Privacy Policy

Effective date: February 8, 2026

Gormat ("we", "our", or "the app") is a recipe scanning, meal planning, and shopping list app. This policy describes what data we collect, how we use it, and your rights.

1. Data We Collect

Account information. When you sign in with Apple or Google, we receive your name and email address. Apple's "Hide My Email" relay addresses are fully supported.

Recipes and photos. Recipes you create or scan — including titles, ingredients, steps, and photos — are stored on your device and synced to our servers so you can access them across devices.

Meal plans and shopping lists. Meal plan configurations and shopping list items are stored on your device and synced to our servers.

Device identifiers. We generate a random device ID (stored in the Secure Enclave / Keychain) for device registration. This is not an advertising identifier.

User preferences. Settings such as dietary preferences, preferred language, and AI feature toggles are stored locally and synced.

2. Data We Do NOT Collect

• We do not track you across other apps or websites.
• We do not collect financial or payment information.
• We do not collect health or fitness data.
• We do not serve display advertisements or share data with ad networks.
• We do not sell your personal data to third parties.

3. How We Use Your Data

• Sync: To keep your recipes, meal plans, and shopping lists available across your devices.
• AI features: When you scan a recipe or use AI meal plan generation, recipe text and photos may be sent to third-party AI providers or processed by our own models. We do not send your account information to AI providers.
• Recipe content: Recipe data you upload, scan, or import (including ingredients, steps, and metadata) may be used to improve the service, train AI models, generate new recipes, and build community features. See our Terms of Service (Section 3) for the full license grant.
• Authentication: To verify your identity and secure your account.

4. Third-Party Services

• Apple Sign-In / Google Sign-In: For authentication only. Governed by Apple's and Google's respective privacy policies.
• AI processing providers: We may use third-party AI services (such as Google Gemini or other providers) or our own AI models for recipe scanning and meal plan generation. Recipe content may be sent to these providers for processing; no personal account data is shared. The specific providers we use may change over time.
• Instacart: If you choose to order groceries, you are redirected to Instacart's platform via an affiliate link managed by Impact.com. Referral data (such as click identifiers and timestamps) is shared with Impact.com to track the referral. We may earn a commission on qualifying purchases. We do not receive your Instacart purchase details, payment data, or order contents.

5. Data Storage and Security

Your data is stored on your device and on our servers hosted on Hetzner Cloud (US). Communication between the app and our servers is encrypted via TLS. Authentication tokens are stored in your device's Secure Enclave / Keychain.

6. Data Retention

We retain your data for as long as your account is active. Account information and your personal recipe library are deleted when you delete your account. However, aggregated, anonymized, or derivative data (including recipes derived from your content, AI model improvements, and community recipe data) may be retained indefinitely in accordance with the license granted in our Terms of Service.

7. Your Rights

You can:

• Access your data at any time through the app.
• Export your recipes from the app.
• Delete your account and all associated data by contacting us.

8. Children's Privacy

Gormat is not directed at children under 13. We do not knowingly collect data from children under 13.

9. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated effective date.

10. Contact

If you have questions about this privacy policy, contact us at privacy@gormat.app.