Nappe

Privacy Policy

Last updated: April 24, 2026

1. Who we are

Nappe ("we", "us", "our") is a cloud-based SaaS platform for creating, costing, and exporting culinary technical cards. The service is operated at my.nappe.app.

2. Data we collect

We collect the following information when you use Nappe:

  • Account data: name, email address, hashed password.
  • Workspace data: products, preps, technical cards, projects, purchase orders, and all related content you create.
  • Usage data: anonymized analytics events (page views, feature usage) via PostHog to understand how the product is used.
  • Technical data: IP address, browser type, session tokens stored server-side.

3. How we use your data

  • To provide and operate the Nappe service.
  • To send transactional emails (account verification, password reset, team invitations).
  • To improve the product based on anonymized usage patterns.
  • We do not sell your data to third parties.
  • We do not use your recipe or cost data for any purpose other than delivering the service to you.

4. Data storage and security

Your data is stored on servers located in the European Union. We use encrypted connections (TLS/HTTPS) for all data in transit. Passwords are stored as bcrypt hashes — we never store plaintext passwords.

5. Your rights (GDPR)

If you are in the European Economic Area, you have the right to:

  • Access — request a copy of the data we hold about you.
  • Export — download all your workspace data as JSON from Settings → Advanced → Export my data.
  • Rectification — correct inaccurate personal data.
  • Erasure — delete your account and all associated data from Settings → Advanced → Danger zone → Delete account.
  • Portability — receive your data in a machine-readable format (JSON export).
  • Object — opt out of analytics tracking via the cookie consent banner.

6. Cookies and analytics

We use PostHog for product analytics. PostHog collects anonymized usage data to help us understand which features are used and improve the product. You can opt out of analytics via the cookie consent banner shown on first visit. Declining analytics does not affect any functionality of the service.

7. Data retention

We retain your data for as long as your account is active. Free plan accounts with no activity for 6+ months may receive a warning email before data removal. Paid accounts are never automatically removed. You can delete your account at any time from Settings.

8. Third-party services

  • Resend — transactional email delivery.
  • PostHog — product analytics (opt-out available).

9. Contact

For privacy-related requests or questions, please email us at privacy@nappe.app.