Privacy Policy
Last updated: 12 September 2026
Data controller and contact
Hapka provides the website and mobile applications. Privacy requests can be sent to support@hapka.online.
Data we process
When you create an account we process your email address, optional display name and a securely hashed password. We process authentication sessions, saved recipes, meal plans, collections and cooking history when you use those features. For Pro access we store the product identifier, store platform, transaction reference, subscription status and expiry date. Payment card details are handled by Google Play or Apple and are not received by Hapka.
Purposes and legal bases
Account and feature data is processed to perform the service you request. Security logs and fraud prevention are based on our legitimate interest in protecting users and the platform. Records required by law are retained to meet legal obligations. Optional communications are sent only where there is a valid basis.
Processors and international transfers
Hosting, email delivery, Google Play and Apple services may process limited data for their respective functions. Where data is transferred outside the European Economic Area, the relevant provider’s approved transfer safeguards apply.
Retention
Account data is retained while the account is active. Operational backups expire according to a limited rotation. Security and transaction records may be retained where necessary for legal claims, accounting or fraud prevention.
Your rights
Subject to applicable law, you may request access, correction, deletion, restriction, portability or objection. You may also complain to the competent data protection authority. We may need to verify that a request comes from the account holder.
Account deletion
Use Profile → Delete account in the app or follow the account deletion instructions. Deleting a Hapka account does not automatically cancel a store subscription.
Advertising, analytics and children
Hapka does not use an advertising network and does not display ads. The service is not directed to children under the minimum age required to manage their own account in their country.
Security and changes
Connections use HTTPS and passwords are not stored in readable form. No system can guarantee absolute security. Material policy changes will be published on this page with a revised date.