Privacy Policy

Effective date: July 18, 2026

Recipe Healthifier ("the app," "we," "us") converts a recipe you provide — as text, a link, or a photo — into a version that follows the rule sets you choose (for example, no seed oils, keto, or low-carb), and explains each swap it makes. This policy describes what information the app collects, why, who it's shared with, how long it's kept, and how you can have it removed.

Information we collect

Recipe content you submit

When you convert a recipe, the text you paste, the URL you provide, or the photo you take or select is sent to our Cloudflare Worker server, which forwards it to Anthropic's API to perform the conversion (and, for a link, the Worker first fetches the public page server-side to read the recipe off it). This content is processed to produce your result and is not written to a database — the Worker does not keep a copy of your recipe text, URLs, or photos after the request completes.

Anonymous device identifier

On first launch, the app creates a random identifier (a UUID) on your device and stores it locally. This identifier is not linked to your name, email address, or any other personal information — it exists only to let our server apply rate limits, recognize your one-time free preview, and check your subscription status.

Your rule preferences and saved recipe library

The rules you select, your custom preferences, and any recipes you choose to save to your in-app library are stored locally on your device only. They are never uploaded to our server.

Technical data used for rate limiting

To prevent abuse of the service, our server temporarily records a count of requests associated with your anonymous device ID and, for certain requests, your IP address (received automatically as part of any request to our server, and read via Cloudflare's CF-Connecting-IP header). These counts are stored in Cloudflare KV and expire automatically after about 26 hours. A separate flag recording whether your anonymous ID has already used its one-time free preview conversion is kept indefinitely (tied only to that anonymous ID, containing no recipe content or personal information) so the free preview can't be reused by resetting the app.

Subscription status

If you subscribe, purchase processing is handled by the Apple App Store or Google Play, and subscription/entitlement status is managed by RevenueCat, a subscription-management provider, keyed to your anonymous device ID. We do not receive or store your payment card details — those are handled entirely by the app store and RevenueCat. Our server caches your entitlement status (subscribed or not) for up to one hour to avoid checking on every request.

Device permissions

The app requests access to your camera and photo library solely so you can photograph or select a photo of a recipe to convert. Photos are used only for that purpose, sent to our server as described above, and are not stored persistently on our servers or used for any other purpose.

Information we do not collect

• No user accounts, no login, no passwords.
• No name, email address, or phone number (unless you choose to email us directly, such as for the launch notification list or a support request).
• No precise location, contacts, or device address book.
• No third-party analytics or advertising SDKs of any kind — the app contains none.
• No selling of personal information, ever.

Who we share information with

Under Anthropic's API terms, content submitted through the API is not used to train Anthropic's models. We do not share your information with any other third party, and we do not sell it.

Data retention

• Recipe text, URLs, and photos you submit: processed transiently to produce your result and not stored in a database afterward.
• Rate-limiting counters (tied to your anonymous ID or IP address): expire automatically after about 26 hours.
• The one-time free-preview "used" flag (tied to your anonymous ID only): kept indefinitely to prevent reuse, but contains no personal information or recipe content.
• Subscription entitlement cache: up to 1 hour, then re-verified.
• Your rule preferences and saved recipe library: kept locally on your device for as long as the app is installed.

Your choices and deletion

Uninstalling the app permanently deletes everything stored on your device: your anonymous ID, your saved recipe library, and your rule preferences. Because there is no account tying that data to your real identity, there is nothing further for us to delete on our end beyond the short-lived, automatically-expiring counters described above.

If you'd like us to manually remove any server-side data associated with your anonymous device ID (for example, the free-preview-used flag), email privacy@recipehealthifier.com and we will locate and delete it.

Children's privacy

Recipe Healthifier is not directed at children and does not knowingly collect personal information from anyone, including children — the app has no accounts or personal-information fields for anyone to fill in, regardless of age. Camera and photo library access is gated by your device's own operating-system permission prompts.

Where data is processed

Recipe content you submit is processed using cloud infrastructure located in the United States.

Security

Data in transit between the app and our server is encrypted (HTTPS). Our server never embeds any API credentials in the app itself — they are stored only on the server side.

Changes to this policy

If this policy changes, we'll update the effective date above. Since the app has no accounts or email collection, we recommend checking this page periodically for updates.

Contact us

Questions about this policy or your data? Email privacy@recipehealthifier.com.