Privacy Policy

Data controller

Aptit is operated by Olle Åkerman as a private individual. Contact: hello@aptit.app.

What data we process

• Email address — to create and identify your account and sign you in. With Sign in with Apple you can choose to hide your address; we then receive a relay address and treat it like any other email address. The address is only kept by the sign-in service and is not shown to others in your household.
• Display name and optional profile picture — shown to you and to others in your household.
• Recipes you create or import (links, text, photos) — to read, save and display your recipes.
• Meal plans, shopping lists, recipe books and staples (what you always have at home) — so planning and the list work and can be shared within the household.
• Hidden recipes — which recipes from others in your household or from Aptit you've chosen to hide. Only you see them.
• Household membership — to share recipes, plans and lists between members.
• Subscription status — to grant access to Aptit Pro. The purchase is handled by Apple; we only store whether you have an active subscription and when it expires. RevenueCat notifies us when the status changes.
• Device token for notifications — to send the push notifications you've chosen to receive.
• Feedback you send via "Feedback" — your message, your email address and technical information (app version, device model and operating system) so we can understand and respond.
• Fridge Rescue — what you type, your choices (for example diet and time) and the titles of the suggestions are saved with your account so we can improve the suggestions. If you discard a suggestion, its title and any comment you add are saved too.
• Usage counter — how many imports and recipe suggestions you've made per day, to protect the service from abuse. The counter is deleted after about a week.
• Crash reports — when the app crashes or hits an error, a technical report is sent: where in the code it happened, app version, device model and operating system. The report isn't linked to your account and contains no recipes or email address.
• Event log — a few events are saved with your account: when it was created, your first import, your first planned meal, when the paywall is shown, and purchases. We use them to see whether Aptit makes it easy to get started. The log is deleted after 13 months.

We do not collect your payment information — purchases happen through Apple and we never see card or account details. We don't use third-party tracking or advertising SDKs, and we don't follow how you use the app beyond the event log above.

Recipe parsing and AI

When you import a recipe from a link, we fetch the page and read the recipe. If the page has no structured recipe data, the link is sent to Jina AI, which fetches the page for us and returns its text. The recipe text — from the link, text you paste or a photo you take — is then sent to Google (Gemini) to be read, structured and, if needed, rewritten in your language and units. What you type in Fridge Rescue is also sent to Gemini to come up with suggestions. Only the recipe content is shared — no account or household data is included. The content is processed for that purpose and is not used to train external models. Don't import content you don't want to share for processing.

Services we use (processors)

• Google Firebase (Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, App Check) — accounts and storage of recipes/plans/lists plus operations and protection against abuse. Recipes, plans, lists and images are stored within the EU (region europe-west1). Sign-in (Authentication) runs only in Google's data centers in the US.
• Google Gemini — reads and translates recipes from links, text and photos, and comes up with Fridge Rescue suggestions. Content may be processed temporarily in Google's data centers outside the EU.
• Google's icon service — fetches the small icon for a recipe's source when you open a recipe with a link. Google then receives the source site's address (for example, allrecipes.com) and your IP address.
• Jina AI — fetches the text of recipe pages that have no structured recipe data. Only receives the link.
• Apple — Sign in with Apple, handling of purchases/subscriptions, and App Attest, which confirms that requests come from the genuine Aptit app. The confirmation contains nothing about you or what you've added.
• RevenueCat — manages subscription status for Aptit Pro.
• Expo Push — delivers push notifications to your device.
• Sentry — receives crash reports. Data is stored in the EU (Frankfurt).

We do not share your data with any other party and never sell it.

Where your data is processed

Aptit is run from Sweden, so the GDPR (the EU's data protection law) applies to your data wherever you live. Recipes, plans, lists and images are stored within the EU. Some of our services process, or may process, data in the US:

• Google (sign-in, Gemini and the icon service) — your email address, the recipe content you add, and the source site's address.
• RevenueCat — your account ID and subscription status.
• Expo Push — your device token and the text of your notifications.
• Jina AI (part of Elastic) — the link to the recipe page.

Google, Expo and Elastic participate in the EU-U.S. Data Privacy Framework, which the European Commission has found to provide adequate protection. For RevenueCat, the European Commission's Standard Contractual Clauses apply. Email us if you'd like to know more about these safeguards.

Legal basis (GDPR)

We process your data to provide the app you've requested (performance of a contract, Article 6(1)(b)), and in some cases based on your consent — for example push notifications, which you can turn off at any time in the app or on your device. We also have a legitimate interest in running a secure, functioning service. Aptit is operated from Sweden (EU) and we apply GDPR-level protection to all users regardless of where they live.

Storage and security

Your recipes, plans, lists and images are stored in Google's data centers within the EU. Access is protected by Firebase Security Rules — only you and members of your own household can read your recipes, plans and lists.

A copy of the shopping list is saved on your phone so it shows even without a connection. It's removed when you sign out or delete your account. Cook Mode's timer, alarm and Lock Screen view run on your phone and send nothing to us. While the timer runs, the recipe name and step show on the Lock Screen; turn this off under Settings → Notifications.

We keep your data for as long as you have an account. When you delete your account, your personal data, recipes, plans, lists, images, feedback, Fridge Rescue data and event log are removed, and if you signed in with Apple we revoke the app's access with Apple. If others are in your household, you leave it and the person who's been there longest takes over. Their recipes and your shared plans stay. Deletion normally happens immediately and within 30 days at the latest, except where we are required by law to retain something (e.g. purchase history via Apple).

Your rights

• Know what data we hold about you.
• Have inaccurate data corrected.
• Have your account and data deleted.
• Receive your data in a structured format (data portability).
• Object to or restrict processing.
• Lodge a complaint with a data protection authority.

You can delete your entire account directly in the app under Settings → Delete account. To exercise any other right, email us at hello@aptit.app and we'll help you.

Children's privacy

Aptit is not directed to children under 13 and we do not knowingly collect data about children under 13. If you discover that a child has created an account without a guardian's consent, contact us and we'll delete the account.

Changes to this policy

We may update this policy. For material changes we'll update the date at the top and let you know in the app when needed.