Who we are
Fakeout is run by Lythronax, which is the data controller for the app and this website. If you have a question about your data, email hello@lythronax.com.
What we collect and why
Your account
Your email address and a password, through Google Firebase Authentication. We use them to create your account, sign you in and check your email address, which you must verify. Firebase handles your password; Fakeout never sees or stores it.
Legal basis: needed to provide the app (contract).
Staying signed in
Your phone keeps only a renewable sign-in token, in its secure storage, so you don’t have to type your password each time. If you turn on quick unlock, your phone checks your fingerprint, face or screen lock itself. Nothing biometric leaves your phone.
Legal basis: needed to provide the app (contract).
Your profile
Your name or nickname, your year of birth and your favourite takeaways. We keep only the year you were born, to check you are 13 or over and to know whether you are under 18. Favourite takeaways put recipes you’re likely to want first.
Legal basis: needed to provide the app (contract).
Allergens and ingredients to avoid
Optional. These can be health data, so we only save them if you tick “Use my allergens and ingredients to avoid to tailor recipes”. They are used only to flag or hide recipes for you. You can clear them at any time in Account, then Your profile and allergens.
Legal basis: your explicit consent.
Saved recipes
Which recipes you save, and when. This is what makes your Saved list work on any phone you sign in on.
Legal basis: needed to provide the app (contract).
Recipes you send us
The title, ingredients, steps and any note you add, sent with your agreement that Fakeout may edit and publish the recipe. They are private to you and the Fakeout team until we turn one into a published recipe. We don’t store an author name with it.
Legal basis: our agreement with you when you send it (contract).
Anonymous recipe counts
For each recipe, we count how often its page is opened, its card is passed and it is saved. These counts are not linked to you or your account.
Legal basis: our legitimate interest in knowing which recipes people like.
What we don’t collect
- Your location.
- Your contacts or photos.
- Precise device data, apart from the advertising ID once ads are switched on (see Advertising).
- Payment details. Fakeout Plus isn’t available yet.
- Anything through analytics or tracking tools. The app doesn’t include any.
Who can see your data
Your profile, allergens, saved recipes and the recipes you send us are locked to your account, so other users can’t see them. The Fakeout team can read the recipes you send us, to review them. Recipe photos in the app are added by the Fakeout team only.
Google provides Firebase (Authentication, Cloud Firestore, Cloud Storage and Hosting) and acts as our processor: it handles data on our instructions, under its data processing terms. We don’t sell your data or share it with data brokers.
Where it’s kept
Cloud Firestore and Cloud Storage, which hold your profile, saved recipes and the recipes you send us, are in Google’s London region (europe-west2). Some Firebase services, such as Authentication, are run by Google globally, so your sign-in details may be processed outside the UK. Google does this under its data processing terms, with safeguards for international transfers.
Advertising
This section applies once ads are switched on in the app. There are no ads yet.
The free version of Fakeout will show ads between recipes, never while you cook. Ads will come from Google AdMob. Google may use your phone’s advertising ID to show ads and measure how they perform.
In the UK and EEA, we will ask you, using Google’s consent form, whether Google may show you personalised ads, and you can change your choice later. If your year of birth shows you are under 18, you will only ever get non-personalised ads. Google uses this data under its own policies, which you can read at policies.google.com/technologies/ads.
Legal basis: your consent for personalised ads; our legitimate interest in funding the free app for non-personalised ads.
How long we keep it
We keep your data while you have an account. When you delete your account in the app (Account, then Delete account), your saved recipes, the recipes you sent us, your profile and your sign-in account are deleted straight away. Google may hold deleted data in its own system backups for a limited time before they’re overwritten. A recipe we have already published stays in the app, without your name, because you agreed we could publish it.
No app? Use the account deletion page or email hello@lythronax.com. The anonymous recipe counts are kept, because they don’t identify anyone.
Children
You must be 13 or over to use Fakeout. We use your year of birth to check this, and to limit what under-18s see, including ads.
Your rights
Under UK data protection law you can ask to see the data we hold about you, correct it, delete it, restrict or object to how we use it, and get a copy to take elsewhere. You can withdraw your consent at any time, for example by clearing your allergens. You can do most of this in the app; for anything else, email hello@lythronax.com and we will reply within one month.
If you’re unhappy with how we handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk.
Keeping it safe
Data travels between the app and Firebase over encrypted connections, and Google encrypts it when stored. Access rules in Firebase stop anyone else reading your private data.
Changes to this policy
If we change what the app collects or how we use it, we will update this page and the date at the top.