‹ Back
PrivacyTerms
RUENFRDEES

Privacy Policy

This document explains what data the RecipePlan app collects, why, who it is shared with and how to delete it. Operator: [имя или ИП владельца], contact: [контактный e-mail]. Last updated 27 August 2026.

What we collect

Account: your e-mail address and password. The password is stored only as an irreversible hash — we never see it. If you sign in with Apple, we receive an identifier and, at your choice, a relay address.

Content you create: recipes, ingredients, steps, notes, tags, collections, dish photos, meal plan, shopping list and pantry.

Technical data: a device token for notifications, daily usage counters, app version. We use no advertising identifiers, no analytics and no trackers.

Voice: when you dictate a recipe or a question, your device’s system engine turns your speech into text. Only the text reaches us — the recording itself never does, and we do not store it.

The app used to offer sign-in without registration. Those accounts were created anonymously and no e-mail was requested; new ones are no longer created, and an existing one can be linked to an e-mail in Profile at any time.

Health data stays on your device

The foods you exclude (allergens, diets) are stored only on your device and are never sent to our server.

The single exception is a question to the AI assistant: so that it does not suggest dishes with those foods, the list is sent along with your question. This happens only with your separate consent, which you can withdraw in settings.

Photos and scan originals

The photo or PDF a recipe was recognised from stays on your device only and is never synchronised. Large PDFs are uploaded temporarily for the duration of recognition and deleted immediately afterwards.

A small dish cover image is stored on the server so you see it on all your devices. It is reachable via a link that cannot be guessed, and we never publish these links; deleting the recipe or your account deletes the file. Please note: if you share such a link yourself, the recipient can open the image without signing in.

Why we process data

To run the app: store your recipes, sync them across devices, calculate nutrition, build the shopping list.

To recognise recipes from photos, PDFs and links — for this the content is sent to an AI model.

To send notifications about finished recognition and planned cooking, if you allowed notifications.

To enforce free-tier limits and prevent abuse.

Who receives data

Anthropic (USA) — recipe recognition, translation and assistant answers.

Google (Ireland/USA) — delivery of notifications to Android devices via Firebase Cloud Messaging: a technical device address and the notification text are transmitted. When you use voice input on Android, speech recognition is performed by Google’s system engine: the recorded speech fragment is sent there.

Supabase (Ireland) — database, accounts and photo storage.

Vercel (USA) — application hosting and request handling.

Apple (USA) — delivery of push notifications to iPhones. When you use voice input, speech recognition may be performed on Apple servers; in that case the recorded speech fragment is sent there.

We do not sell data, do not share it with advertising networks and do not use it for profiling.

How long we keep data

For as long as your account exists. You can delete it at any time: Profile → “Delete account”. Deletion erases recipes, photos, plan, shopping list, pantry, usage history and the account itself. This is irreversible.

Technical usage counters are deleted automatically after 90 days. Linked devices and the translation cache — after 180 days without activity. Recipes, photos, meal plan and pantry are kept for as long as your account exists: only you delete them.

Your rights

You may obtain a copy of your data, correct it, delete your account entirely, or withdraw consent for processing your exclusion list. Write to [контактный e-mail] or use the app settings.

If you are in the European Union, you may lodge a complaint with your national supervisory authority.

Children

The app is not intended for children under 16. We do not knowingly collect their data.

Territory

The service is not intended for use in the Russian Federation and is not directed at that market. Data is processed on servers in the European Union and the United States.

Changes

We may update this policy. The date above shows the current revision; material changes are shown in the app before they take effect.