Bu hukuki metin şu an yalnızca İngilizce. Profesyonel bir Türkçe çevirisi hazırlanıyor. Koşullar’ın 24.5 maddesi uyarınca, yerel hukukunuz aksini gerektirmedikçe bağlayıcı olan İngilizce metindir. Bir yeri anlamadıysanız bize yazın, açıklayalım. Destek · info@ryonlabs.com

Big Spice Privacy Policy

Last updated: September 23, 2026

Effective: September 23, 2026

The short version

This summary is here for your convenience. If the summary and the full text below say different things, the full text governs.

• You can use Big Spice without giving us your name, your email address or a password. The App creates a random account identifier instead.
• Most of your data stays on your device: your recipes, your cooking history, your shopping list and your preferences. It is not stored on our servers.
• When you use an AI Feature, such as importing a recipe or Ask the Chef, what you submit is sent to our servers and to AI service providers that work for us. The App asks your permission before it does this for the first time. We use what you submit only to produce your result.
• We do not sell your personal information. We do not show third-party ads. We do not track you across other companies’ apps or websites.
• Your app store handles your payment. We never see your card details.
• We use service providers for hosting, AI, subscription management, analytics, crash reporting and notifications. We describe them by category. You can ask us who they are.
• You have rights over your personal data. You can erase your data yourself with “Delete my data” in Settings. For anything else, write to info@ryonlabs.com.

Contents

1. Who we are
2. What we collect
3. What stays on your device
4. How AI Features handle what you submit
5. Why we use your data, and our legal bases
6. Who we share data with
7. No sale, no ads, no tracking
8. International transfers
9. How long we keep data
10. Security
11. Your rights
12. Children
13. Photos and device permissions
14. Our website
15. Changes to this policy
16. Contact and complaints

1. Who we are

The Big Spice app is published by Ryon Labs LLC, 30 N Gould St Ste N, Sheridan, WY 82801, USA. In this policy, “Big Spice”, “we”, “us” and “our” mean that company.

We are the “controller” of the personal data described in this policy. That means we decide why and how it is used. You can reach us at info@ryonlabs.com.

This policy covers the Big Spice mobile application and the online services that support it (“the App”), and our website. “Pro”, “AI Features”, “Your Content” and “Imported Content” have the same meaning as in our Terms of Use.

This policy does not cover third parties that you deal with directly, such as your app store, a sign-in service, or the websites and video platforms you import recipes from. They have their own privacy policies.

2. What we collect

We built Big Spice to work without knowing who you are. We do not ask for your name, your email address, your phone number, your date of birth, your contacts or your precise location.

The table shows each kind of data, where it comes from, why we use it and where it is kept.

As with any internet service, every provider that the App connects to receives your IP address as part of the connection. Providers may use an IP address to estimate a general location, such as a country or a city. We do not collect your precise location.

3. What stays on your device

The following data is stored in the App’s own storage on your device. It is not uploaded to our servers as part of normal use:

• your recipe library, including recipes you import or create, and any cover photo you choose;
• your cooking sessions, your history and your cooking statistics;
• your shopping list;
• your preferences, your region and your measurement settings;
• a short list of ingredients you recently told the App you have;
• whether you have given the AI Features permission (section 4.1), and when; and
• a copy of your Pro status, so that the App works without a connection.

This has three consequences.

• We cannot see it. We cannot read, recover or delete data that exists only on your device.
• You control it. You can delete items in the App, or erase everything at once with “Delete my data” in Settings (section 11.3). Deleting the App from your device removes the data the App stored there. Deleting a recipe also deletes the voice clips saved for it.
• Backups are yours. If you have switched on device backups with the maker of your device, the App’s data may be included in them. We do not control those backups.

Parts of this data leave your device only when you use a feature that needs them. The main examples are importing a recipe and Ask the Chef, described in section 4.

4. How AI Features handle what you submit

AI Features include importing a recipe from a web link, a video link or a photo; Ask the Chef; and adding ingredients from a photo.

4.1 What is sent, and when.

The App asks your permission before it sends anything to an AI Feature for the first time. It tells you what will be sent and who will receive it. Nothing is sent until you tap “Allow and continue”. If you tap “Not now”, nothing is sent, the rest of the App keeps working, and the App asks again the next time you try. The App keeps your answer on your device. You can withdraw the permission at any time in Settings, under “Your data”. We will ask again if the kinds of data that are sent, or the kinds of recipient, change in a way that matters.

• A link. The App sends the link to our servers. Our servers fetch the page, or the text of the video, for you.
• A photo. You can choose a photo from your gallery. For a photo of your fridge or your ingredients, you can take one with the camera instead. Where your device supports it, the App makes the photo smaller on your device before sending it. The photo is then sent to our servers. When you add ingredients from a photo, the App also sends the language you read in, so that the ingredient names come back in your language.
• With any import. The App also sends the number of people you cook for, so that the recipe comes back sized for your household, and the language you read in.
• Ask the Chef. The App sends your request, including anything you type, the ingredients you chose, the things you want to avoid, and the preferences that matter for the answer: household size, diet, dislikes, kitchen equipment, cooking goals and the language you read in.

4.2 Who processes it. Our servers process what you submit, together with AI and content-processing service providers that act for us. Content-processing providers do jobs such as getting the text of a video. When our servers pass your request on to these providers, they do not include your account identifier or your IP address.

4.3 What we do with it, and what we do not do.

• We use what you submit only to produce the result you asked for, to apply fair usage limits and to keep the service secure.
• We do not sell it.
• We do not use it for advertising.
• We do not keep it on our servers after your result has been produced. Our technical logs record details such as the size of a request and whether it succeeded, together with your account identifier and your IP address. They do not record the content itself.
• We do not use it to train AI models of our own.

Our AI and content-processing service providers handle what we send them under their terms with us. They may keep it for a period, for example for safety and abuse monitoring. You can ask us for more information at info@ryonlabs.com.

4.4 What you should not submit. AI Features do not need personal information. Please do not submit any. Photos should show food, ingredients or a recipe, not people or documents. A photo file can carry hidden details, such as when and where it was taken. In some cases those details are sent with the photo. We do not read or use them.

4.5 Diet settings are cooking preferences. We do not ask why you chose a diet setting or a dislike. We do not use these settings to work out anything about your health or your beliefs. Please do not tell the App about medical conditions.

4.6 Automated results. The results of AI Features are produced automatically and can be wrong. Our Terms of Use explain the risks. AI Features produce recipes. They do not make decisions about you. We do not make decisions that have a legal or similarly significant effect on you by automated means alone.

5. Why we use your data, and our legal bases

If the GDPR or the UK GDPR applies to you, we rely on the following legal bases.

Where we rely on a legitimate interest, we have weighed it against your rights and interests. You can object at any time (section 11). Where we rely on your consent, you can withdraw it at any time. That does not affect what happened before you withdrew it.

The AI Features permission. The App asks your permission before it sends anything to an AI Feature for the first time (section 4.1). Nothing is sent until you allow it. You can withdraw the permission at any time in Settings, under “Your data”. If you do, the App asks again before it sends anything else. Withdrawing it does not affect what was sent before.

Do you have to give us data? The account identifier is created automatically, and the online parts of the App cannot work without it. Everything else is your choice. You decide whether to set preferences, use AI Features, buy Pro, allow notifications or allow the camera.

6. Who we share data with

We share personal data only with the following categories of recipient, and only for the purposes shown.

Service providers act on our instructions and under contracts with us. We do not name them in this policy. If the law gives you the right to know the specific recipients of your personal data, write to info@ryonlabs.com and we will tell you.

7. No sale, no ads, no tracking

• We do not sell or rent your personal information.
• We do not share your personal information for cross-context behavioral advertising.
• The App does not show third-party advertising.
• The App does not collect your device’s advertising identifier.
• We do not track you across apps or websites owned by other companies. For that reason the App does not ask for permission to track.

8. International transfers

We and our service providers may process personal data in countries other than the one you live in. These can include countries outside the European Economic Area, the United Kingdom and Turkey, such as the United States. Data protection law in those countries may differ from the law where you live.

Where the law requires it, we rely on a recognized safeguard for these transfers. Examples are a decision by the competent authority that the destination gives adequate protection, and standard contractual clauses approved by the competent authority and agreed with the recipient. You can ask us for more information about the safeguards at info@ryonlabs.com.

9. How long we keep data

We keep personal data only for as long as we need it for the purposes in this policy.

When we no longer need personal data, we delete it or make it anonymous. You can ask us for more detail about how long we keep a specific kind of data.

10. Security

We use measures that are appropriate to the kind of data we hold. For example:

• we keep most of your data on your device and not on our servers;
• the App talks to our servers over encrypted connections;
• the token that keeps the App connected to your account identifier is held in the protected storage of your device;
• our server records are set up so that an account identifier can reach only its own records; and
• we do not collect payment details at all.

No system is perfectly secure. We cannot guarantee the security of your data. You are responsible for keeping your device, its screen lock and its backups safe.

If something goes wrong. If a breach of personal data happens and the law requires it, we will tell the competent authority. Where the law requires it, we will tell you too, in the App or by another reasonable means.

11. Your rights

11.1 How to use your rights. You can erase your data yourself in the App (section 11.3). For everything else, write to info@ryonlabs.com. Using your rights is free. We answer within the time the law sets. That is usually one month. It is 30 days in Turkey and 45 days in California.

11.2 We may not know which records are yours. In this version of the App we hold no name and no email address for you. We may not be able to connect a request to a specific account identifier unless you give us information that lets us do so. If that happens, we will tell you what we need. To erase your data you do not need us to find you: “Delete my data” works from inside the App (section 11.3).

11.3 Deleting your data.

• In the App. Open Settings, go to “Your data” and tap “Delete my data”. It works for everyone, and you do not need to contact us. The App tells you what will happen and asks you to confirm. It cannot be undone.
• What it erases on your device. Your saved and imported recipes and their pictures, your cooking history and statistics, your shopping list, your preferences and settings, the voice clips saved on your device, the record of your AI Features permission, and any cooking timers that are waiting to alert you.
• What it erases on our servers. The personal records held against your account identifier: the profile fields (including a name, a picture or an email address, if we ever held one), any preferences and any notification tokens. The account is then marked as deleted.
• What happens next. The App signs out. It then restarts, or asks you to reopen it, and starts again as a new install with a new account identifier. If our servers cannot be reached, nothing is deleted and the App tells you so. Try again when you are online.
• What we keep. Some records are kept after a deletion, because erasing them would break the protection they exist for. These are the records that apply fair usage limits and stop them being abused, the records that let a purchase be restored, and the records that we need to meet legal obligations or to handle legal claims. In this version of the App these records contain the random account identifier, the kind of action, its date and an internal reference, your usage allowance, your purchase status and identifiers of subscription events. They do not contain your name, your email address or anything you submitted. We keep only what those purposes need.
• What the button does not reach. Analytics events and crash reports that our providers have already received stay with them until their retention period ends (section 9). After the button has run, the App uses a new account identifier and a new analytics identifier, so new events are not connected to the old ones. Our subscription management provider keeps its record of your purchase. Our technical logs run out on their own schedule (section 9). The button also does not reach messages you sent us, copies in backups you made with your device’s own tools, or anything our AI and content-processing service providers still hold under section 4.3.
• Your subscription. Deleting data does not cancel a Pro subscription. Cancel it in your app store account settings. To use Pro again after you delete your data, tap “Restore purchases”. Restoring does not give you a new usage allowance.
• If you deleted the App without doing this. The data on your device went with the App. Deleting the App does not erase the server records. You can ask us by email to delete them (next point).
• By email. You can also write to info@ryonlabs.com and ask us to delete the server records connected to your account identifier. Section 11.2 explains why we may need more information from you first.

11.4 If you live in the European Economic Area, the United Kingdom or Switzerland. You have the right to:

• ask for access to your personal data and for a copy of it;
• ask us to correct data that is wrong;
• ask us to delete your data;
• ask us to restrict how we use your data;
• object to processing that we base on legitimate interests, including analytics;
• receive the data you gave us in a portable form, where this right applies;
• withdraw your consent at any time, where we rely on consent; and
• complain to your data protection authority (section 16).

11.5 If you live in Turkey (KVKK). Ryon Labs LLC is the data controller under Law No. 6698 on the Protection of Personal Data (“KVKK”).

• Purposes and legal grounds. We process personal data for the purposes in sections 2 and 5. We rely on the legal grounds in Article 5 of the KVKK: processing that is necessary to form or perform a contract; our legal obligations; the establishment, exercise or protection of a right; and our legitimate interests, provided that your fundamental rights and freedoms are not harmed. Where the KVKK requires your explicit consent, we will ask for it.
• How we collect data. We collect personal data by automated means through the App and our servers, from your app store and our subscription management provider, and from the messages you send us.
• Transfers. We transfer personal data to the categories of recipient in section 6, in Turkey and abroad, for the purposes in this policy. A transfer inside Turkey follows Article 8 of the KVKK. A transfer abroad follows Article 9. Where the Personal Data Protection Board has not decided that the destination gives adequate protection, we transfer personal data abroad on the basis of a standard contract concluded with the recipient and notified to the Board, or of another appropriate safeguard that Article 9 recognizes. Where no such safeguard is available, we transfer only in the exceptional cases that Article 9 allows. You can ask us which basis applies to a given transfer at info@ryonlabs.com.
• Your rights. Under Article 11 of the KVKK you have the right to: learn whether your personal data is processed; request information about the processing; learn the purpose of the processing and whether the data is used for that purpose; know the third parties, in Turkey or abroad, to whom your data is transferred; request the correction of incomplete or inaccurate data; request the deletion or destruction of your data under the conditions in Article 7; request that third parties to whom your data was transferred are told about a correction, deletion or destruction; object to a result against you that arises from analysis of your data solely by automated systems; and claim compensation if you suffer damage because of unlawful processing.
• How to apply. Send your request in writing to our address, or by email to info@ryonlabs.com, with the information we need to identify you and your request. We will answer as soon as possible, and within 30 days at the latest. Requests are free. If answering a request causes an extra cost, we may charge the fee set by the Personal Data Protection Board. If we refuse your request, if you find our answer insufficient, or if we do not answer in time, you may complain to the Personal Data Protection Board within 30 days of learning of our answer, and in any case within 60 days of your request.

11.6 If you live in California or another US state with a privacy law. Whether or not these laws apply to us, we offer the following.

• Categories we collect. We collect the following categories of personal information: identifiers (account identifier, IP address and, once notifications are allowed, a push token); commercial information (your Pro purchase status); internet or other electronic network activity information (app usage data, device and diagnostic data, technical logs); and the visual and text content that you submit to AI Features. Section 2 shows the sources and the purposes. Section 6 shows the categories of recipient to whom we disclose each kind of data for a business purpose. Section 9 shows how long we keep it.
• No sale, no sharing. We do not sell personal information. We do not share it for cross-context behavioral advertising. We have not done either in the last 12 months. We do not knowingly sell or share the personal information of anyone under 16.
• Sensitive personal information. We do not use or disclose sensitive personal information for purposes other than those the law permits without a right to limit.
• Your rights. You have the right to know what personal information we collect, use and disclose; to get a copy of it; to correct it; to delete it; and not to be treated unfairly for using your rights. To delete your data, you can use “Delete my data” in the App (section 11.3). To use any right, write to info@ryonlabs.com. We answer within 45 days. If we need more time, we will tell you. We will take reasonable steps to confirm that a request comes from you. An agent that you have authorized may make a request for you, with proof of that authority. If we refuse a request, you can appeal by replying to our decision. If your appeal fails, you may contact the attorney general of your state.
• Do Not Track. We do not track you across third-party websites or apps, so there is nothing for a “Do Not Track” or similar signal to switch off.

11.7 Other countries. If you live somewhere else, you may have similar rights under your local law. Write to us and we will honor them as the law requires.

12. Children

The App is for a general audience. It is not directed at children, and children under 13 must not use it. We do not knowingly collect personal data from children under 13. If you are older than 13 but under the age at which you can consent to the use of your data in your country, which is between 13 and 16 in the European Economic Area, use the App only with the permission of a parent or guardian. If you believe a child has given us personal data, write to info@ryonlabs.com and we will delete it.

13. Photos and device permissions

• Photos. When you add a photo, the App opens the photo picker of your device and you choose a photo. The App receives only the photos you choose. It does not get access to the rest of your photo library. For a photo of your fridge or your ingredients, you can take one with the camera instead.
• Camera. The App asks for camera access only at the moment you choose to take a photo of your fridge or your ingredients. It receives only the photo you take. It does not record video. If you say no, or switch camera access off later in your device settings, you can still choose a photo from your gallery or type the ingredients in.
• Microphone. The App does not ask for access to your microphone.
• Notifications. The App asks for permission to send notifications so that timers and alarms can alert you. You can change this at any time in your device settings. Timers and alarms may not alert you if notifications are off. On some devices notifications are allowed by default, and the App does not ask. Once notifications are allowed, the App also collects a push token, which lets us send notifications to your device (section 2).
• Location and contacts. The App does not ask for access to your precise location or your contacts. It reads the language and region settings of your device to choose your language, your units and your currency.
• Tracking. The App does not ask for permission to track you, because it does not track you (section 7).

14. Our website

Our website is a simple information site. The pages that show this policy and our Terms of Use do not set cookies that are not strictly necessary. They do not use advertising, third-party analytics or embedded third-party content. Like any website, the server that hosts it receives your IP address and basic details of your request, such as the time and the type of browser, in order to deliver the page and keep the site secure. If you email us from the website, section 2 (“Messages you send us”) applies.

15. Changes to this policy

We may update this policy, for example when we add a feature, change how we handle data, or when the law changes. We will post the updated policy at the same address and change the “Last updated” date. If a change is material, we will tell you in the App or by another reasonable means before it takes effect. Where the law requires your consent to a change, we will ask for it.

16. Contact and complaints

• Company: Ryon Labs LLC
• Address: 30 N Gould St Ste N, Sheridan, WY 82801, USA
• Email: info@ryonlabs.com

Please contact us first. We would like the chance to put things right.

You also have the right to complain to a data protection authority.

• European Economic Area: the supervisory authority of the country where you live or work, or where you think the problem happened.
• United Kingdom: the Information Commissioner’s Office.
• Switzerland: the Federal Data Protection and Information Commissioner.
• Turkey: the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu), as described in section 11.5.
• United States: the attorney general of your state, or the state’s privacy regulator if it has one.