Privacy Policy

Last updated: 20 October 2026

This policy covers Lindpoint Apps: Inventar (inventory.lindpoint.me), Kochen & Einkaufen (cook.lindpoint.me) and this website (apps.lindpoint.me).

Who is responsible

Laurent Lindpointner, Salzburg, Austria
Email: apps@lindpoint.me

Signing in with Google

If you choose "Sign in with Google", the apps request only the basic sign-in scopes (openid, email, profile). From Google they receive:

• your name,
• your email address,
• your profile picture,
• a Google account ID that links your login to your account.

This information is used only to log you in, show who you are inside the app (for example to other members of your household) and contact you about your account. The apps do not access your Gmail, Google Drive, Calendar, contacts or any other Google data, and they do not post anything on your behalf.

Use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google data is never sold, never used for advertising and never transferred to anyone except as needed to run the apps as described here.

Some apps also let you sign in with a one-time code sent to your email address instead.

Data you enter in the apps

• Inventar: the purchases you record, such as product names, retailers, prices, dates, return periods, warranty details and documents or receipts you upload.
• Kochen & Einkaufen: shopping list items, pantry contents, recipes, notes, cooking history and ratings, shopping trips and receipt photos you upload. This data is shared with the members of your household.

This data is used only to provide the app to you.

Processing with the Claude API

Kochen & Einkaufen uses the Claude API from Anthropic, PBC (USA) to process data for its AI features: sorting shopping and pantry items, recipe suggestions, reading receipt photos, importing recipes from links, searching your cooking history and a chat assistant. For these features, the data each one needs, such as shopping list and pantry items, receipt photos, recipe text, cooking history and your chat messages, is sent to Anthropic, processed there and returned to the app. AI features are switched on per household.

Anthropic acts as a processor under its commercial terms and data processing agreement: it does not use this data to train its models and deletes it after a limited retention period. The app records how many AI requests a household makes, to enforce a daily limit, but not their content.

You can also connect an app to your own Claude account. Claude then reads or changes your app data only when you ask it to, and that use is covered by your own agreement with Anthropic.

Where your data is stored

The apps use these service providers, each bound by a data processing agreement:

• Supabase: database, login and file storage, hosted in the EU (Frankfurt, Germany).
• Vercel: hosting of the apps and this website, with server functions in the EU (Frankfurt, Germany).
• Google: sign-in, if you choose "Sign in with Google".
• Anthropic: Claude API for the AI features of Kochen & Einkaufen.

Some of these providers are based in the USA. Where personal data leaves the EU, the transfer is based on the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.

Cookies and tracking

The apps use only what is technically needed: a login session stored in cookies or your browser's storage, and local storage that lets the shopping list work offline. There are no analytics, no advertising, no tracking pixels and no third-party trackers. This website sets no cookies at all.

The hosting providers keep short-lived technical logs (such as IP address, time and requested page) to operate and secure the service.

Sharing

Your data is never sold, rented or shared with third parties for their own purposes. It is processed only by the service providers listed above, on Laurent's behalf, to run the apps.

How long data is kept, and deletion

Your data is kept as long as your account exists. To delete your account and all associated data, email apps@lindpoint.me from the address you sign in with. Deletion is completed within 30 days; copies in backups are removed when those backups expire.

Legal basis

Your data is processed to provide the app you chose to use (Art. 6(1)(b) GDPR) and, for security logs, on the basis of a legitimate interest in running the service safely (Art. 6(1)(f) GDPR).

Your rights

You have the right to access, correct, delete, restrict and export your data and to object to its processing. Email apps@lindpoint.me to exercise these rights. You can also lodge a complaint with a data protection authority; in Austria this is the Datenschutzbehörde (dsb.gv.at).

Children

The apps are not intended for children under 14.

Changes

If this policy changes, the new version is published on this page with a new date.