Privacy Policy

1. Who we are

Onmenu ("we", "us", "our") is a recipe management application. This Privacy Policy explains how we collect, use, and protect your personal information when you use the Onmenu iOS app and associated services.

By using Onmenu you agree to the collection and use of information described in this policy. If you have questions, contact us at hello@onmenu.recipes.

2. Information we collect

Account information

When you sign in, we receive from Apple or Google:

• A unique user identifier
• Your email address (you may hide this when using Sign in with Apple)
• Your display name (optional)

We do not receive or store your Apple or Google password.

Recipe content

We store the recipes you create or import, including titles, ingredients, steps, notes, tags, images, and source URLs. This data is associated with your account.

Images

If you photograph a recipe or add a cover image, those images are uploaded to our servers for processing and storage. We only access your camera and photo library when you explicitly initiate an import.

URLs you submit

When you import a recipe by URL, we fetch the content of that page on your behalf. We store the extracted recipe and the source URL.

Usage data

We may collect anonymised usage events (e.g. app opens, feature usage counts) to understand how the app is used and improve it. This data is not linked to your identity.

Device information

We collect basic device information (iOS version, device type) for debugging and crash reporting purposes only.

3. How we use your information

• To provide the service — authenticate you, store and sync your recipes, and allow sharing with people you invite.
• To process recipe imports — pass recipe text or images through AI parsing (see §4 on third parties) to extract structured data.
• To improve the app — analyse anonymised usage patterns to prioritise features and fix bugs.
• To contact you — send transactional emails such as invite notifications. We do not send marketing emails without your explicit consent.

We do not use your data for advertising or sell it to any third party.

4. Sharing your information

Other users you invite

When you share a recipe book, invited members can see the recipes in that book and your display name.

AI processing

To extract structured recipe data from text and images, we use AI inference services. Recipe text is sent to these services for processing. We use:

• Groq, Inc. — for cloud AI inference (when enabled). Groq processes data under their privacy policy and data processing terms.
• Ollama / self-hosted models — for on-premise inference. In this mode data does not leave our own servers.

We do not send any personally identifying account information to AI providers — only the recipe text you are importing.

Infrastructure providers

We host our backend on cloud infrastructure. Providers may process data as part of normal operations under appropriate data processing agreements.

Legal requirements

We may disclose information if required to do so by law or in response to valid legal process.

We do not sell, rent, or trade your personal data.

5. Data retention

We retain your data for as long as your account is active. If you delete your account, your personal information and recipes are deleted from our servers within 30 days, except where we are required to retain it for legal reasons.

Anonymised, aggregated usage data may be retained indefinitely as it cannot be linked back to you.

6. Security

We implement industry-standard security measures including:

• HTTPS/TLS encryption for all data in transit
• Encrypted database storage
• Short-lived authentication tokens with rotating refresh tokens
• No storage of passwords (authentication is delegated to Apple and Google)

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Your rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to correct inaccurate information.
• Deletion — request deletion of your account and associated data.
• Portability — request an export of your recipe data in a machine-readable format.
• Objection — object to certain types of processing.

To exercise any of these rights, contact us at hello@onmenu.recipes. We will respond within 30 days.

You can delete your account directly from the Profile tab in the app.

8. Children's privacy

Onmenu is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date above and, where appropriate, through an in-app notice. Continued use of the app after changes constitutes acceptance of the updated policy.

10. Contact us

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

Email: hello@onmenu.recipes
Website: onmenu.recipes