Krelo Privacy Policy

Effective October 18, 2026

Krelo is built to keep most of your data on your device. Friend profiles use an anonymous device session; there is no email or password sign-in and no advertising trackers.

What stays on your device

Your fridge inventory, saved recipes, scan history, shopping lists, meal plans, food log, calorie and macro goals, body details (such as age, height, and weight), and preferences (diet, allergies, health goals) are stored locally on your phone. Your calorie and macro targets are calculated on your device from the details you enter — those body details are never sent to our servers. We do not operate user accounts and cannot see this data.

What our servers process

To provide app features, some requests pass through our server (Cloudflare) without any account identity attached:

• Product lookups. Barcodes you scan are looked up against Open Food Facts and a USDA-derived product database. A barcode identifies a product, not you.
• Recipe and text generation. When you ask Krelo for recipe ideas or a recipe, import a post, estimate a recipe's nutrition, describe a food to estimate its calories and macros, or open additive details, the text involved (which can include the ingredients you pick and your dietary preferences, allergies, and health goals, so results fit them) is processed by a third-party AI provider via our server (currently Google's Gemini models, reached through OpenRouter; we may use DeepSeek instead). An imported post is organized into ingredients and steps as its creator wrote them. When you import a TikTok, Instagram or YouTube video, our server fetches that public video and sends it to the same AI provider so Krelo can write down the recipe the creator says and shows in it; the video is not stored, and nothing about you is sent with it. The written-down recipe is cached by video, not by you. These requests carry no name, email, or account ID.
• Dish photos. Photos for Krelo's own recipes are made from the dish's name by a third-party image service (currently Replicate and OpenAI) and shared by everyone who opens that dish. Nothing about you is sent.
• Photo scanning and meal plan import. Only if you allow it in the app, photos you take with the Ingredients or Meal scanner, and the pictures or text of a meal plan you choose to import, are sent via our server to a third-party AI provider (currently Google's Gemini models, reached through OpenRouter; we may use Anthropic's Claude instead) to identify the food, estimate its nutrition, or copy the plan into your week. Our server does not store these photos or plans, and they carry no name, email, or account ID. You can turn photo scanning off at any time in App Preferences.
• Caching and abuse protection. Generated results may be cached on our servers (keyed by the request content, not by you) so identical requests are faster for everyone. Your IP address is used transiently for rate limiting and is not stored beyond roughly ten minutes.

Purchases

Subscriptions are processed by Apple. We use RevenueCat to validate purchases; it receives Apple's purchase receipt and a random anonymous app identifier — never your name or payment details, which stay with Apple. If you start the Krelo Creator Pass from a creator's page, RevenueCat also records which creator that was, so they can be paid their share. To open bonus recipes, the app sends that anonymous identifier to our server, which asks RevenueCat whether the pass is active and remembers the answer for a few minutes.

Creators

If you apply to be a Krelo creator, we store what you submit — your creator name, handle, platform, public profile link, and bio — along with the recipes you approve, so your public profile and recipes can appear in Krelo, and a random sign-in token for Creator Studio. Email us to have your creator profile and recipes removed.

If you connect TikTok in Creator Studio, TikTok gives Krelo a sign-in token (never your password) that lets it list your public videos — their titles, captions, covers, view counts, and links — so you can choose which ones to turn into recipes. We keep the token, your TikTok display name, and your profile photo link, and use them only for that list. Disconnect in Creator Studio at any time and the token is deleted.

Friends

If you turn on a cook profile, we store the name, handle, bio, profile photo (if you add one), follows, blocks, and plates you deliberately share, plus a short log of who followed you or shared a list with you and when, so Krelo can show your notifications, tied only to a random device token. We do not upload your email, contacts, pantry, body details, nutrition goals, private food log, or unshared plates. Other Krelo cooks can find you by your name or handle and see your bio and profile photo. People become friends only after following each other; shared plates are visible only to those friends. Reports are kept for safety. You can request deletion by email.

Shared recipes

When you share a personal or imported recipe link, we store a copy of that recipe's title, ingredients, steps, cooking times, nutrition estimates, and public source and photo links so the recipient opens the same recipe. Anyone with the link can read it. Local photos, private account details, and your other saved recipes are not uploaded. Public creator recipes link to their approved recipe instead of making a separate copy.

Shared lists

If you share your grocery list or meal plan, its items (for example "Milk", or the name, calories, and photo link of a planned recipe) are stored on our server so everyone on the list sees the same thing. Only the people on that list can see or edit it, and only friends can be added — or someone you send an invite link to, who becomes your friend when they accept it. Anyone can leave a shared list, and when its owner stops sharing it, the server copy is deleted. Your own phone keeps its copy either way.

Reviews

If you rate or review a recipe, your stars, what you wrote, and your cook profile's name, handle, and photo are shown to other Krelo cooks who open that recipe. You can edit or delete your review at any time, and reviews can be reported.

Camera

Barcode scanning happens on your device, and no image leaves your phone. Photos are uploaded only when you use photo scanning with your permission, as described above, and our server does not store them.

What we never do

We don't sell data, run third-party ads, use advertising trackers, or collect analytics tied to your identity.

Health disclaimer

Scores and nutrition information are informational only and are not medical advice.

Data deletion

Deleting the app deletes the data stored on your device. Anonymous cook profiles and their photos, deliberately shared plates, recipe reviews, shared lists you haven't stopped sharing, creator profiles, and safety reports remain on our server until you ask us to delete them; email us with your handle. Server caches otherwise contain no personal identifiers and expire automatically.

Contact

Questions? Email getkrelo@gmail.com.