Privacy Policy
Kevi's Kitchen is an app for meal plans, recipes and shopping lists. It is built so that your data stays with you. This policy explains what data is processed — and what is not.
No data collected by the developer
The developer of Kevi's Kitchen does not collect, store, sell or share any personal data. There is no account, no analytics, no tracking, no third-party crash reporting and no advertising. A developer-operated server is only used when you choose to submit a recipe to the community catalog (see below).
Your content
Meal plans, shopping lists, your own recipes, photos and your diet and allergy settings are stored only on your device. Photos you take with the camera or pick from your library are used only for your recipes and only leave the device if you submit a recipe with a photo yourself. Cooking timers use local notifications; nothing is transmitted.
New recipes from the recipe catalog
The app downloads new recipes and photos from a public recipe catalog hosted on GitHub and delivered through the jsDelivr content delivery network. Data is only downloaded; the app sends no content with these requests. As with any web request, the CDN provider technically sees your IP address. The app uses no cookies and no cache for these requests. You can turn off automatic recipe updates in Settings.
Household: planning and shopping together (optional)
If you start a household or accept an invitation, meal plans, meals (including your own recipes, without photos) and shopping lists are shared with the invited people through Apple iCloud (CloudKit). The data is stored in the private iCloud database of the person who started the household and shared with its members through an iCloud share. It is subject to Apple’s privacy policy. The developer cannot access this data.
Household members can see each other’s iCloud name or the email address or phone number used for the invitation. You send the invitation yourself through a channel of your choice (e.g. Messages or Mail). Without a household, no data is sent to iCloud.
Apple Watch
If you use the Apple Watch app, the iPhone sends the current shopping list directly to your own paired Apple Watch (WatchConnectivity). Ticked-off items go back to the iPhone the same way. No data is sent to the developer, to iCloud or to any other server.
Sharing recipes
Recipes you share as a file (e.g. via AirDrop or a messenger) are sent by you through the service you choose.
Submitting recipes to the community catalog (optional)
With “Submit to community” you can propose one of your own recipes for the public catalog. This only happens when you start it yourself and first confirm that the recipe and photo are your own, contain no personal data and are released under the CC0 license.
What is sent: the recipe (in your language and, if the translation works, in German or English), an optional photo, the app version and your consent. The translation is done on your iPhone with Apple’s translation feature. No name, no account and no device data are sent. The data is sent encrypted (HTTPS) to a server operated by the developer at recipes.goongorke.de.
Abuse protection: To make sure only genuine installations of the app can submit, the app uses Apple’s App Attest service. For this, the server stores one random key per app installation that is not linked to you, plus the number of submissions on the current day (for a daily limit). Keys not used for 90 days are deleted. Your IP address is processed technically for the connection and for short-term request limiting in memory, but it is not stored. The server stores no recipes and logs no content.
Publication: The server creates the recipe as a proposal (pull request) in the public catalog repository on GitHub. Photos are re-encoded and stripped of metadata such as location and camera. The proposal is publicly visible on GitHub before it has been reviewed. The author is set to “Kevi's Kitchen Community”. After review by the developer, the recipe is either added to the catalog or rejected. Published recipes stay in the catalog and its version history permanently, as anyone may use them freely under CC0. GitHub’s privacy policy applies to GitHub.
The legal basis is your consent (Art. 6(1)(a) GDPR) and the legitimate interest in a service protected against abuse (Art. 6(1)(f) GDPR). If a submitted recipe does contain personal data, contact the address below and the proposal will be removed.
Reporting recipes
“Report recipe” opens a prepared email in your mail app. It is only sent if you send it yourself. Your email address and message are only used to handle the report and are deleted afterwards.
Data deletion
You can delete your data at any time by deleting plans and recipes in the app or by removing the app. When you end a household (“Stop sharing”), the shared data is deleted from your iCloud. Members can leave a household at any time. Plans already on a device stay there as local data until they are deleted.
Contact
For privacy questions: report@goongorke.de