Privacy Policy
Last Updated: December 16, 2025
Illumind Software ("Company," "we," "us," or "our") operates the What to Cook mobile application ("App"). This Privacy Policy explains how we handle your information when you use our App.
Key Point: Your data stays on YOUR device.
We do not have user accounts, cloud storage, or servers that store your personal information. All your recipes, meal plans, preferences, and health data are stored locally on your device.
1. Our Privacy-First Approach
What to Cook is designed with privacy at its core:
Local Storage Only
All your personal data (recipes, meal plans, preferences, health information) is stored directly on your device using your phone's local storage.
No User Accounts
We don't require you to create an account. There's no email, password, or cloud sync.
No Data Collection Servers
We don't operate servers that collect or store your personal information.
Your Data, Your Control
When you delete the app, your data is deleted. We have no copy.
2. Information Stored on Your Device
The following information is stored locally on your device only and is never transmitted to our servers:
Personal Information
- Name and username (optional, for personalization)
- Profile photo (optional)
Health and Dietary Information
- Age/birth year
- Sex/gender
- Height and weight
- Activity level and fitness goals
- Daily calorie goals and macro targets
- Dietary preferences (vegetarian, vegan, keto, etc.)
- Food allergies and intolerances
App Data
- Recipes you create, save, or import
- Meal plans and schedules
- Grocery/shopping lists
- AI chat conversation history
- Favorite recipes and recently viewed items
- App settings and preferences
Important:
This data exists only on your device. If you:
- Uninstall the app → Data is permanently deleted
- Switch to a new device → Data does not transfer automatically
- Clear app data → Data is permanently deleted
We cannot recover this data because we never had access to it.
3. Information Shared with Third-Party Services
While your personal data stays on your device, certain features require sending data to third-party services to function:
3.1 AI Features (OpenAI)
When You Use: AI Chef assistant, AI recipe scanner, "What Can I Make?" feature
What Is Sent:
- • Your messages/questions to the AI
- • Recipe images (for scanning)
- • Ingredients you want to cook with
What Is NOT Sent:
- • Your health data
- • Your name or profile information
- • Your meal plan history
- • Your stored recipes
How It's Used: To generate AI responses and recipe suggestions
Data Retention: OpenAI may temporarily process requests per their privacy policy. We do not store your AI conversations on any server.
🔗 OpenAI Privacy Policy3.2 Recipe Search
When You Use: Searching for recipes in the app's database
What Is Sent:
- • Search keywords/queries
- • Dietary filters (e.g., "vegetarian", "gluten-free")
What Is NOT Sent:
- • Personal health information
- • Your identity or profile
- • Your saved recipes
How It's Used: To return matching recipes from the database of 365,000+ recipes
🔗 Spoonacular Privacy Policy3.3 Recipe Import (Social Media)
When You Use: Importing recipes from Instagram, TikTok, or websites
What Is Sent:
- • The URL you provide
- • We may use AI to extract recipe content from the page
What Is NOT Sent:
- • Your social media credentials
- • Your social media profile
- • Access to your social media accounts
Important: We never ask for or access your social media login. You simply paste a public URL.
3.4 Subscription Management (RevenueCat)
When You Use: Purchasing or managing a subscription
What Is Sent:
- • Anonymous device identifier
- • Purchase transaction (handled by Apple/Google)
- • Subscription status
What Is NOT Sent:
- • Payment card details (handled entirely by Apple/Google)
- • Your name or email
- • Personal health data
3.5 App Store Payments (Apple/Google)
Subscription payments are processed entirely by Apple App Store or Google Play Store. We never receive or have access to:
- Credit card numbers
- Bank account information
- Billing addresses
4. Information We Do NOT Collect
To be clear, we do NOT collect:
5. Analytics and Crash Reporting
5.1 Basic Analytics
We may collect anonymized, aggregated analytics to understand how features are used:
- Which features are popular
- App performance metrics
- Crash reports (without personal data)
This data is:
- Fully anonymized
- Not linked to any individual
- Used only to improve the app
5.2 Crash Reports
If the app crashes, an anonymous crash report may be sent containing:
- Device type and OS version
- App version
- Technical error information
Crash reports do NOT contain:
- Your recipes or personal data
- Your health information
- Any identifiable information
6. Data Security
On-Device Security
Your data is protected by:
- Your device's built-in security (passcode, Face ID, Touch ID)
- iOS/Android app sandboxing
- Local encrypted storage
Third-Party Transmissions
When data is sent to third-party services:
- All connections use HTTPS/TLS encryption
- Data is transmitted securely
- We use reputable, privacy-conscious providers
7. Children's Privacy
The App is not intended for children under 13. We do not knowingly collect any information from children under 13. Since we don't collect personal information to servers, there is no server-side data to protect.
If you are a parent and believe your child has used the app, note that all data is stored locally on their device and can be removed by deleting the app.
8. Your Rights and Choices
8.1 Access Your Data
All your data is already in your control—it's on your device. View it anytime in the app.
8.2 Delete Your Data
To delete all your data:
- Clear App Data: Go to your phone's Settings → Apps → What to Cook → Clear Data
- Uninstall the App: This permanently removes all local data
8.3 Control Third-Party Features
You can avoid sending data to third parties by:
- Not using AI features (AI Chef, scanner)
- Not using recipe search (use manual entry instead)
- Not importing from social media
8.4 Export Your Data
Currently, you can share individual grocery lists via WhatsApp, email, or print. Recipe export features may be added in future updates.
9. Data Retention
Local Data
Your data persists on your device until you:
- Delete the app
- Clear app data
- Manually delete items within the app
Third-Party Services
- AI Services: Processed in real-time; we don't store conversation history on servers
- Recipe Search: Search queries are not stored by us
- Subscription Status: Retained by RevenueCat per their retention policy
10. International Users
Since your data is stored locally on your device:
- Your data stays in your physical location
- No international data transfers occur for your personal data
- Only when using AI/search features is data transmitted (to US-based services)
GDPR (European Users)
- Data Controller: Your device is the controller of your data
- Right to Erasure: Delete the app to erase all data
- Data Portability: Your data is accessible on your device
CCPA (California Residents)
- We do not sell personal information
- We do not share personal information for behavioral advertising
- All your data remains on your device
11. Changes to This Privacy Policy
We may update this Privacy Policy periodically. Changes will be noted with an updated "Last Updated" date. Continued use of the App after changes constitutes acceptance.
Material changes will be communicated through:
- App update notes
- In-app notification
12. Contact Us
For questions about this Privacy Policy:
Email: privacy@illumind.software
General Support: contact@illumind.software