Privacy Policy

1. Who is the data controller

Ricky Tools is an internal kitchen-management application built and operated by Chef Ricky. The data controller is Chef Ricky himself, in his capacity as the owner of this app. He manages every user account and all data stored in the app, and he is the contact for any privacy question or request. Reach him directly through the app.

2. What data is stored

The app stores only what it needs to work:

• User accounts: username, role, the date the account was created, the date of the last login, and a scrypt hash of your password. Passwords are never stored in readable form.
• Work data: the product library (including product photos, stored as compressed data URLs inside the database), saved count sheets, storages with inventory items, in-app saves (backups), the expense log (date, category, amount, supplier, payment method, notes), budgets, and the chosen currency.
• Security data: a hashed counter of failed login attempts per IP address lives in the database so the lockout ladder survives across server restarts. The IP is also recorded on each session for the same reason.

3. What is never collected

The app handles no payment data, contains no analytics, no tracking, no advertising, and loads no third-party scripts - no external fonts, embeds, iframes, analytics pixels, or trackers of any kind. Pages render entirely from the app itself, so nothing you do here is visible to anyone outside the operator.

4. Where the data lives

The app is currently hosted on Cloudflare: a Cloudflare Worker serves the app, and a Cloudflare D1 SQLite database holds all data. All data stays within that single deployment. It is not shared with, or sold to, anyone else.

5. Legal basis (GDPR)

Processing of your account and work data is based on the performance of a contract (your user account and the work tools you use) and on the operator's legitimate interest in running and securing the service. The app does not rely on consent for any processing, because there is no tracking, profiling, or advertising that would require it.

6. How long data is kept

Account data is kept for as long as the account exists, or until Chef Ricky deletes it. Work data (products, photos, counts, inventory, expenses, budgets, saves) lives in the shared workspace until it is deleted in the app. Session records and login-failure counters are pruned automatically after inactivity.

7. Your rights (EU GDPR Art. 15-20)

You have the following rights under Articles 15-20 of the EU GDPR. Chef Ricky fulfils them on request:

• Access - see what data is stored about you.
• Rectification - correct data that is wrong (for example your username) under Account.
• Erasure - delete your account and its data.
• Restriction - pause the processing of your data.
• Portability - receive a copy of your data in a machine-readable form (for example an in-app save download).

You also have the right to lodge a complaint with a data-protection authority. Since the app stores no tracking data, there is nothing hidden to unearth - Chef Ricky can see and export everything directly through the app.

8. International transfers

When the app is hosted on Cloudflare, data is processed in data centres which may sit outside the European Economic Area (EEA). Such transfers are covered by Cloudflare's Data Processing Addendum and the EU Standard Contractual Clauses.

9. Children

The app is a workplace tool and is not intended for children. Accounts are created by the superadmin for kitchen staff only, and the service is not directed at anyone under 16.

10. Changes to this policy

If this policy changes, the date at the top of this page changes with it. For significant changes, Chef Ricky will inform users of the app directly.

11. Contact

Questions or requests? Contact Chef Ricky directly through the app. He is the data controller and handles every request personally. See also the Cookie Policy and the Terms of Use.