Legal
Privacy Policy
Last updated: 12 September 2026
In short
Noodly requires an account, so your recipes, your list and your plan can follow you to another phone. Beyond what that needs, we collect nothing: no analytics, no ads, and no tracking for any purpose.
What stays on your device
Your favourites, your own recipes, your shopping list, your weekly plan and your settings are written to your phone’s storage first, which is why the app works with no signal. Your account then carries a copy to our server.
What we store on our server
- Your email address, so you can sign in.
- Your password, never in readable form — only as a bcrypt hash.
- The content you sync: favourites, own recipes, shopping list, weekly plan and settings. This is held on our server so it can reach your other device.
- If you sign in with Apple or Google, we receive your email address and name from them. We never see your password.
- Your name, if you give it: the first and last name from sign-up, used only to address you in the app. Clearing the fields in the app removes it.
- Your subscription status: which plan you are on, until when it is valid, whether it renews, and the transaction identifier the App Store gives us. We need it to know whether to unlock the paid tools.
Importing a recipe from a link
When you import a recipe from a website, our server fetches that page and reads the recipe from it. We keep the link you gave us and the extracted recipe for 30 days, so the same page doesn’t have to be fetched twice.
Your subscription and payments
Noodly Plus is billed by Apple, not by us. We never see your card details — the payment happens inside the App Store, and all we learn is whether a valid subscription exists and until when.
To check that, our server asks Apple about the transaction identifier your phone hands us after a purchase. We store that identifier, the plan and the expiry date against your account, plus a short log of subscription events (purchase, renewal, cancellation, refund) so we can look into it if you write to us saying you paid but the tools are locked.
What we never collect
No analytics, no advertising identifiers, no location, no contacts, no device identifiers, no usage statistics. We do not share data with third parties and we do not sell data of any kind.
Shop links
When you open an ingredient in a shop’s search, your browser goes directly to that shop’s own site, and their privacy practices apply from that point. We send them nothing about you.
Why we are allowed to hold it, and your rights
Your email address, your password hash and the content you sync are held because we cannot give you an account without them — the legal basis is performance of the contract between us (GDPR Article 6(1)(b)). The same goes for the subscription data: without it we could not tell whether to unlock the paid tools. We do not rely on legitimate interest for anything, and we ask for no consent because we run nothing that would need it.
The controller is Róbert Nagy, reachable at support@noodlyrecipes.com. Under the GDPR you can:
- Ask what we hold about you, and get a copy of it (Art. 15).
- Correct it if something is wrong (Art. 16).
- Have it erased — you can do this yourself, instantly, in the app: Profile → Account → Delete account (Art. 17).
- Restrict what we do with it while a question is open (Art. 18).
- Take it with you in a machine-readable form (Art. 20). Write to us and we will send your data as JSON.
- Object to a particular use of it (Art. 21).
Write to the address above and we will answer within 30 days. If you are not satisfied, you can complain to a supervisory authority — in Hungary that is the NAIH (Nemzeti Adatvédelmi és Információszabadság Hatóság, naih.hu), or the authority where you live.
Deleting your data
You can permanently delete your account and everything stored on our server from inside the app: Profile → Account → Delete account. Deletion is immediate and cannot be undone. Data held on your device is unaffected and stays until you clear it.
How long we keep it
Account data for as long as your account exists, and no longer. The imported-recipe cache clears itself after 30 days.
Contact
The data controller for Noodly is Róbert Nagy, acting as a private individual. Questions about your data go to:
support@noodlyrecipes.com