Privacy policy

Last updated: October 17, 2026

Who we are

KitchenMax is a product of Weblox ("we", "us"), a business registered in Israel and based in Ashdod. We are the controller for the personal data we collect about KitchenMax users.

Accounts

Scanning kitchenware markings requires a free account. You can sign up with your email address and a password, or sign in with Google. Items and appliance settings you save sync to your account and follow you across devices, including any custom photo you add to an item.

Personal data we collect

When you create an account, we collect:

Your email address and name — from your Google account, or the ones you give us when signing up with email (email accounts also have a password, which we store only as a secure hash)
The items and appliance settings you save, so they sync across your devices. An optional custom photo you add to an item is stored with your account so every device shows it; you can remove it at any time (open the item → Edit → Reset to Default Icon)
Your subscription and payment status, if you subscribe to Premium (not your card details — see the sharing section below)

When you scan a kitchenware item, the photo is sent to our AI provider (Anthropic) to read it. Scan photos are used to answer that scan and are not stored on our servers. Anthropic deletes what it received, and the reading it produced, within 30 days, and does not use them to train its models.

Bug reports. When you send a bug report from the app or the website, we keep your description, the e-mail address you give (or the one on your account, if you were signed in), and the technical details the form adds by itself — which app version, which Android version and phone model (in the app) or which browser (on the website, from its user-agent string), and which screen you sent it from. We use them only to investigate the problem and reply to you. Reports are stored on our servers and e-mailed to us; we delete them within 90 days of the problem being dealt with, and after 12 months at the latest, and we remove the e-mail address from your reports when you delete your account.

Advertising

The free version of KitchenMax shows ads served by Google (AdMob) in the mobile app. Our website (kitchenmax.app) shows no ads at the moment; if we add them (Google AdSense), visitors from the EU and the UK will be asked for consent before any ad loads. To serve and measure ads, Google collects data such as your device's advertising identifier, approximate location (derived from your IP address), ad interactions, and diagnostics. See how Google uses data from sites and apps that use its services. Where the law requires it, ads are personalized only with your consent. KitchenMax Premium removes ads in the app.

Purposes and legal basis

We process this data to provide the scanning and sorting feature, sync your data across devices, manage your subscription, show ads that keep the free version free, and provide support — necessary for performing our contract with you or based on our legitimate interests. We also rely on legitimate interests for security and fraud prevention, and on your consent where the law requires it (for example for personalized advertising).

Who we share data with

Anthropic — processes the kitchenware photos you scan, to read their markings
Google — serves ads in the app (AdMob), and on our website if we add them, as described above, and bills Premium purchased on Android through Google Play
RevenueCat, Inc. — runs our Google Play subscription infrastructure. It receives your KitchenMax account identifier and the Google Play purchase details for your subscription (never your card details, which stay with Google), and tells our servers when your subscription starts, renews or ends. See RevenueCat's privacy policy.
Resend — delivers our e-mails: verification codes, password resets and password-change notices, new-sign-in alerts, subscription and payment notices, scan-allowance notices, account-deletion receipts, and the copy of each bug report that goes to our inbox. It receives your e-mail address, and the contents of a bug report, for that purpose.
Our hosting provider, to run the servers that sync your data
Authorities, where required by law

We do not sell your personal data.

Where your data goes

We are based in Israel, which the European Commission recognises as providing adequate protection for personal data (confirmed in its January 2024 review). Some of the providers above are outside Israel and the EEA: Anthropic, RevenueCat, Resend and Google are in the United States, and our servers are run by Vultr, a United States hosting company, from a data centre we rent from it. For a transfer to a provider not covered by an adequacy decision we rely on the safeguards in its data-processing terms — the EU–US Data Privacy Framework where the provider is certified under it, and the European Commission's Standard Contractual Clauses otherwise. Ask us at [email protected] for details.

Data retention and deletion

We keep your synced data for as long as your account is active. You can delete your account from within the app — Settings → Advanced → Delete account (see deleting your account) — or contact us to request deletion. We then remove your data, unless the law requires us to keep records longer (for example accounting records under Israeli law).

Two records live elsewhere and follow their keepers' own schedules: Google Play keeps the purchase history of a subscription bought in the app (payment providers must retain transaction records for tax and anti-fraud purposes), and bug reports you sent are kept — without your e-mail address or account link — for up to 90 days after the problem is handled, and 12 months at the latest.

Your rights

You can ask us what data we hold about you, and ask us to correct or delete it, by contacting us. Where data protection laws apply to you (including Israel's Privacy Protection Law or, for visitors in the EU/EEA, the GDPR), you may also raise a concern with the data protection authority in your country.

Security

We use encryption in transit and access controls to protect your data.

Cookies and similar technologies

The KitchenMax app doesn't use cookies. Our website (kitchenmax.app) sets no cookies of its own and shows no ads at the moment; if we add Google ads, the pages that show them may use cookies and similar identifiers set by Google to serve and measure those ads, after asking for your consent where the law requires it. The only data the website collects itself is what you type into the bug-report form.

Changes

We may update this policy from time to time. When a change matters to you — new data we collect, a new recipient, a new purpose — we e-mail the address on your account before or when it takes effect, and the "Last updated" date above changes. Minor wording fixes just update the date.