Privacy Policy
Last updated: 15/07/2026
This Privacy Policy describes how IRL APPS SAS collects, stores, uses, and shares the personal data of users of the Mezze mobile application ("the App" or "the Service"), available on the Apple App Store and the Google Play Store.
By using the Service, you agree to the terms of this policy. We update this policy from time to time. If we make significant changes, we will notify you via the App and, where applicable, seek your renewed consent.
1. Data Controller
IRL APPS SAS
35 rue du Sentier, 75002 Paris, France
Contact: support@irl-apps.com
2. Data Collected and Purposes
a. Data You Provide Directly
| Data | Purpose | Legal Basis |
|---|---|---|
| Name, email address, profile picture (when signing up via Apple, Google, or email) | Account creation and management | Performance of contract |
| Authentication tokens | To allow you to log in (we do not collect or store your passwords) | Performance of contract |
b. Video Platform Integration Data
If you choose to connect a third-party video platform account (e.g., TikTok), we collect:
| Data | Purpose | Legal Basis |
|---|---|---|
| Profile picture, username, unique ID | Displaying the connected account in the App | Performance of contract |
| List of videos you have saved or liked (description, link, metadata) | Core feature: importing your saved cooking videos and converting them into structured recipes | Performance of contract |
We only access data you explicitly authorize and we do not collect your platform login credentials. Your platform session cookies are stored locally on your device only, never on our servers: we are technically unable to log into your account ourselves. These cookies are automatically deleted from your phone when you log out, delete your Mezze account, or uninstall the app. You can also revoke this access at any time from the platform.
c. Data You Create in the App
| Data | Purpose | Legal Basis |
|---|---|---|
| Taste preferences and onboarding answers (e.g., household size, time available, dietary goals) | Personalized recipe suggestions | Performance of contract |
| Your cookbook: imported recipes, edits, notes, photos | Core recipe organization features | Performance of contract |
| Meal plans, grocery lists, cooking history ("cooked" recipes) | Meal planning, grocery list generation, personalization | Performance of contract |
d. Automatically Collected Data
| Data | Purpose | Legal Basis |
|---|---|---|
| IP address, OS, device model, OS version, technical identifiers | Security, fraud prevention, debugging | Legitimate interest |
| Usage events (interactions, session duration, feature usage) via PostHog and Firebase | Performance measurement, product improvement | Legitimate interest |
| Crash reports and technical error data via Sentry | App stability, bug detection and fixing | Legitimate interest |
| Subscription and billing data via RevenueCat | Subscription management and accounting compliance | Performance of contract + legal obligation |
e. Advertising Attribution Data
We may use advertising SDKs (e.g., the TikTok SDK) to measure the performance of our advertising campaigns. Data shared is limited to necessary events (install, open, conversion).
3. Data Retention
| Data | Retention Period |
|---|---|
| Account data (email, profile) | Until account deletion |
| Imported recipes, meal plans, grocery lists, preferences | Until account deletion |
| Platform session cookies | Stored locally on your device only, never on our servers; deleted on logout, account deletion, or app uninstall |
| Analytics data (PostHog) | Retained in pseudonymized form; link broken upon account deletion |
| Billing data (RevenueCat) | In accordance with accounting obligations (up to 10 years) |
| Crash reports (Sentry) | 90 days, then automatically deleted |
4. Sharing Your Data
We do not sell your personal data.
| Processor | Role | Data Location |
|---|---|---|
| Firebase (Google LLC) | Authentication, profile and recipe storage | EU (eur3: Belgium, Netherlands, Finland) |
| PostHog | Product analytics (self-hosted) | EU (United Kingdom) |
| RevenueCat, Inc. | Subscription and billing management | United States |
| Sentry | Crash reports and technical stability | EU |
| TikTok (ByteDance Ltd.) | Video platform data API + advertising SDK | United States / Singapore |
5. International Data Transfers
Most of our processors store your data within the European Union. RevenueCat and TikTok are based outside the EU. For these transfers, we implement Standard Contractual Clauses (SCCs) from the European Commission.
6. Your Rights
Under GDPR, you have the following rights:
- Right of access: obtain a copy of the data we hold about you
- Right to rectification: correct inaccurate data
- Right to erasure: request deletion of your data
- Right to restriction: restrict the use of your data
- Right to object: object to processing based on legitimate interest
- Right to portability: receive your data in a structured format
- Right to withdraw consent at any time
Contact: support@irl-apps.com. We will respond within one month. You can also delete your account and data directly in the App (Settings → Delete account).
Right to lodge a complaint: you may lodge a complaint with the CNIL: www.cnil.fr
7. Mandatory Nature of Data
Providing the data mentioned in this policy is necessary for the App to function. Without this data, you will not be able to use Mezze.
8. Security
- All transmissions are encrypted via HTTPS/TLS
- Access to user data is restricted to authorized team members
- Session cookies and access tokens are stored locally on your device in a secure manner, never on our servers
- Sensitive data is pseudonymized in our analytics systems
- Monitoring and alerts via Sentry
9. Minimum Age
The App is intended for users aged 13 and over. We do not knowingly collect data from children under 13.
10. California Residents
If you are a California resident (CCPA):
- Right to know what data we collect
- Right to request deletion of your data
- Right to opt out of the sale of your data (we do not sell your data)
- Right not to be discriminated against
Contact: support@irl-apps.com
11. Policy Updates
The most recent version will always be available in the app. We will notify you of any significant changes.
12. Contact Us
Email: support@irl-apps.com
Address: IRL APPS SAS, 35 rue du Sentier, 75002 Paris, France