Privacy Policy

Effective Date: April 29, 2026

This comprehensive Privacy Policy governs the manner in which BitCity Kft. ("Company", "we", "us", or "our") collects, uses, maintains, and discloses information collected from users (each, a "User") of the WhipUp mobile application and its associated website, cocooky.com (collectively, the "Service"). We are fully committed to safeguarding your personal data and ensuring strict compliance with the GDPR, FTC guidelines, and other applicable global data privacy laws.

1. Information Collection and Processing

We collect and process various types of personal data to deliver, secure, and improve our services:

• Account & Authentication Data: To provide secure access, we integrate third-party authentication services (Google, Facebook, Apple Login). Through these, we collect your email address and basic profile identifier. For direct email registrations, credentials are cryptographically secured and managed by AWS Cognito.
• Technical & Usage Data: Automatically collected data includes your IP address, device type, operating system version, and the precise timestamp of your Terms of Service consent. This forms our compliance audit trail.

2. Device Permissions and Hardware Access

To fully utilize WhipUp's culinary features, the App requests explicit permission to access specific device capabilities. Access is strictly limited to active usage scenarios:

• Location Services (GPS): We request foreground location access to determine proximity to local grocery stores and markets. This data is dynamically processed and never retained or sold to third-party ad networks.
• Camera & Microphone: Required for advanced ingredient scanning, visual recognition, and voice-assisted navigation. Data processed by these sensors remains local or is securely transmitted via encrypted channels solely for immediate processing.
• Local Storage (Files/Media): Accessed to cache essential App assets, store temporary audio command files, and save offline grocery data, significantly improving application performance and load times.
• Push Notifications: We utilize the Apple Push Notification service (APNs) and Firebase Cloud Messaging (FCM) to deliver timely culinary reminders, system updates, and alerts. You may opt-out of these notifications at any time via your device's operating system settings.

3. Legal Basis for Processing (GDPR)

Our legal basis for collecting and using the personal data described above depends on the personal data concerned and the specific context in which we collect it:

• Consent: You have given us clear consent to process your personal data for specific purposes (e.g., Push Notifications, Location Services).
• Contractual Necessity: Processing is necessary for the performance of a contract with you (e.g., Account creation, providing core App functionality).
• Legitimate Interests: Processing is necessary for our legitimate interests, such as securing our network, preventing fraud, and ensuring legal compliance via audit trails.

4. Financial Transactions and External Commerce

WhipUp offers in-app purchases and subscriptions. Transactions are securely processed entirely by the Apple App Store or Google Play Store via RevenueCat. Additionally, the Service integrates with third-party grocery retailers (e.g., Amazon Fresh, Walmart, Instacart). When you click on these third-party links to purchase ingredients, certain technical data and "cookies" may be used by these partners to track the referral and process the transaction. We do not share your private culinary profile with these retailers; only the intent to purchase specific items is transmitted.

5. Advertising and Third-Party Analytics

WhipUp displays advertisements provided by Google AdMob. To provide relevant ads and measure performance, these services may collect and use device identifiers (such as IDFA on iOS and Advertising ID on Android).

App Tracking Transparency (ATT): On iOS devices, we explicitly request your permission before tracking your activity across other apps and websites for advertising purposes. You can manage your preferences or opt-out at any time through your device settings.

6. Data Security and Retention

We implement robust, industry-standard technical and organizational security measures to protect your data against unauthorized access, destruction, or alteration. Our primary cloud infrastructure is hosted on secure Amazon Web Services (AWS) servers. We retain personal information only for as long as your account is active or as needed to comply with our legal obligations.

7. Your Data Protection Rights

Depending on your jurisdiction, you possess specific data protection rights, including the right to access, rectify, or object to the processing of your data. Crucially, you possess the Right to Erasure ("Right to be Forgotten"). You may initiate a complete deletion of your account and associated personal data at any time by navigating to the App's settings menu and selecting the "Delete Account" function.

8. Affiliate Disclosure and Third-Party Links

To support our development and provide high-quality recipes, WhipUp participates in various affiliate marketing programs. This means that when you click on certain links and make a purchase, we may receive a small commission at no additional cost to you.

• Amazon Associate Disclosure: BitCity Kft. is a participant in the Amazon Services LLC Associates Program. As an Amazon Associate, I earn from qualifying purchases.
• Advertising Partners: We use Google AdMob to deliver in-app advertisements. Google’s use of advertising cookies and identifiers enables it and its partners to serve ads to our users based on their visit to our Service and/or other sites on the Internet.
• Affiliate Networks: We partner with the Impact.com affiliate network to facilitate relationships with retailers such as Walmart, Instacart, and other grocery providers.
• Third-Party Privacy: These third-party sites have separate and independent privacy policies. We have no responsibility or liability for the content and activities of these linked sites.

9. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy, our data practices, or our affiliate relationships, please contact us at:

BitCity Kft.
Email: info@bitcity.hu