Privacy

What it keeps

• Your account: username, name, email if you give one, a scrambled form of your password, and your time zone.
• What you put in: recipes and your own versions, notes, ratings, favorites, collections, what you cook and when, your meal plan, shopping list, pantry, diet and allergy choices, and settings.
• What you import: links, pasted text, photos, and files (cookbook PDFs included), kept so they can be read and re-read. Recipe photos are stored without the location and camera details phones add.
• An activity log of what you do in the app (for example “Rated Lemon Cake” or “Signed in”), with the internet address and browser for sign-ins. Up to the latest 5,000 entries per person are kept.
• For AI features: when each request was made, by whom, for what, and what it cost. Not what was sent.

Who can see it

• Admins can see the activity log, everything imported (including uploaded files), any recipe, and how much AI each person uses. They use this to run the server, fix problems, and stop abuse.
• Friends see only what you choose under Friends → What friends see. What you cook and plan is off until you turn it on.
• People in your kitchen share its meal plan, shopping list, and pantry, and their diets and allergies shape each other’s suggestions.
• Anyone with a share link you made can see that one recipe, without your name or notes, until you turn the link off.
• Nobody else. Your notes on recipes and your own versions are never shown to friends.

Where it goes

• AI services. When an AI feature reads an import or answers a request (reading a photo or page, “Make it my way”, cook-mode questions), the text, photo, or file goes to the AI provider the admins chose: Anthropic (Claude) or OpenRouter. Admins may also run Claude, from Anthropic, to read imports that wait in the queue. If a free model is set up, it may be sent text (not your photos or files, unless an admin changes that), and free models may keep what they’re sent.
• Email. Sign-in links, email confirmations, and the weekly plan email (only if you turn it on; every one has a one-click link to stop it) are sent through the server’s email provider.
• Websites you import from. Importing a link fetches that page from the server, not your device.

Cookies and storage

One cookie keeps you signed in, and another remembers a device you trust. Your browser also stores a few preferences, like the theme. No tracking cookies.

How long it’s kept, and deleting it

• Everything stays until you remove it or delete your account.
• Your account has Export my data (a copy of what’s yours) and Delete my account. Deleting your account removes everything personal, plus imports nobody else has, with the files you uploaded. Recipes other people also have stay for them.
• Backups of the whole server are kept to recover from mistakes: on the server for about two weeks, and an encrypted off-site copy for up to a year. Deleted data leaves the backups as they age out.

Questions

Ask the admin who invited you. They can also delete your account for you.