Privacy Policy

Your recipe library

Your saved recipes, collections, cooking history and quiz answers are stored on your device. If you enable iCloud sync, your library is also stored in your iCloud storage by Apple. Aptyte does not receive your whole library. You choose what to send when using AI or sharing a recipe.

When data leaves your device

• AI and imports. We process the text, photos, recipe details and links you submit to create, adapt or import a recipe. AI requests are sent to Google Gemini. Uploaded images and server-assisted import drafts are also stored on our servers. Direct imports contact the source website, which receives your IP address and request details.
• Running the service. Our servers receive an installation identifier, language, time zone, IP address and request details. We keep session records and AI usage, timing and error information to deliver features, enforce usage limits and keep the service working securely.
• Purchases and support. Apple handles payment. We receive transaction identifiers and subscription status to provide paid features, not your payment-card details. If you contact us, we use your email and message to respond.

We process this information to provide the services you request, for our legitimate interests in operating and protecting Aptyte, and where necessary to meet legal obligations. You can use your saved library without sending content to AI.

Service providers

Our servers, database and file storage are hosted by DigitalOcean in Frankfurt, Germany. We use Google Gemini for AI processing and Sentry for backend error monitoring. The website uses Cloudflare for delivery and Google Fonts for typefaces; these providers receive connection details such as your IP address. Apple handles iCloud and purchases.

Providers may process data outside Switzerland, the UK and the EEA, including in the United States. We use applicable adequacy decisions or contractual safeguards, such as standard contractual clauses, for these transfers. The providers' applicable data-processing terms describe their handling of data, international transfers and deletion: DigitalOcean, Google Gemini, Sentry and Cloudflare. Apple's privacy policy and Google's privacy policy describe their own services, including iCloud and Google Fonts respectively.

These provider terms supplement this policy and do not limit your rights or our responsibility for data processed on our behalf. Contact us for information about transfer safeguards or to exercise your rights.

Keeping and deleting data

You control how long you keep your local library and iCloud copies. Deleting a recipe on your device does not delete content already sent for AI processing or copies you shared with others.

On our live backend, temporary AI uploads and inactive import drafts expire after 7 days. Diagnostic content and session IP addresses and device details expire after 30 days; AI usage records expire after 90 days (usage-period records are counted from the end of that period). Cleanup runs hourly. Cached asynchronous results expire after 24 hours.

Installation and subscription records remain while needed to authenticate your installation, restore purchases and resolve payment disputes or meet legal obligations. We keep support correspondence until your enquiry and any related dispute are resolved. You can request deletion by emailing us.

The periods above apply to our live application records. Copies in provider-operated backups and security or diagnostic logs may remain longer, under the applicable provider terms linked above and the service's retention settings, for recovery, security or legal obligations. Contact us about deletion requests, including data held by our providers.

Your choices and rights

Depending on applicable law, you may ask to access, correct, delete or receive a portable copy of your personal data, restrict its use or object to processing. Where processing relies on consent, you may withdraw it without affecting earlier processing. Email us to exercise these rights or appeal a decision. We may need enough information to verify your request and identify the relevant installation; please do not send passwords or access tokens. We will not penalise you for exercising your rights.

You may also complain to your local data protection authority, including the Swiss FDPIC, the UK ICO, or an EU supervisory authority.