Garlic - Privacy Policy

Last Updated: 26 January 2026
Effective Date: 26 January 2026

Our Commitment to Your Privacy

At Garlic, we believe your recipe collection is personal. We’ve built Garlic with a local-first, privacy-respecting architecture that keeps your data on your devices. This Privacy Policy explains what data we collect, how we use it, and the choices you have.

The short version: Your recipes and data are stored on your device and (if enabled) your personal iCloud account. We don’t have accounts, we don’t store your recipes on our servers, and we only process data temporarily to extract recipes when you import them.

1. Information We Collect

1.1 Information You Provide

1.2 Information Processed for Recipe Import

When you import a recipe, you provide us with:

• URLs: Links to TikTok, Instagram, YouTube, or website recipes
• Images: Photos of recipe cards, cookbook pages, or screenshots

Important: This data is sent to our AI processing service temporarily to extract recipe information. We do not store URLs or images on our servers after processing is complete.

1.3 Information Collected Automatically

1.4 Information We Do NOT Collect

• Personal identification (name, email, phone number)
• Account credentials (no accounts required)
• Location data
• Contacts or address book
• Health or fitness data
• Browsing history outside the App
• Advertising identifiers

2. How We Use Your Information

2.1 To Provide the Service

• Recipe Extraction: Processing URLs and images through AI to extract recipe content
• Data Synchronization: Syncing your recipes across your Apple devices via iCloud
• Subscription Management: Verifying Premium access and managing billing through RevenueCat

2.2 To Improve the Service

• Crash Reporting: Identifying and fixing bugs (via Apple’s standard crash reports)
• Usage Analytics: Understanding which features are used to improve the App (aggregated, anonymized)

2.3 Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), our legal bases for processing are:

• Contractual Necessity: Processing required to provide the Service you requested
• Legitimate Interests: Improving our Service and ensuring security
• Consent: Where we ask for your explicit consent (e.g., optional analytics)

3. How We Store Your Data

3.1 Local-First Architecture

Garlic uses a local-first architecture, meaning:

1. All your data is stored primarily on your device using Apple’s SwiftData framework
2. iCloud sync is optional — if enabled, data syncs to your personal iCloud account
3. We do not maintain servers storing your personal recipe data
4. The App works fully offline (except for importing new recipes)

3.2 iCloud Synchronization

If you have iCloud enabled:

• Your recipes, shopping lists, and preferences sync across your Apple devices
• Data is stored in your private iCloud account, controlled by Apple
• We cannot access your iCloud data
• Apple’s privacy practices apply (see Apple’s Privacy Policy)

3.3 AI Processing

When you import a recipe:

1. The URL or image is sent to our processing service
2. Our AI (powered by Google’s Gemini) extracts recipe content
3. Structured recipe data is returned to your device
4. We do not retain the URL, image, or extracted data on our servers

This processing is stateless — we process and return data without keeping copies.

4. Third-Party Services

We use the following third-party services:

4.1 Apple iCloud / CloudKit

• Purpose: Data synchronization across your devices
• Data Shared: Your recipes, shopping lists, preferences (stored in YOUR iCloud account)
• Privacy Policy: apple.com/privacy

4.2 Google AI (Gemini API)

• Purpose: AI-powered recipe extraction from URLs and images
• Data Shared: URLs and images you submit for import (processed, not stored)
• Privacy Policy: policies.google.com/privacy
• Note: Google’s AI may process content to improve their services per their terms

4.3 RevenueCat

• Purpose: Subscription management and billing
• Data Shared: Anonymous user identifier, subscription status, purchase history
• Privacy Policy: revenuecat.com/privacy

4.4 Apple App Store

• Purpose: App distribution, payments, basic analytics
• Data Shared: Standard App Store analytics (downloads, crashes, app usage statistics)
• Privacy Policy: apple.com/privacy

4.5 Social Media Platforms (TikTok, Instagram, YouTube)

• Purpose: Extracting public recipe content when you provide URLs
• Data Shared: Only the specific URLs you choose to import
• Note: We access only publicly available content; we do not access your social media accounts

5. Data Retention

5.1 On Your Devices

Your data remains on your device and iCloud account until you delete it. We do not control retention of data stored locally or in your iCloud account.

5.2 Processed Data

URLs and images sent for recipe import are processed in real-time and not retained on our servers after the recipe is extracted and returned to your device.

5.3 Subscription Data

RevenueCat retains subscription-related data in accordance with their retention policies and as required for billing and legal purposes.

6. Your Rights and Choices

6.1 Access and Control Your Data

Since your data is stored locally and in your iCloud account:

• View: All your data is visible within the App
• Export: You can view and manually copy your recipes
• Delete: Delete individual recipes, shopping lists, or all data within the App
• iCloud Data: Manage or delete iCloud data via iOS Settings > [Your Name] > iCloud

6.2 iCloud Sync

You can enable or disable iCloud sync:

• iOS Settings > [Your Name] > iCloud > Garlic
• Disabling iCloud keeps your data only on the current device

6.3 Subscription Management

Manage or cancel subscriptions via:

• iOS Settings > [Your Name] > Subscriptions > Garlic

6.4 Delete Your Data

To delete all your Garlic data:

1. In-App: Delete all recipes and clear shopping lists
2. iCloud: Disable iCloud sync for Garlic, or delete the App
3. Uninstall: Deleting the App removes all local data

6.5 Rights for EEA Residents (GDPR)

If you are in the European Economic Area, you have the right to:

• Access: Request information about data we process
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data (“right to be forgotten”)
• Portability: Receive your data in a portable format
• Object: Object to certain processing activities
• Restrict: Request restriction of processing
• Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, contact us at [email protected].

6.6 Rights for California Residents (CCPA)

If you are a California resident, you have the right to:

• Know: What personal information we collect and how it’s used
• Delete: Request deletion of personal information
• Non-Discrimination: Not be discriminated against for exercising your rights

We do not sell personal information. We do not share personal information for cross-context behavioral advertising.

To exercise these rights, contact us at [email protected].

7. Data Security

7.1 Security Measures

We implement appropriate technical measures to protect data during processing:

• Encryption in Transit: All data transmitted uses HTTPS/TLS encryption
• No Persistent Storage: Imported content is processed and not stored on our servers
• Secure APIs: Industry-standard authentication for our processing services

7.2 Device Security

Your local data security depends on your device’s security settings:

• Use a strong device passcode
• Enable Face ID or Touch ID
• Keep your iOS version updated
• Enable iCloud two-factor authentication

7.3 Limitations

While we implement strong security measures, no system is 100% secure. We cannot guarantee absolute security of data transmitted over the internet.

8. Children’s Privacy

8.1 Age Restrictions

Garlic is intended for users 13 years of age and older. We do not knowingly collect personal information from children under 13.

8.2 Parental Guidance

If you are a parent or guardian and believe your child under 13 has used the App, please contact us. Since we don’t collect personal information or require accounts, there is minimal risk, but we will assist with any concerns.

8.3 Teen Users (13-17)

The App is safe for teen users. We do not collect personal identifiers, and content imported is based on URLs the user provides.

9. International Data Transfers

9.1 Processing Locations

When you import a recipe, the URL or image may be processed by servers located in the United States or other countries where our service providers operate.

9.2 Safeguards

For transfers from the EEA, UK, or Switzerland, we rely on:

• Standard contractual clauses
• Adequacy decisions where applicable
• Service provider certifications and compliance programs

9.3 iCloud Data

iCloud data is handled by Apple according to their data processing practices. Apple maintains data in regions according to your account settings and their policies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes:

• We will update the “Last Updated” date
• We may notify you through the App
• Continued use after changes constitutes acceptance

We encourage you to review this policy periodically.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices:

Email: [email protected]

We aim to respond to all inquiries within 30 days.

12. Summary of Data Practices

13. App Store Privacy Labels

In accordance with Apple’s App Store requirements, here is our privacy nutrition label:

Data Linked to You

• Purchases: Subscription status (via RevenueCat)

Data Not Linked to You

• Usage Data: App functionality analytics
• Diagnostics: Crash logs and performance data

Data Not Collected

• Contact Info
• Health & Fitness
• Financial Info
• Location
• Contacts
• User Content (stored locally, not collected by us)
• Browsing History
• Search History
• Identifiers
• Sensitive Info

Your privacy matters to us. If you have any questions, please don’t hesitate to reach out.