This Privacy Policy explains how BABLEG ("BABLEG", "Provider", "we", "our", or "us") collects, uses, stores, shares, and protects information in connection with the Costing Chef mobile application, web application, public QR menu system, APIs, and related services (collectively, the "Service").
BABLEG is an individual developer operating under the trade name "BABLEG" through the website bableg.com; it is not currently a separately registered legal company.
By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please discontinue use of the Service.
This Policy applies to all Users of the Service, including Chefs, Suppliers, Restaurant account holders, staff accounts, and visitors to public QR menu pages.
This Policy does not apply to third-party websites, applications, or services that may be linked from the Service; those third parties have their own privacy practices, which we encourage you to review separately.
Account Information. We use Firebase Authentication with passwordless email sign-in. When you sign up, we collect your email address, which Firebase uses to send you a secure sign-in link — you do not create or enter a password. We also store a unique user ID (UID) generated by Firebase, and any profile details you choose to add, such as your name, business name, or chef profile information.
Content You Provide. Recipes, ingredients, quantities, preparation instructions, cost and pricing data, supplier information, allergen and nutritional declarations, menu descriptions, business information (address, phone, hours, social links), images, and any other Content you create, upload, or share through the Service.
Collaboration Data. If you invite other Users to collaborate, we process the invited User's email or identifier and the permissions you grant them.
Automatically Collected Information. Through Firebase Analytics and, for the web-based public menu (costing-chef.web.app), Google Analytics, we automatically collect device type, operating system, app version, general usage patterns (screens viewed, features used, session duration), approximate location derived from IP address, and referral source.
Diagnostic & Crash Data. We use Firebase Crashlytics to automatically collect crash logs, device state, and stack traces when the application encounters an error, to help us fix bugs and improve stability.
Notification Data. If you enable notifications, we store a Firebase Cloud Messaging (FCM) device token to deliver price-change alerts and other in-app notifications to your device.
Payment Information. Subscriptions are billed through Google Play Billing. BABLEG does not collect, view, or store your payment card or bank details — this information is handled entirely by Google. We may receive limited, non-sensitive purchase confirmation data (such as subscription status and renewal date) from Google Play to manage your access to premium features.
Cookies & Similar Technologies. The public QR menu website may use cookies or similar technologies (via Firebase Hosting and Google Analytics) to remember basic preferences and measure site usage. You can control cookies through your browser settings.
We use the information described above to:
- create and manage your account, and authenticate your sign-ins;
- provide core functionality — recipe and cost management, supplier integration, QR menu publishing, PDF generation;
- calculate and update recipe costs dynamically as supplier prices change;
- send price-change notifications and other in-app alerts;
- enable collaboration features between account owners and invited Users;
- process and manage Subscription access via Google Play Billing;
- analyze usage patterns to improve features, performance, and user experience;
- diagnose and fix technical issues and crashes;
- maintain the security and integrity of the Service, and prevent fraud or abuse;
- comply with legal obligations and enforce our Terms of Service.
Where applicable law requires a legal basis for processing (such as under the GDPR or Türkiye's KVKK), we rely on one or more of the following:
- Performance of a contract — to provide the Service you signed up for;
- Legitimate interests — to improve, secure, and analyze the Service, provided this does not override your fundamental rights;
- Consent — for optional features such as push notifications or analytics, where required by your jurisdiction;
- Legal obligation — where we must retain or disclose information to comply with the law.
We rely on the following third-party infrastructure and service providers (operated by Google LLC / Google Cloud) to deliver the Service. Each processes data on our behalf under their own security and privacy commitments:
- Firebase Authentication — passwordless email sign-in and account identity management;
- Cloud Firestore / Firebase Realtime Database — storage of recipes, ingredients, pricing, and account data;
- Firebase Cloud Functions — server-side logic, including price-change notification triggers;
- Firebase Cloud Messaging — delivery of push notifications;
- Firebase Hosting — hosting of the public QR menu website (costing-chef.web.app);
- Firebase Analytics / Google Analytics — usage analytics for the app and public menu website;
- Firebase Crashlytics — crash and diagnostic reporting;
- Google Play Billing — Subscription payment processing;
- third-party exchange-rate providers, used solely to support currency conversion features.
We do not sell your personal information to third parties, and we do not currently use your data for third-party advertising purposes.
We share information in the following circumstances:
- With collaborators you invite — Content you choose to share is visible to Users you grant access to, according to the permissions you set;
- With the public — any recipe, menu, or business information you mark as public (e.g., via the "isPublic" setting) becomes accessible to anyone who scans your QR code or visits your public menu link;
- With service providers — as listed in Section 6, to operate the Service;
- For legal reasons — where required to comply with a legal obligation, protect our rights, or respond to lawful requests from public authorities;
- In a business transfer — if BABLEG's assets or operations are transferred, sold, or reorganized, User information may be transferred as part of that transaction, subject to this Policy.
We do not share your personal information with third parties for their own independent marketing purposes.
The Service allows Chefs and Restaurants to control, on a per-recipe basis, whether Content is public (visible via QR code / web link) or private.
Once Content is marked public, it can be viewed, copied, screenshotted, or otherwise accessed by anyone with the link or QR code, and may be indexed by search engines. BABLEG is not responsible for further use of information you voluntarily make public.
You are solely responsible for reviewing your visibility settings before publishing Content, particularly if it includes personal contact details.
Our infrastructure providers (Google Firebase / Google Cloud) may process and store data on servers located outside your country of residence, including in the United States or other countries where Google operates data centers.
Where required by applicable law, such transfers are made subject to appropriate safeguards, such as standard contractual clauses or equivalent mechanisms offered by our service providers.
We retain your account information and Content for as long as your account remains active, or as needed to provide the Service.
If you delete your account, we will delete or anonymize your personal data within a reasonable period, except where retention is required for legal compliance, fraud prevention, dispute resolution, backups, or legitimate business records (such as billing history for Subscriptions).
Diagnostic, analytics, and crash data collected through Firebase and Google services are retained according to those providers' standard retention periods, which we configure to be no longer than reasonably necessary.
We rely on Firebase's and Google Cloud's industry-standard security infrastructure, including encryption in transit and access controls, to protect your information.
However, no method of transmission or electronic storage is completely secure. While we work to protect your information, we cannot guarantee absolute security, and you use the Service at your own risk in this respect.
If you become aware of any security vulnerability or incident affecting the Service, please report it immediately to bableg@protonmail.com.
Depending on your jurisdiction (including under the GDPR, Türkiye's KVKK, or similar laws), you may have the right to:
- access the personal data we hold about you;
- request correction of inaccurate or incomplete data;
- request deletion of your personal data ("right to be forgotten");
- object to or restrict certain processing;
- request a portable copy of your data in a structured format;
- withdraw consent at any time, where processing is based on consent;
- lodge a complaint with your local data protection authority.
To exercise any of these rights, contact us at bableg@protonmail.com. We will respond within the timeframe required by applicable law.
You may delete your account at any time through the in-app account settings, or by requesting deletion at bableg@protonmail.com.
Deleting your account will remove your private Content and personal information from our active systems, subject to the retention exceptions described in Section 10. Content you previously made public (e.g., via QR menus) may have already been viewed, copied, or cached by third parties outside our control.
If you hold an active Subscription, you must separately cancel it through Google Play to stop future billing; account deletion alone does not cancel a Google Play Subscription.
The Service is not directed at, and is not intended for use by, children under the age of 16, or the minimum age required in your jurisdiction. We do not knowingly collect personal information from children.
If you believe a child has provided us with personal information, please contact us at bableg@protonmail.com so we can investigate and delete such information as appropriate.
If you enable notifications, we use Firebase Cloud Messaging to send you alerts, such as supplier price changes affecting your recipes.
You can disable push notifications at any time through your device settings or, where available, within the application's notification preferences.
As of the Effective Date of this Policy, the Service does not display third-party advertisements and does not share your data for advertising purposes.
If we introduce advertising (for example, through Google AdMob) in the future, we will update this Privacy Policy in advance to describe what data would be collected, how it would be used, and what choices you have, consistent with applicable law.
The Service may contain links to third-party websites, restaurant websites, or social media pages published by Users. We are not responsible for the privacy practices or content of any third-party sites, and we encourage you to review their privacy policies separately.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or the Service itself.
If we make material changes, we will notify you through the Service, by email, or by updating the "Effective Date" at the top of this Policy. Your continued use of the Service after changes take effect constitutes your acceptance of the revised Policy.
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:
BABLEG
Email: bableg@protonmail.com
Website: bableg.com