Privacy policy
Last updated: August 2026
Menú Semanal runs without an account and without personal data. This policy explains exactly what is stored, where and why.
1. Data controller
The data controller is F. Azaza, publisher of the Menú Semanal app. For any question about your data or to exercise your rights: contact@azaza.fr
2. What is collected
The app uses Firebase anonymous authentication: it asks for no name, no email and no phone number, and collects no personally identifiable data. The following is stored: your menu preferences (servings, diet, allergens to avoid, appliances, maximum time, days), the week's plan and its history, your favourites, your shopping list and the dishes you excluded, an anonymous identifier generated by Firebase, and technical data (version, platform, crash reports).
3. Where your data lives
All of the above is stored on your device (via Hive). The plan is generated on the phone itself and the recipe bank travels inside the app: no server is contacted to build your week or your list. None of it leaves the phone. The ONLY thing sent to Cloud Firestore is five technical fields - an anonymous identifier, a profile name and emoji the app never asks you for, a counter of days used and the date of the last session - and they serve to recognise the same device between two launches. Your menus, your list and your favourites stay here.
4. Legal basis
We process this data on the following GDPR bases: your consent (which you can withdraw at any time), performance of the service you request (sync, subscription management) and our legitimate interest in ensuring the operation, security and improvement of the app.
5. What it is used for
To build and keep your menu and your list, sync your data across devices, diagnose crashes and understand in aggregate which features are used. No advertising profile is built and no data is sold.
6. Third-party services
The app uses Google Firebase services: Firebase Authentication (anonymous), Cloud Firestore (sync and remote configuration), Firebase Crashlytics (crash reports) and Firebase Analytics (aggregated usage statistics). Subscriptions are handled by RevenueCat together with the App Store and Google Play. These providers act as processors on our behalf. No advertising is shown and no ad-tracking networks are embedded.
7. International transfers
Some of these providers (Google/Firebase, RevenueCat) may process data on servers located outside the European Union, in particular in the United States. Such transfers are covered by the safeguards provided for by the GDPR, in particular the European Commission's standard contractual clauses.
8. Retention and deletion
Data is kept while your anonymous account remains active; technical diagnostic data for at most 14 months. You can erase the data on this device from Settings → Reset inside the app, or by uninstalling it; the synced copy is not erased on its own. To request deletion of synced data, email us at contact@azaza.fr with your anonymous identifier.
9. Security
Communications with our servers are encrypted via TLS. No method of electronic transmission or storage is 100% secure.
10. Minors
The app is suitable for all audiences. We recommend that minors use it under adult supervision, particularly for subscription management, which happens through the app store.
11. Your rights
Under the GDPR you have the right to access, rectify, request erasure or restriction of, object to the processing of, and port your data: contact@azaza.fr. You also have the right to lodge a complaint with the competent supervisory authority in your country of residence.
12. Changes
Changes will be posted on this page with an updated date.