Privacy Policy

Kitchen Jam · last updated 25 September 2026

Kitchen Jam has no server. There is no account to create, nothing to sign in to, and no database of ours holding your recipes, your cooking notes or your API key. Everything the app makes stays on your device — and, on iPhone with iCloud backup on, in your own private iCloud storage — unless you choose to send it somewhere else.

What stays on your device

All of it, by default:

• Recipes you generate or save, and the ratings and notes you add to them
• Your profile — diet, allergies, equipment, preferred units, servings
• Your pantry and shopping list
• Your API key and provider settings
• App preferences such as theme and whether voice is switched on
• A local record of recent sessions, used for improving the app

This is kept in this app's own storage. On iPhone that is inside the app's sandbox, which other apps cannot read, and deleting the app deletes that copy — except your API key, which is kept in the Keychain, and anything in your iCloud backup, described next. In a web browser it is browser storage, which anything running on that site could read.

Your API key is the exception, and is held more carefully than the rest. On iPhone it is stored in the iOS Keychain — the encrypted store the system keeps passwords in — rather than alongside your recipes, and it is never synchronised to iCloud. If the Keychain cannot be reached the app keeps the key in its ordinary storage instead, so that a device problem cannot silently lose it; the settings screen tells you which of the two happened for the key you saved. In a web browser there is no Keychain, so the key is held in browser storage like everything else; anything running on that site could read it. Either way the key stays on the device, and the app never sends it anywhere except to the provider you chose.

Keychain items outlive the app. Deleting the app removes the copy of your recipes, profile, pantry and settings on the device, but iOS keeps Keychain items, so your API key can still be there if you reinstall — the app deliberately looks for it and offers it back, rather than making you find the key again after iOS reclaims storage. To remove the key itself, use Forget key in Settings before you delete the app. That button tells you if it fails, and if you want a key gone for certain, revoke it in your provider's console: that is the only step we cannot do for you and the only one that stops a key that has already been copied elsewhere.

Your iCloud backup (iPhone)

If you are signed in to iCloud on your iPhone and Back up to iCloud is on in Settings, a copy of your recipes (with their ratings and notes), your profile, your pantry and your shopping list is also stored in your own private iCloud storage. It moves directly between your device and Apple, under your iCloud account, so that it comes back if you reinstall the app and appears on your other devices signed in to the same account. It does not pass through us, and we cannot see it: it sits in your iCloud, not in any storage of ours. Apple's own privacy policy covers how iCloud stores it.

Never included: your API key, your provider settings, and the local record of sessions. Those stay on the device.

Backup is on by default, because the point is to survive a deletion nobody plans for. You can turn it off, or delete the copy in iCloud, in Settings. Deleting the iCloud copy keeps the recipes on your device and turns backup off. If you are not signed in to iCloud, nothing is backed up and the app says so in Settings.

What leaves your device, and only when you act

To the AI provider you chose. When you ask for a recipe, the app sends your request and the relevant parts of your profile — such as allergies and dietary preferences, so the recipe respects them — directly from your device to the provider whose key you entered. That is OpenAI, Anthropic, Google, OpenRouter, Groq, or any endpoint you configure yourself. It does not pass through us, because there is nowhere for it to pass through. That provider's own privacy policy governs what they do with it, and it is worth reading; we have no control over and no visibility into their handling.

Your notes, only if you ask. Notes you write on a recipe are private. They are never included when you share a recipe. The single exception is "Make it again, with my notes" — that deliberately sends them to your provider so the recipe can be revised, and the app names the provider and shows you the notes before anything is sent.

Recipes you share. Sharing a recipe puts it wherever you send it. Shared recipes never include your notes or ratings.

Data you export. Settings offers an export of your saved data. It goes where you send it. The export does not contain your API key.

Voice

If you turn voice on, speech is converted to text on your iPhone. The app requires on-device transcription and refuses to run if the device cannot do it, rather than falling back to sending audio elsewhere. No recording is stored or transmitted.

When iOS asks for speech recognition permission it shows its own standard wording about speech being sent to Apple. That describes the system capability in general. This app does not use that path.

What we do not do

• No analytics, tracking, telemetry or crash reporting of any kind
• No advertising, and no advertising identifiers
• No accounts, no email collection, no profiles
• No selling or sharing of personal information — we hold none to sell
• No cookies beyond what your own browser stores for the app itself

Children

Kitchen Jam is not directed at children and collects no personal information from anyone, including children.

Recipes, nutrition and allergies

Recipes are generated by an AI model and can be wrong. Nutrition figures are estimates, not measurements. The app checks recipes against allergens you tell it about, but that check is an aid and not a guarantee — always read labels and verify ingredients yourself. Nothing in the app is medical or dietary advice.

Your control

Delete the app, or clear the site data in your browser, and everything on that device is gone — with two exceptions, which we would rather state plainly than let you discover.

Your iCloud backup survives it, by design. If backup was on, your recipes, profile, pantry and shopping list are still in your iCloud and come back when you reinstall. To remove them, tap Delete iCloud copy in Settings before you delete the app.

Your API key can survive it. On iPhone the key lives in the iOS Keychain, and iOS keeps Keychain items when an app is deleted. On the web, clearing the site data does remove the key along with everything else. So on iPhone: tap Forget key in Settings first, and the key is deleted from the Keychain. If that ever fails the app says so instead of pretending otherwise.

Beyond your own device and your own iCloud there is no copy and no request to make of us, because we never had it. Your key does exist at the provider who issued it, and only they can revoke it — worth doing if a key has ever been shared or pasted somewhere you did not intend.

Changes

If this policy changes, the date at the top changes with it.

Contact

Questions about this policy: hello@mykitchenjam.app