Privacy Policy

1. Information We Collect

Personal Information

When you create an account, we collect:

• Name and Email Address: For account creation and communication
• Profile Information: Optional profile details you choose to share
• OAuth Information: When you sign in with Google or Apple, we receive basic profile information (name, email, profile picture) as permitted by those services
• Purchase History: Records of in-app purchases and subscription status, used to manage your account features

Usage Information

We automatically collect:

• App Usage Data: How you interact with RecipeHero features
• Device Information: Device type, operating system, and app version
• Performance Data: App crashes and performance metrics to improve our service

Content You Create

• Recipes: Recipes you create, import, or save
• Photos: Images you take or select for recipe import or recipe photos. Photos may be processed on-device for text recognition (see Section 3: AI Features)
• Meal Plans: Your meal planning data
• Shopping Lists: Items you add to shopping lists
• Shared Content: When you share meal plans or recipes with family/friends

2. How We Use Your Information

Core App Functionality

• Provide and maintain RecipeHero services
• Sync your data across devices
• Enable recipe and meal plan sharing
• Process your meal planning and shopping list requests

Communication

• Send important service updates
• Respond to your support requests
• Notify you about shared meal plans (if enabled)

Improvement and Analytics

• Analyze app usage to improve features
• Fix bugs and enhance performance
• Develop new features based on user needs

3. AI Features and Data Processing

On-Device AI Processing

RecipeHero uses Apple's on-device machine learning capabilities to process recipes locally on your device. This includes:

• Text Recognition (OCR): When you photograph a recipe, Apple's Vision framework reads the text entirely on your device. The photo and extracted text are not sent to our servers.
• Recipe Parsing: On supported devices, Apple's Foundation Models parse recipe text into structured ingredients and instructions. This processing happens entirely on your device — no data leaves your phone.

On-device AI processing requires no account, no internet connection, and no data is transmitted to RecipeHero or any third party.

Server-Side AI Processing

When on-device processing is unavailable or for certain premium features, recipe data may be sent to our servers for AI processing. This includes:

• Recipe Import: Recipe text or URLs submitted to our API for parsing when on-device processing is not available
• AI Image Generation: Recipe metadata (name, category, ingredients) sent to generate recipe images via third-party AI services (OpenAI DALL-E)
• AI Recipe Generation: Text descriptions or dish photos submitted to generate structured recipes

Server-side processing requires an account and is subject to your subscription plan's credit limits. We do not use your recipe data to train AI models.

Bring Your Own Key (BYOK)

RecipeHero offers an optional feature that lets you use your own third-party API key (OpenAI or Google) for AI features. When BYOK is active:

• Your API key is stored exclusively in your device's secure Keychain storage. It is never sent to RecipeHero servers.
• AI requests are sent directly from your device to your chosen provider (OpenAI or Google). RecipeHero does not intercept, log, or store these requests.
• You are responsible for any usage charges from your API provider.
• Your provider's privacy policy applies to data sent via your API key.

4. Information Sharing

We DO NOT sell your personal information.

We may share information in these limited circumstances:

• With Your Consent: When you explicitly share meal plans or recipes with others
• Service Providers: Trusted third parties who help us operate RecipeHero (hosting, analytics, customer support)
• Legal Requirements: If required by law or to protect our rights and users' safety
• Business Transfers: In the event of a merger, acquisition, or sale of assets

5. Data Storage and Security

Local Storage

RecipeHero stores your recipes and meal plans locally on your device for offline access. This data remains on your device unless you choose to sync it to our servers.

Cloud Storage

When you create an account, your data is securely stored on our servers to enable syncing across devices. We use industry-standard encryption and security measures.

On-Device Secure Storage

• Authentication tokens are stored in your device's Keychain with hardware-backed encryption, accessible only when your device is unlocked
• BYOK API keys are stored in the Keychain and never leave your device
• Recipe data is stored locally using Apple's SwiftData framework

Security Measures

• Encrypted data transmission (HTTPS/TLS)
• Secure authentication with JWT tokens
• Regular security audits and updates
• Access controls and monitoring

6. Your Privacy Rights

Access and Control

• View Your Data: Access all your personal information through the app
• Update Information: Modify your profile and preferences anytime
• Export Data: Download all your data (recipes, meal plans, shopping lists, account information) in JSON format
• Delete Account: Request permanent deletion of your account and associated data. Deletion is processed immediately and is irreversible.

Data Portability

You can export your recipes and meal plans in standard formats (JSON, PDF) at any time through the app's Account Management screen.

Opt-Out Options

• Disable data syncing (use app locally only)
• Turn off sharing features
• Opt out of analytics collection
• Choose on-device AI processing only (no data sent to servers)

For Users in the European Economic Area (GDPR)

If you are located in the EEA, you have the right to access, rectify, port, and erase your data, as well as the right to restrict and object to certain processing of your data. You may exercise these rights through the app's Account Management screen or by contacting us at privacy@recipehero.app.

For Users in California (CCPA)

California residents have the right to know what personal information is collected, request deletion of personal information, and opt out of the sale of personal information. RecipeHero does not sell personal information. You may exercise your rights through the app or by contacting us.

7. Third-Party Services

Authentication Providers

When you sign in with Google or Apple, those services' privacy policies also apply. We only access the information you explicitly authorize.

AI Service Providers

For server-side AI features, recipe data may be processed by third-party AI services (currently OpenAI). These providers process data according to their own privacy policies. We do not share your personal account information with AI providers — only the recipe content needed for processing.

Analytics and Error Reporting

We collect anonymized usage analytics (screen views, feature usage) and error reports to improve the app. Analytics events contain no personally identifiable information — only anonymized action names and device-level metadata. Error reports may include technical context (error codes, device type) but never recipe content or personal data.

Notifications and Alarms

RecipeHero uses Apple's notification and AlarmKit systems for cooking timers and meal plan reminders. Timer and reminder data is processed by Apple's system services on your device. We do not receive or store notification delivery data.

8. Children's Privacy

RecipeHero is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware of such data collection, we will delete it immediately.

9. International Users

RecipeHero is operated from the United States. If you are located outside the US, your information will be transferred to and processed in the US. By using RecipeHero, you consent to this transfer.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes through the app or by email. Your continued use of RecipeHero after changes indicates your acceptance of the updated policy.

11. Contact Us