Privacy Policy
Cuisora helps you discover recipes, plan meals, and build shopping lists. This policy explains what information the app uses, where it goes, and the choices you have.
The short version: Cuisora has no user accounts. Your profile, meal plans, and shopping lists are stored on your device. When you use cloud AI features or search recipes, the information needed for that request is sent to our service providers (OpenAI and Spoonacular). We do not sell your data, show ads, or track you across other apps.
Cuisora is developed by Arpit Singh (“we”, “us”), based in the United Kingdom. We are the data controller for the processing described in this policy. If you have questions, contact arpit.s@singhfolio.app.
1. Information stored on your device
Cuisora stores the following on your device only. It is not uploaded to our servers, and the app does not sync it through iCloud:
- Food preferences: diet type (such as vegan, vegetarian, or keto), daily calorie target, preferred cooking effort, and food allergies or intolerances.
- Planning data: meal plans, saved recipes, and shopping lists.
- Chat history: your conversations with the in-app assistant.
- Subscription status: whether you have an active subscription and when it renews or expires.
- Downloaded AI models: optional on-device language model files, if you choose to download them.
Allergy and diet information can be sensitive. We use it only to filter recipes and personalize suggestions.
2. Information shared with service providers
Some features need an internet service to work. When you use them, only the information needed for that request is sent:
| Provider | When | What is sent | Why |
|---|---|---|---|
| OpenAI | When you use the cloud AI assistant or AI meal planning | Your chat messages and relevant planning context, such as diet, allergies, calorie target, and current meal plan or recipe details | To generate replies, recipe ideas, and meal plans |
| Spoonacular | When you browse, search, or open recipes | Search terms and filters, such as diet, intolerances, meal type, calories, and cooking time | To return recipes, ingredients, and nutrition information |
| Apple | When you subscribe, restore, or manage purchases | Purchase and transaction information, handled by Apple | To process payments and verify your subscription |
| RevenueCat | When you view the subscription screen or make a purchase | An anonymous app user ID, transaction details, subscription screen views, and basic device information (such as OS version, app version, and region) | Subscription and revenue analytics |
| Google Firebase | When the app starts | Technical data needed by the Firebase SDK, such as an app instance identifier and app configuration | App infrastructure |
| Hugging Face | Only if you download an on-device AI model | A standard download request, which includes your IP address | To deliver the model file |
Recipe images are loaded from the image servers of the recipe source. Like any web request, that exposes your IP address to those servers.
About OpenAI
Before cloud AI is used for the first time, Cuisora asks for your permission to send your messages to OpenAI. According to OpenAI’s API policies, data sent through the API is not used to train OpenAI’s models by default, and may be kept for up to 30 days for abuse and misuse monitoring. See the OpenAI Privacy Policy and API data usage policies.
Please do not share information in chat that you would not want processed by a third party, such as your full name, address, or medical records.
On-device AI
If you choose an on-device option (Apple Intelligence or a downloaded model), your messages are processed on your device and are not sent to OpenAI.
Provider privacy policies
3. What we do not do
- We do not sell or rent your personal information.
- We do not show advertising or use your data for targeted ads.
- We do not track you across other companies’ apps or websites.
- We do not require an account, email address, or phone number.
- We do not access your location, contacts, photos, camera, or health data.
4. How long data is kept
- On your device: until you delete it in the app or delete the app.
- Service providers: according to each provider’s retention policy. For example, OpenAI may keep API data for up to 30 days.
- Subscription records: kept by Apple and RevenueCat as required for billing, tax, and legal purposes.
5. Your choices and rights
- Delete chat history, meal plans, and shopping lists from inside the app at any time.
- Delete everything stored on your device by deleting the Cuisora app.
- Avoid cloud processing by using an on-device AI option, or by not using the AI assistant.
- Manage or cancel your subscription in iPhone Settings › [your name] › Subscriptions.
Under the UK GDPR and the Data Protection Act 2018 (and the EU GDPR if you are in the EU), you have the right to:
- access the personal information we hold about you;
- have inaccurate information corrected;
- have your information deleted;
- restrict or object to certain processing, including processing based on legitimate interests;
- receive your information in a portable format;
- withdraw your consent at any time, without affecting processing that already happened.
California residents have similar rights under the CCPA/CPRA. Because we don’t run our own servers or accounts, most of your data is already under your control on your device. For data held by a service provider, email us and we will respond within one month.
If you are unhappy with how we handle your information, you can complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113. If you are in the EU, you can contact your local data protection authority. We’d appreciate the chance to resolve your concern first, so please contact us.
6. Legal bases for processing
We rely on the following legal bases under the UK GDPR:
- Contract: to provide the features you ask for, such as recipe search, meal planning, and your subscription.
- Explicit consent: for sending your messages and planning context to cloud AI. This also covers any allergy or dietary information that could reveal health details, which is special category data. You can withdraw consent by switching to on-device AI or not using the assistant.
- Legitimate interests: for subscription analytics and keeping the app running reliably. You can object to this processing.
- Legal obligation: for keeping purchase records where the law requires it.
7. International transfers
Our service providers, including OpenAI, Spoonacular, RevenueCat, and Google, may process data in the United States and other countries outside the UK. These transfers are protected by appropriate safeguards, such as the UK Extension to the EU–US Data Privacy Framework, the UK International Data Transfer Addendum, or Standard Contractual Clauses.
8. Security
Data on your device is protected by iOS sandboxing and device encryption. Connections to service providers use HTTPS. No method of transmission or storage is completely secure, but we work to protect your information.
9. Children
Cuisora is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided personal information, contact us and we will help remove it.
10. Changes to this policy
We may update this policy as the app changes. We will change the effective date above and, for significant changes, notify you in the app.
11. Contact
Arpit Singh
Email:
arpit.s@singhfolio.app