Probashi Ranna

Privacy policy for the Probashi Ranna app

Last updated: 1 November 2026. The German version prevails.

In short

• Probashi Ranna needs no account. On first start the app registers an anonymous installation with our server and gets a random installation ID. We don't collect your name, e-mail address, phone number, contacts, location or advertising ID.
• Your favorites, shopping list, timers and settings are stored only on your device.
• No ads, no analytics, crash-reporting or tracking services.
• Premium is bought through Google Play or the App Store. To unlock it, the app sends the store's purchase proof to our server for verification. We never see your payment details.
• In the app's settings you can export your data and delete the data our server holds for your installation.

1. Controller

Md Iearulislam
E-mail: hello@iearul.xyz
Postal address: see the legal notice (Impressum).

There is no data protection officer.

2. Anonymous installation

When you open the app for the first time, it registers an installation with our server admin.iearul.xyz (section 6). It sends the platform (Android or iOS), the app version and the build number. The server creates a random installation ID and a token and returns them; the app keeps them on your device and uses the token for requests that need it, such as verifying a purchase. The server stores the installation ID, a hash of the token (not the token itself), platform, app version and build, and when the installation was created and last used.

We don't collect your name, e-mail address, phone number, contacts, location or advertising ID, and the installation ID is not linked to any of them.

Legal basis: providing the app and Premium (Art. 6(1)(b) GDPR) and protecting the service against abuse (Art. 6(1)(f) GDPR). Storing the installation ID and token on your device is based on Section 25(2) no. 2 TDDDG. We keep the installation data until you delete it in the app (section 8); after that only a deactivated entry without a valid token remains.

3. Data on your device

Your favorites, your shopping list, cooking timers, recent searches and settings such as your country and app language are stored only on your device and are not sent to us. There is no sync with our server: your personal lists stay on the device.

You choose your country yourself in the app. The app does not access your location.

The app also keeps the recipe list it has loaded and, with Premium, the offline packs you downloaded. They contain recipe content, not personal data.

Uninstalling the app deletes this data. Your system's own device backup (Google or Apple) may include app data, depending on your device settings; we have no access to such backups.

4. Buying Premium

Google Play or the App Store process the purchase under your Google or Apple account. We never receive payment details such as card numbers.

To unlock Premium, the app sends the purchase proof it gets from the store to our server: on Android the purchase token, product ID and package name; on iPhone the signed transaction from the App Store, which contains the product and the app's bundle ID. Our server checks it with Google or Apple and stores the verified purchase state linked to your installation ID: platform, product, state (for example pending, verified or refunded), the store's order or transaction reference, the purchase proof in encrypted form and the relevant times. When you buy, the app passes your installation ID to the store as an anonymous account reference so the purchase can be matched to your installation. Google and Apple notify our server when a purchase is refunded or revoked, so your Premium status stays correct.

Legal basis: Art. 6(1)(b) GDPR. We keep the purchase record as long as Premium can be restored. If you delete your data (section 8), we keep it, so the purchase can't be reused by others and you can still restore it with the same store account.

For accounting, refunds and legal retention duties the stores give us order and sales information (for example order number, date, country, product, price). Legal basis: Art. 6(1)(b) and (c) GDPR. We keep it as long as tax and commercial law require (up to 10 years, § 147 AO).

Android: when the app connects to Google Play (for example to buy, restore or check a purchase), Google's Play purchase library collects its own diagnostics, such as library and app version, device model, Android version, language, country and network type, and sends them to Google (server firebaselogging.googleapis.com) – no recipes or lists. This processing is done by Google [OWNER: legal basis and description of Google's processing – have them reviewed]. On iPhone, purchases run through the system's App Store service.

The stores' own privacy policies apply to their processing: Google, Apple.

5. Reporting a problem with a recipe

Reports are optional. If you use Report a problem (ভুল জানান) in a recipe, the app sends your text, the kind of problem you picked, the recipe ID and version, and your app language and country. If the app has registered an installation, the report is linked to its installation ID. To prevent abuse, the server stores a hashed form of your IP address, not the address itself. Please don't write personal details in the report.

We use reports only to check and correct recipes and to handle rights and safety notices. Legal basis: Art. 6(1)(f) GDPR (correct and safe content). We keep a report as long as we need it for this.

6. Our server and server logs

The app's server runs at admin.iearul.xyz, hosted by Hostinger International Ltd. (Cyprus). The app loads recipes and recipe photos from there. With recipe requests it sends the country you chose, so it gets the matching ingredient names, and with every request it sends the platform and app version.

For each request the server processes your IP address and the time of the request, together with the requested address, in server logs. They are used for security and to limit the number of requests (rate limiting). Legal basis: Art. 6(1)(f) GDPR (secure operation).

How long server logs are kept: [OWNER: retention period from the Hostinger settings]

7. Cooking timers

Timers use local notifications that your device schedules itself; nothing is sent to a server for this. The app asks for permission to show notifications. If you don't allow them, timers still run inside the app, but no alert appears while the app is closed.

8. Exporting and deleting your data

Export: Settings › Export my data (সেটিংস › আমার তথ্য রপ্তানি) creates a file (JSON) with your favorites and shopping list and, if the app has registered an installation, the data our server stores for it (installation and purchase status). The app opens your system's share menu; where you save or send the file is your choice.

Delete: Settings › Delete my data on the server (সেটিংস › সার্ভারে রাখা আমার তথ্য মুছুন) deletes the personal data our server holds for your installation and deactivates its installation ID and token. Our record of a verified purchase is kept (section 4); the purchase itself stays with Google or Apple, and you can restore Premium with the same store account. Deleting is not a refund. Reports you sent are not covered by this button; write to us if you want one deleted.

Favorites and lists on your device can be removed in the app, and uninstalling the app deletes all its data on the device.

You can also send these requests by e-mail to hello@iearul.xyz. Because we don't know who you are, we may need your installation ID to find your data; it is part of the export file.

9. Support requests

If you write to us by e-mail or through the contact form, we process your e-mail address, your name if you give it and your message to answer it (Art. 6(1)(b) or (f) GDPR). We delete it once your request is settled, unless the law requires us to keep it. The app never attaches anything automatically. Please don't send personal data we don't need.

10. This website

The product pages use no cookies, no analytics and no embedded third-party services (no web fonts, maps or videos). The website is hosted by Hostinger International Ltd. (Cyprus). When you visit, the server processes technically necessary data (IP address, date and time, requested page, amount of data, browser and operating system) in server logs. Legal basis: Art. 6(1)(f) GDPR (secure operation). The app never calls this website itself; links open in your browser only when you tap them.

When someone shares a recipe link, it opens the recipe preview page on this website. Your browser then loads the recipe's title, photo and introduction from admin.iearul.xyz (section 6); only the recipe ID is sent, and no cookies are set.

11. App permissions

• Android: “internet” and “network state” to load recipes, offline packs and purchases; “notifications” (Android 13 and later) for cooking timers. Google's purchase library adds “billing”. Libraries for downloads and timers may add technical permissions, such as keeping the phone awake while a download runs.
• iPhone: the app asks for notification permission for cooking timers.
• The app does not ask for location, contacts, camera, microphone or photos and uses no advertising ID. There is no tracking.

12. Children

Probashi Ranna is a cooking app for adults. It is not directed at children.

13. Your rights

You have the right of access, rectification, erasure, restriction, data portability and objection (Art. 15–21 GDPR) and the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the one in your federal state. Your favorites and lists are on your device, where you can view, export and delete them yourself. For data on our server, use the export and delete functions in the app or contact the address in section 1.

14. Changes

If the app changes so that other data is processed (for example if we switch on sync or add a new service), we update this policy first.