Leemon · Bencata Labs
Leemon Privacy Policy
Last updated: October 7, 2026
Introduction
Welcome to Leemon, the AI-powered cooking app by Rimoni Capital Group SL (Bencata Labs) ("Leemon", "we", "us"). This policy explains how we collect, use and protect your information when you use our website and app (the "Service").
1. Who we are
Company name: Rimoni Capital Group SL (Bencata Labs).
Tax ID (CIF): B22864003.
Registered address: Avenida del Doctor Severo Ochoa 47, 1, 28100 Alcobendas, Madrid, España.
Privacy contact: privacy@leemon.kitchen.
We are the controller of your personal data under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
2. Information we collect
Information you provide: your email when registering, the recipes you create or import, your dietary preferences, allergies and cooking level, and the photos, audio or text you add to your recipes.
Automatic information: technical device data (type, operating system, language), information about use of the Service to improve features, and strictly technical cookies on the website.
We do not collect: your real name, phone number, address, banking details (payments are processed by Apple), location, contacts or advertising identifiers.
We do not use your data for advertising. Leemon does not display ads or share data with advertising networks.
Technical diagnostics
If something goes wrong in the app (for example, a sync or a recipe import), we keep a technical record of the error linked to your account so we can help you fix it. This record only contains technical information (what failed and when); it does not include your recipes, photos or any other content of yours. We do not use it for advertising or to track you outside Leemon, and it is deleted together with your account if you delete it.
3. How we use your information
Providing the Service: authenticating you, saving your recipes and generating new recipes with AI when you request it.
Personalisation: adapting suggestions to your filters, allergies and language.
Improving the product: analysing aggregated usage and fixing errors.
Complying with legal obligations and protecting the security of the Service.
The legal bases are performance of our contract with you (providing the Service), your consent (when using AI features), and our legitimate interests (product improvement and security).
4. Who we share your information with
We do not sell or rent your data. We share only what is strictly necessary with the following technology providers, which act as processors under our instructions and are subject to data processing agreements:
Supabase — backend, database, authentication and storage of your recipes, photos and voice notes (EU).
Cloudflare — delivery of leemon.kitchen, including sign-in confirmation pages and the recipe links you share (US / EU).
Railway — hosting of the service that downloads and processes the videos you import (US).
iProyal — network that routes those video downloads (global, including third countries).
Sentry — error diagnostics and app stability; receives exception reports and technical device context, without your user identifier or email (US).
Apple — App Store distribution, sign-in with Apple ID and subscription payments (US).
Expo (EAS) — building and delivering technical app updates (US).
AI model providers are described in section 5.
In addition, leemon.kitchen pages load their fonts from Google's font service (fonts.googleapis.com and fonts.gstatic.com). To deliver them, your browser communicates your IP address to Google, which acts as an independent controller.
Your recipes, photos and voice notes are stored in the European Union: the database and storage are in the eu-west-1 region (Ireland). The other providers listed above and those in section 5 process data outside the European Economic Area, mainly in the US, and the network routing downloads of imported videos may pass through third countries. These transfers are covered by the European Commission's Standard Contractual Clauses and/or, where the provider is certified, the EU–U.S. Data Privacy Framework.
We may also share information when required by law.
5. Use of artificial intelligence
Leemon uses artificial intelligence to create and improve recipes. When you use an AI feature (importing a recipe from a photo, document, link or video; creating a recipe from text or voice; improving, reviewing, translating or completing a recipe; or calculating nutritional information), the content you provide is securely sent to third-party AI providers acting as processors:
Anthropic (Claude) — recipe extraction, generation, improvement and translation, and nutritional estimation. Data sent: the text you write, the photos and documents (PDF/TXT) you select, the content of links you share, and audio transcripts from videos you import.
OpenAI (Whisper) — audio transcription: imported videos (e.g. Instagram or TikTok), voice dictation and voice notes. Data sent: the corresponding audio track.
fal.ai (Flux) — generation of the recipe's illustrative photo. Data sent: the recipe name and its main ingredients.
Apify — retrieval of public content (text, audio and video) from links you import from social networks (for example, Instagram or TikTok).
Google (Gemini) — analysis of imported videos to synchronise each recipe step with the video segment in which it occurs.
If you import a recipe from a video (for example, Instagram or TikTok), Leemon may save a private copy of that video associated with your account so you can watch it in the app while cooking. That copy is accessible only from your account, is always displayed with attribution and a link to the creator's original content, is deleted when you delete the recipe, and is deleted with the rest of your data when you delete your account.
These providers process content only to provide the service to you and, under their API terms, do not use it to train their models. They may retain it temporarily (for example, up to approximately 30 days) solely for security and abuse prevention, according to their policies. We do not include your name, email or account identifiers in the content sent to these providers: only the content necessary to process your recipe.
The nutritional values displayed by Leemon are AI-generated estimates based on ingredients: they are indicative and do not replace advice from a nutrition professional.
The app asks for explicit consent the first time you use an AI feature. If you do not accept, the feature does not run and you can continue using Leemon with manually entered recipes.
6. How long we retain your data
While your account remains active. If you request its deletion, we delete your personal data within a maximum of 30 days, except data we must retain for legal obligations (tax or accounting) and backups, which are deleted within up to 90 additional days.
7. Your rights
You have the right to access, rectify and erase your data, object to or restrict processing, obtain data portability and withdraw consent. Write to privacy@leemon.kitchen specifying the right you wish to exercise. We will respond within one month.
If you believe we have not adequately handled your request, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
8. Security
We apply reasonable technical and organisational measures: encryption in transit and at rest, secure authentication and monitoring. If a security breach affects your data, we will inform you and notify the Spanish Data Protection Agency within the legal deadlines.
9. Children
The Service is intended for users over 14 years old. We do not knowingly collect data from children below that age.
10. Cookies
The leemon.kitchen website provides information about the app and only uses strictly technical cookies necessary for the site to function (technical session and language preference). We do not use analytics or advertising cookies. If we add them in the future, we will first ask for your consent through a consent banner.
You can manage cookies in your browser settings.
11. Changes
We may update this policy to reflect legal or product changes. We will notify you of material changes through the app or by email.
12. Chatbot connector (MCP)
Leemon offers an optional connector that lets you use your library from an external AI assistant (Claude, ChatGPT, Gemini or another client compatible with the Model Context Protocol). It is not enabled by default: it only works if you connect it and expressly authorise it.
The legal basis for this processing is your consent, given when you authorise the connection and which you can withdraw at any time from your assistant. Once revoked, the connector can no longer access your account.
The assistant accesses the Service with your identity and permissions: it can only view and modify your recipes, recipe collections, favourites and cooking diary, never those of another person.
Leemon receives only the specific request made by the assistant and returns the result. We do not receive or store your conversation text or message history.
We log technical metadata for each call (which function was used, when, whether it succeeded, how long it took and AI usage) for security, usage limit management and diagnostics. We do not log credentials, headers, submitted parameters or your recipe content.
The assistant provider (Anthropic, OpenAI, Google or another) processes your conversation under its own privacy policy, over which Leemon has no control.
How to connect and disconnect it: https://leemon.kitchen/mcp.