Privacy Policy

1. Who we are

Crispify is an iPhone app for saving, organizing and planning recipes. This policy covers the Crispify app and its share extension, our server at api.crispify.app, and this website. “Crispify”, “we” and “us” mean the operator of Crispify, who is responsible for your personal data (the “controller”).

Questions or requests: hello@crispify.app.

2. What we collect

Account details

• Your email address: from Sign in with Apple (this can be an Apple “Hide My Email” address) or the address you use to get a sign-in code.
• Your name: the name Apple shares the first time you sign in, and the name you type when the app asks what to call you.
• Your account ID, and the user identifier Sign in with Apple gives us.

Device and connection details

• An install ID: a random code the app creates and keeps in your iPhone’s Keychain. It stays there even if you delete and reinstall the app.
• Your iPhone model, iOS version, app version, and your language and region settings.
• Your IP address, and the country it points to, when the app talks to our server.

What you import

• Links you import, plus what our server reads from the public post or page: the caption or page text and the cover image.
• For videos where the recipe is only spoken, the audio of the public post. We never use your iPhone’s microphone.
• Text you paste.
• Photos you choose. The app uses Apple’s photo picker, so it only receives the photos you pick and can’t see the rest of your library.

What you save

• Your recipes and recipe photos, cookbooks, meal plans (including what you’ve marked as cooked), grocery lists and nutrition estimates.
• Anything you send with Report mistake.

Your answers to the setup questions

When you first open Crispify, it asks some optional questions: for example your household size, the days you cook, cuisines and proteins you like, diets, food allergies, health goals, your age range, weekly grocery budget and stores, cooking time, kitchen equipment, how you heard about us, a referral code, and which sample recipes you liked or skipped. If you sign in, these answers are saved to your account. Allergies, diets and health goals are health-related information, and we treat them with extra care (see section 3).

Purchases

When you buy or restore Crispify+, the app sends us the signed transaction details from Apple: the product, transaction IDs, purchase and expiry dates, and whether it’s a free trial. We use them to unlock Crispify+ and to stop one free trial from being used again and again; for that we also record the install ID, IP address and country with the trial. We never see your card or payment details. Apple handles payment.

Usage records

• An import history: the type of import, the platform, the link, whether it worked, which AI model was used, the size of the request, and the time.
• Your free-import count for the month, for your account and for your install ID.
• A log of requests from your IP address (signing up, importing, checking a subscription, starting a trial), used to spot abuse.

Emails

We send sign-in codes and a welcome email. Our email provider keeps a record of each email it sends: the address, the subject and whether it was delivered.

If you don’t sign in

You can use Crispify without an account. Your recipes, cookbooks, meal plan and grocery list then stay on your iPhone, and your setup answers aren’t uploaded. Importing needs an account.

3. How we use it, and our legal bases

If you’re in the European Economic Area or the UK, the law asks us to name a legal basis for each use. Here they are.

• To run Crispify for you: your account, backing up and syncing your library, imports, nutrition estimates, meal plans, grocery lists and Crispify+. Basis: performing our contract with you.
• To tailor suggestions, such as Magic Meal Plan’s picks, from your setup answers. Basis: our contract with you; for allergies, diets and health goals, your explicit consent, which you give by choosing to enter them and can withdraw at any time (see section 10).
• To keep the free plan fair and stop fraud, using the install ID, IP address, country, import counts and trial records. Basis: our legitimate interest in preventing abuse.
• To keep the service secure and working, with logs and rate limits. Basis: our legitimate interests.
• To send service emails: sign-in codes and the welcome email. We don’t send marketing newsletters. Basis: our contract with you.
• To answer you when you email us or report a mistake. Basis: our legitimate interests.
• To comply with the law where we have to.

We don’t make decisions about you that have legal or similarly significant effects based only on automated processing.

4. AI processing of your imports

Turning a post, a page, a photo or some text into a recipe is done by AI, run by other companies on our behalf:

• When you import something, our server sends what’s needed to build the recipe to Anthropic (its Claude models): the link, the post’s caption or page text, the cover image, your photo or pasted text, or a transcript of the video. Calculate nutrition sends the recipe’s title, servings and ingredients.
• When a video’s recipe is only spoken, its audio is turned into text by Cloudflare Workers AI. We don’t keep the audio, only the recipe that comes out.
• To read a public post or page, our server fetches it itself, so the platform sees our server, not your IP address.
• We don’t send your name or email address with any of this.
• Anthropic’s commercial terms say it doesn’t use this data to train its models, and that it deletes it within 30 days (longer only if it’s flagged for a policy violation).

AI can make mistakes. Please check amounts, allergens and cooking temperatures before you cook; see our Terms of Use.

5. Who helps us

We don’t sell or rent your personal information, and we don’t share it with anyone for advertising. We use these service providers to run Crispify. They process data only to provide their service to us, under data protection terms that require them to protect it at least as well as this policy does.

• Supabase, Inc.Accounts, database and file storage (including recipe photos). Data is stored in the USA.
• Cloudflare, Inc.Runs our server and this website, DNS, security and rate limiting, short-lived logs, and speech-to-text (Workers AI). Global network; USA.
• Anthropic, PBCAI recipe extraction and nutrition estimates (Claude). USA.
• Resend, Inc.Sends sign-in codes and the welcome email. USA.
• AppleSign in with Apple, App Store payments and subscriptions. Apple acts under its own privacy policy as an independent controller.

If we offer Sign in with Google and you choose it, Google shares your name and email address with us under its own privacy policy.

We may also disclose information if the law requires it, to protect people’s safety or our rights, or as part of a sale or reorganization of Crispify. If that happens, this policy keeps applying to your data, and we’ll tell you before anything changes.

6. What your iPhone loads directly

Some things load straight from other servers to your iPhone, so those servers see your IP address:

• recipe photos kept in our storage (Supabase);
• photos from the original recipe website or social network, when we couldn’t keep our own copy;
• the photos of some sample recipes, which come from TheMealDB.

Signing in with Apple and buying through the App Store talk to Apple. Opening a link to an original post takes you to that website or app, where its own privacy policy applies.

7. Photo links

Recipe photos (the ones you import, and the cover images we copy from imported posts) are stored at long, hard-to-guess web addresses. We don’t publish or list them, but anyone who has the exact address can open the image.

8. What we don’t do

• No advertising and no advertising IDs.
• No tracking across other companies’ apps or websites, which is why Crispify never asks for permission to track.
• No analytics or crash-reporting tools in the app.
• No access to your contacts, location, microphone or camera, and no access to your photo library beyond the photos you pick.
• No selling or “sharing” of personal information, as California law defines those words.

9. How long we keep it

• Your account and everything you save: until you delete your account.
• The log of requests from IP addresses: 180 days, then it’s deleted automatically.
• After you delete your account, we keep a few things for 13 months so that deleting and re-creating accounts can’t be used to get more free imports: a one-way fingerprint (hash) of your email address, that month’s import count, the first IP address your account used, and the dates. The free-import counter for your install ID is also kept for 13 months. Then they’re deleted.
• At Anthropic: up to 30 days, as described in section 4.
• Provider logs (Cloudflare and Supabase server logs, Resend’s record of sent emails) and backups: for the limited periods those providers set.
• On your iPhone: until you delete it or the app. The install ID stays in your iPhone’s Keychain even after you delete the app, so the free-import limit stays fair.

10. Deleting your data, and other choices

• Delete your account in the app: on the Recipes tab, tap the person icon at the top right to open your Profile, then tap Delete account and confirm. This deletes your account and the data in it straight away: recipes, cookbooks, meal plans, grocery lists, setup answers, device records, the IP log and your uploaded photos, except the few items in section 9. If a photo is ever left behind after a technical error, email us and we’ll remove it.
• A subscription isn’t canceled when you delete your account. Apple bills it, so cancel it in your iPhone’s Settings first (see Support).
• Without an account, deleting the app removes your recipes from your iPhone.
• Email us at hello@crispify.app to get a copy of your data, correct it, or delete part of it, for example just your allergy and health answers.

11. Your rights

Everyone can ask us what we hold about them, and ask us to correct or delete it.

In the EEA, the UK and Switzerland you also have the right to restrict our use of your data, to object to uses based on our legitimate interests, to get your data in a portable format, to withdraw consent at any time (this doesn’t affect what we did before), and to complain to your local data protection authority.

In California (and other US states with similar laws) you have the right to know what personal information we collect, use and disclose (this policy lists the categories, sources, purposes and recipients); to delete and correct it; to opt out of its sale or sharing (we don’t sell or share it); to limit the use of sensitive information (we only use it to provide Crispify); and not to be treated differently for using these rights. An authorized agent can make a request for you.

To use any of these rights, email hello@crispify.app, ideally from the address on your Crispify account so we can confirm it’s you. We reply within one month (45 days in California), and tell you if we need longer.

12. International transfers

Our providers store and process data in the USA, and Cloudflare’s network runs worldwide. If you’re in the EEA, the UK or Switzerland, your data is transferred to the USA under the European Commission’s Standard Contractual Clauses or, where a provider is certified, the EU-U.S. Data Privacy Framework and its UK and Swiss extensions.

13. Security

Data travels encrypted (HTTPS). Our database lets each signed-in person reach only their own rows, secret keys stay on our server, and you sign in with Apple or a one-time email code, so you never create a Crispify password. No system is perfectly secure, though. If you find a problem, please tell us at hello@crispify.app.

14. Children

Crispify isn’t meant for children under 13, or under the age of digital consent where they live (up to 16 in parts of Europe), and we don’t knowingly collect their data. If you think a child has given us personal data, email us and we’ll delete it.

15. This website

crispify.app is a static website hosted by Cloudflare. It sets no cookies and uses no analytics, third-party scripts or third-party fonts. Cloudflare processes your IP address and the details of each request to deliver and protect the site.

16. Changes and contact

If we change this policy, we’ll update this page and the date at the top. If a change is significant, we’ll also tell you in the app or by email before it takes effect.

Questions, requests or complaints: hello@crispify.app.