fitRecipe Privacy Policy
Last updated: 26 October 2026
fitRecipe ("the app") is provided by e9 ("we"), contact: support@fitrecipe.app.
What we store
| Data | Why |
|---|---|
| Email address | To create your account and sign you in, and to send you messages about your account: today only the link to reset a forgotten password (sent by an e-mail delivery service on our behalf; the link works once and expires in 30 minutes). We send no newsletters or ads. |
| Password | Stored only as a salted Argon2 hash; we cannot read it. |
| Recipes you save: title, description, ingredients, steps, times, servings, category, tags, source link, favorite flag | To show your recipes and calculate calories. |
| The link you add a recipe from | Kept as the recipe's source link, so you can open the original post. |
| The cover photo of a post you import | Saved with the recipe (see below). |
| Photos you add to a recipe | To show them with the recipe. Photos are re-encoded on our server and location and camera metadata (EXIF) are removed. |
| Collections you create | To organise your recipes. |
| Sign-in sessions (refresh tokens) | To keep you signed in. They are removed when you sign out. |
| The name you give in the app | Kept only on your device, to greet you. It is never sent to our server and is not part of your account. |
| E-mail address on the waitlist (website fitrecipe.app, only once the form is switched on) | To tell you when the app is ready. We keep the address and the time you agreed until we have sent the launch message or you unsubscribe (every message has a link). The list is kept by a mailing-list service on our behalf. The website itself sets no cookies and has no analytics. |
| Language and theme choice | Kept on your device. The language is also sent with each request, so recipes you import are written in it. |
Calories are calculated by our own server from the ingredients, using a built-in food table and, for foods it does not list, the public USDA food table (shown as approximate).
Adding a recipe from a link
When you add a link (or share one to the app), this happens:
- Our server opens the link and reads the public page: the caption of an Instagram or TikTok post, or the text of a recipe web page. We do not sign in to those services and cannot see private posts. We also save the post's cover image with your recipe.
- The text we read is sent to Anthropic, an AI company (Anthropic, PBC, United States), whose service turns it into a structured recipe (title, ingredients, steps...). If you paste the text of a recipe yourself, that text is sent instead. What is sent: the text of the post or page and the language you use in the app. What is not sent: your email address, password, name, photos, other recipes or any other account data. The link itself is not sent.
- How Anthropic handles it. According to Anthropic's published terms for business customers (checked 2026-10-22): the text is not used to train its models by default; inputs and outputs are deleted from its systems within 30 days, and may be kept longer only if needed to enforce its usage policy or by law. We have no special "zero data retention" agreement. See Anthropic's data retention and model training pages. Our agreement with Anthropic includes its Data Processing Addendum, which uses the EU standard contractual clauses.
- We ask for your permission in the app, once, right after you first sign in on a device, before any text is sent this way. If you decline you can still enter recipes by hand and nothing is sent; if you later start adding a recipe from a link we ask once more at that moment. You can take the permission back or give it at any time in Profile.
Only add links to content you are allowed to save, and do not paste private or confidential text.
What we do not do
- No advertising, no analytics and no tracking of your behaviour in the app.
- We do not sell your data and we do not share it with anyone for their own purposes. The only outside party that receives content from you is Anthropic, as described above, and the providers that run our service (next section).
- We do not read your contacts, location or other photos. The app only accesses the photo you pick or take for a recipe, and only after you grant permission.
- Nothing you enter is used by us to train an AI model.
Who processes your data
Our servers and database run at Render (Render Services, Inc., United States) in Frankfurt, Germany. Photos are stored on a disk in the same place. Link text is processed by Anthropic, PBC (United States) as described above. Password-reset e-mails are sent by an e-mail delivery service; it receives your e-mail address and the message, nothing else. These providers process data on our behalf and only to run the service. Where data leaves your country (for example to the United States), we rely on the safeguards in the providers' data processing agreements, such as the EU standard contractual clauses. We update this list when the providers change.
Security
Connections use HTTPS. Access tokens are short-lived and are kept in the device's secure storage. Sign-in attempts are rate limited. No system is perfectly secure; report problems to support@fitrecipe.app.
Retention and deletion
We keep your data while your account exists. You can delete your account at any time in the app (Profile → Delete account). Deleting it immediately removes your account, recipes, collections and photos from our systems; our hosting provider keeps database backups only for a short, fixed time and then overwrites them. Text sent to Anthropic is deleted by Anthropic on its own schedule (within 30 days, see above); we cannot delete it earlier.
Your rights
Depending on where you live (for example under the GDPR or KVKK) you can ask us for a copy of your data, to correct it, or to delete it. Deleting your account covers deletion; for anything else write to support@fitrecipe.app. You can also complain to your local data-protection authority.
Children
fitRecipe is not directed at children under 16. We do not knowingly collect their data.
Changes
If we change this policy in a meaningful way we will update the date above and tell you in the app.