris, France.