Privacy Policy
Limited Liability Company VERDE WAHHE (ТОВ «ВЕРДЕ ВАХЕ»), company code (EDRPOU) 43306268, 8/1 Tykhvinskyi Lane, Kyiv 03028, Ukraine (the “Company”, “we”, “us”). The Buryaki service means the buryaki.com website and the Buryaki apps for Android and iOS (the “Service”).
This policy explains what personal data the Service processes, why, on what legal basis, who we share it with and what rights you have. We follow the Law of Ukraine “On Personal Data Protection”, Regulation (EU) 2016/679 (GDPR) and the UK GDPR where they apply, and US state privacy laws.
1. Privacy contact
privacy@buryaki.com. We reply within 30 days (up to 90 days for complex requests, with notice).
2. Data we process
| Category | Data | Source |
|---|---|---|
| Without an account | Saved dishes, menu, number of guests, theme, language, game progress — on your device only | You |
| Account | Email, nickname, encrypted password (we never see it), 18+ confirmation, date you accepted the terms; with Google sign-in — the email, name and photo of your Google account | You, Google |
| Profile | Profile photo, first and last name (optional), bio, social links, privacy setting, saved dishes, tastes, game progress and badges | You |
| Submissions | Recipes, historical information, stories, dish photos, moderator notes, review status | You, moderators |
| Activity | Dish ratings, reports, friend invitations | You |
| Purchases | Purchase ID, product, platform, subscription status and term, payment history without card details. Card data is handled only by Google Play or Apple | App store |
| Waitlist and emails | Email, language, platform, consent date, type and time of emails sent | You, Service |
| Messages | Your emails and attachments | You |
| Technical data | IP address, device and browser type, hosting error and security logs | Your device |
We do not collect special categories of data (such as health, religion or ethnic origin). Please don’t include them in your profile, recipes or messages. Labels such as “vegan” describe food preferences, not health.
3. Purposes and legal bases
- Providing the Service: profile, saved dishes, friend search, ratings, the game, purchases — performance of a contract.
- Moderation and safety: age confirmation, handling reports, preventing abuse, backups — legitimate interests and app store requirements.
- Purchase and tax records — performance of a contract and legal obligations.
- Waitlist and news — your consent, which you can withdraw at any time.
- Service emails (email confirmation, password reset, recipe status, profile deletion) — performance of a contract.
- Protecting the Company’s rights, including in disputes — legitimate interests.
We do not sell personal data or make decisions with legal effects about you based solely on automated processing. We do not show ads at the moment; if we introduce advertising, we will update this policy in advance and ask for consent where the law requires it.
4. Who can see your data
- Everyone — your nickname and profile photo. Your profile photo is always public, so don’t use an image you don’t want to show.
- Everyone, if your profile is public — bio, links, dishes, tastes, badges; your name only if you turn it on.
- Signed-in members — taste-based search of public profiles.
- Moderators — submitted recipes, photos and reports.
- Everyone, after approval — published recipes with your nickname.
5. Recipients and processors
- Google Firebase / Google Cloud (Google Ireland Limited, Google LLC) — hosting, sign-in, database, file storage and server functions, in EU data centers where available.
- Our email delivery provider — sending emails (named on request).
- Porkbun LLC — the domain and forwarding of @buryaki.com email.
- Google LLC (Google Play), Apple Inc. (App Store) — app distribution and payments under their own policies.
- Accountants, lawyers and auditors — when needed, under confidentiality.
- Public authorities — only when the law requires it.
6. International transfers
Some processors are located outside Ukraine and the EU, including in the United States. Transfers rely on the European Commission’s Standard Contractual Clauses, the EU-U.S. Data Privacy Framework for certified companies and other lawful safeguards.
7. Retention
- Your profile and related data — while your account exists; after deletion it is erased, and backups are overwritten within 30 days.
- Submitted but unpublished recipes — up to 12 months after the decision, then deleted.
- Published recipes — until you ask us to remove them or delete your profile; if you agreed under the Authors Program terms, they may remain in anonymized form.
- Reports and moderation decisions — up to 3 years to protect our rights and for reporting.
- Purchase records — as long as tax law requires (usually up to 3 years after filing).
- Waitlist — until the apps launch plus 12 months, or until you withdraw consent.
- Correspondence — up to 3 years. Hosting security logs — usually up to 30 days.
8. Security
Encrypted connections (HTTPS), database access rules, limited moderator permissions, file size limits and backups. No protection is absolute. We will notify you and the supervisory authority of serious incidents within the time the law requires.
9. Your rights
To be informed; to access your data and get a copy; to correct it; to delete it; to restrict processing; to object; to data portability; to withdraw consent; and not to be subject to solely automated decisions. Residents of US states have the right to know, delete and correct their data and not to be discriminated against; we do not sell or “share” data for advertising as defined by the CCPA.
Email privacy@buryaki.com from the address linked to your profile; we may ask you to confirm your identity. In Ukraine, complaints go to the Ukrainian Parliament Commissioner for Human Rights; in the EU and UK, to the supervisory authority in your country.
10. Age
Profiles, submissions and purchases are for adults only (18+), confirmed with a checkbox. Anyone can browse recipes. We do not knowingly collect children’s data and delete profiles found to belong to a minor.
11. Cookies and local storage
See our Cookie Policy.
12. Changes
We announce material changes on the website and in the app at least 7 days in advance, and ask for consent again where required.