Privacy

Bashlu is a recipe app. It keeps the least it can and tells you plainly what that is.

What is stored, and why

• An account. The app creates one on first launch without asking you for anything — no email, no name. It exists so your lists and plan survive a restart. If you later add an email address, it is used to send you a sign-in code and nothing else.
• What you cook. Your saved recipes, your weekly plan, your shopping lists and the recipes you import. This is the content of the app; without it there is no app.
• Your preferences. Allergens, diets, kashrut, language, theme, text size and the city you shop in. Allergens and diets are used to filter what you are shown.
• A city and a radius, if you enter them, to find supermarket branches near you. The app does not read your device location in the background.

What is not stored

• No advertising identifiers, and no data sold or shared with advertisers.
• No video or audio from an imported link. A recipe imported from a video keeps the structured recipe and the original URL; the media itself is never retained.
• No payment card details. Purchases go through the app store, which we never see.

Who else sees it

Supermarket prices come from publicly published price files; no request identifies you to a supermarket. Recipe import uses a language-model provider, which receives the page or transcript being imported and no account information. Crash and error reports, when they are switched on, contain a stack trace and no recipe content.

Deleting everything

The app has a delete button in the profile, and this site has one too — see Delete your account. Deleting removes the account, its profile, plan, lists and saved recipes. It cannot be undone, and it does not wait for a support ticket.

Children

The app is not directed at children under 13 and does not knowingly keep data about them.

Asking about any of this

Write to [email protected]. You can ask for a copy of what is held about you, or for it to be corrected or erased.