Privacy policy

Who is responsible

Responsible for your data at Wundernom is [operator's name], [address], email: contact@wundernom.com.

When you visit the website

When you open a page, the host stores technical details: IP address, time, the page and the browser. They keep the website running securely. Wundernom can see them for one day. How long Vercel keeps them beyond that for security and operations is up to Vercel. The legal basis is Art. 6(1)(f) GDPR.

The public pages set no cookies and load no analytics tool.

Beta waitlist

When you sign up for the beta, Wundernom stores your email address, your postcode, your children's age groups (no names, no birth dates), your language, your place on the list and when you signed up and confirmed. If you came through a link, Wundernom also stores who invited you and which campaign the link belongs to.

Wundernom needs these details to invite you to the beta. The confirmation email goes out through Resend. The legal basis is [confirm].

The details stay [confirm]. You can ask to be taken off the list at any time: write to contact@wundernom.com.

Account and sign-in

An account needs your email address. To sign in, you get a link by email. After that, a cookie keeps you signed in. Sign-in needs it, so it needs no consent (§ 25(2) no. 2 TDDDG). The legal basis is Art. 6(1)(b) GDPR.

When you accept the beta terms in the app, Wundernom stores which version you accepted and when. This stays as long as your account exists. The legal basis is Art. 6(1)(b) GDPR.

The app remembers your language, colour scheme and your consent to health details in your browser's storage, on your device.

Invitations

Anyone in a household can invite other adults by entering their email address. Wundernom sends the invitation through Resend. The email holds only the invitation link, which expires after 7 days. The legal basis is Art. 6(1)(f) GDPR: the household's interest in planning together.

Your household details

To plan your week, Wundernom stores what you enter: who eats with you, the children's ages, what someone never eats, your shops, your weekly plans and shopping lists.

For the person who holds the account, the legal basis is Art. 6(1)(b) GDPR. For everyone else in the household, children included, it is Art. 6(1)(f) GDPR: your household's interest in planning for everyone at the table.

Allergies and intolerances

Allergies and intolerances are health data (Art. 9 GDPR). Wundernom stores them only with your explicit consent, which it asks for the first time you enter one. You consent for your children as the people with parental responsibility. Enter another adult's allergies only if that adult has explicitly consented themselves. The legal basis is Art. 9(2)(a) and Art. 6(1)(a) GDPR.

You can withdraw your consent at any time: delete the details or write to contact@wundernom.com. What was handled before that stays lawful.

Profile photos

You can add a photo for each person in the household. It is optional. Without a photo, Wundernom shows their initials. Only your household sees the photos.

An adult with their own account uploads only their own photo. For a child, you confirm when uploading that you have parental responsibility; for an adult without an account, that the person agrees. The legal basis is Art. 6(1)(f) GDPR: your household's interest in seeing at a glance who eats with you.

Wundernom shrinks every photo to 256 × 256 pixels and removes metadata such as the place it was taken and the camera. The original is not stored. Photos never go to the AI, and Wundernom uses no face recognition. They are stored with Vercel in Frankfurt am Main.

When you replace or remove a photo, Wundernom deletes it straight away. Any adult in the household can remove a child's photo with one tap.

Timers with the app closed

You can let a cooking timer ring even when the app is closed. It is optional, and your device asks only after you tap. Wundernom then stores, for that device, the push address your browser hands out for it and the keys the message is encrypted with, and for each running timer the recipe name, the step and when it ends.

The message itself reads like "Timer up: recipe, step 2" and holds no names. It is delivered by your browser's push service: Apple (Safari), Google (Chrome), Mozilla (Firefox) or Microsoft (Edge). The service sees the push address and when a message arrives; it gets the content only encrypted. Vercel Workflow runs the wait until the ring at Vercel; what it stores for that (ids and times, not the message text) Vercel deletes as soon as the run ends [confirm]. The legal basis is Art. 6(1)(b) GDPR [confirm].

You can switch it off at any time: in cooking mode with "Stop ringing with the app closed", and Wundernom deletes the push address straight away, or in your browser's or device's settings.

Feedback and ratings

When you say how a meal went, Wundernom stores your rating, whether it was cooked and eaten, and your notes on it. This makes the recipes better for every family, for example more accurate amounts, and your feedback counts for the test kitchen. Other families never see your ratings.

The legal basis is Art. 6(1)(f) GDPR: the interest in improving the recipes. For the test kitchen it is Art. 6(1)(b) GDPR.

How the AI plans

Wundernom drafts weekly plans with an AI language model from Anthropic. Details about the food go to the model: how many people eat, the children's age groups, allergens, what should not be served, ingredients and amounts. Wundernom puts these details together without names or email addresses.

What you write yourself, such as wishes for the week or notes on a rating, goes to the model exactly as you typed it. So best leave names and health details out of it.

The plan is a suggestion and counts only once you approve it. There is no automated decision under Art. 22 GDPR.

Usage statistics

Usage statistics are not switched on yet. Before they start, this page names the date.

Wundernom counts on the server which steps households take in the app, such as a confirmed beta sign-up or an approved week. That way Wundernom sees where the app gets stuck and what a change does. Nothing is stored on or read from your device for this: no cookie, no script in the browser. On the public pages, Wundernom only counts how often a page was opened, without knowing by whom.

PostHog receives the name of the step, when it happened, the language, the app version and a few yes-or-no values and numbers from a fixed list. Instead of your household it gets an id that Wundernom calculates from it and that holds no name and no email address. Wundernom uses the same id to ask PostHog which version of a feature your household sees. Never included: names, email addresses, postcodes, ages, allergies, what someone never eats, your shops or your own text. PostHog discards your IP address and does not work out a location from it.

PostHog (PostHog Inc., San Francisco, California, USA) handles the data as a processor in its EU cloud in Frankfurt am Main. PostHog is a US company, so access from the US is possible. Transfer to the US based on the EU-US Data Privacy Framework [confirm] and standard contractual clauses (Art. 46(2)(c) GDPR), see service providers.

The legal basis is Art. 6(1)(f) GDPR: the interest in improving the app. PostHog keeps the data for at most 12 months.

You can object at any time: switch off "Usage data" in Settings or write to contact@wundernom.com. One adult in the household objecting is enough. Wundernom then counts nothing more for your household and has PostHog delete what it already holds about your household and your beta sign-up.

Service providers

These providers handle data on behalf of Wundernom. There is a data processing agreement under Art. 28 GDPR with each of them [confirm].

• Vercel (Vercel Inc., Covina, California, USA): hosting for the website and the app. The app runs in Frankfurt am Main. Storage of profile photos (Vercel Blob, Frankfurt am Main). Backups may be held outside the EU [confirm]. Transfer to the US based on standard contractual clauses (Art. 46(2)(c) GDPR); in addition, the EU-US Data Privacy Framework [confirm]; a copy on request to contact@wundernom.com.
• Neon (Databricks, Inc., parent company of Neon, LLC; San Francisco, California, USA): the database for accounts and household details, server location Frankfurt am Main (AWS eu-central-1). Neon uses subprocessors in the US; the list is available on request. Transfer to the US based on the EU-US Data Privacy Framework (Databricks is certified) and standard contractual clauses; a copy on request to contact@wundernom.com.
• Resend (Plus Five Five, Inc., San Francisco, California, USA): sign-in and invitation emails and the beta waitlist confirmation; stored in the US for 30 days. Resend is certified under the EU-US Data Privacy Framework (Resend DPA §11.1). Transfer to the US based on standard contractual clauses; a copy on request to contact@wundernom.com.
• Anthropic (Anthropic Ireland, Limited, Dublin, Ireland): the AI language model for the weekly plans, with the food details and your own text above; processed in the US. Anthropic deletes inputs and outputs within 30 days [confirm]. Transfer to the US based on standard contractual clauses (Art. 46(2)(c) GDPR) [confirm]; a copy on request to contact@wundernom.com.
• PostHog (PostHog Inc., San Francisco, California, USA): usage statistics, see above; stored in PostHog's EU cloud in Frankfurt am Main for at most 12 months. Transfer to the US based on the EU-US Data Privacy Framework [confirm] and standard contractual clauses; a copy on request to contact@wundernom.com.

How long data stays

• A sign-in link is valid for 24 hours.
• The sign-in cookie expires once you have not used the app for 7 days.
• Resend deletes its logs of sent emails after 30 days.
• Your account and household details stay until you ask for deletion. After that, Wundernom deletes them within 30 days.
• Wundernom deletes a profile photo straight away when you replace or remove it.
• Wundernom deletes a timer that ran out or was stopped 24 hours after its end. It deletes a device's push address as soon as the push service says it no longer exists, or once no timer has rung or been started on that device for 60 days.
• When the account is deleted, Wundernom deletes the account, household details and photos within 30 days. In our service providers' backups they stay until those backups expire as usual, at most 7 days for the database; Wundernom does not restore deleted data from them.
• PostHog deletes the usage statistics after at most 12 months. If you object, Wundernom has PostHog delete them straight away.

Legal retention duties are not affected.

Your rights

You have the right to access (Art. 15 GDPR), correction (Art. 16), deletion (Art. 17), restriction (Art. 18) and data portability (Art. 20). Write to contact@wundernom.com.

You can complain to a data protection authority, in particular the one where you live (Art. 77 GDPR). The Federal Commissioner for Data Protection lists their addresses: bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-table.html

Right to object

Where Wundernom handles data under Art. 6(1)(f) GDPR, you can object at any time on grounds relating to your particular situation (Art. 21(1) GDPR). This covers the server logs, the usage statistics (the switch in Settings is enough for that), the details about others in the household, profile photos, invitations and feedback. Write to contact@wundernom.com. Wundernom then stops handling that data, unless compelling legitimate grounds override your objection.

What you have to enter

Without an email address there is no account. Everything else is optional. Without it, the plan fits you less well.