Privacy Policy

1. Who we are

MyFudi (“MyFudi,” “we,” “us,” or “our”) is the operator of the MyFudi mobile application (the “App”) and the website at myfudi.app. MyFudi is an independent project based in the United States and is not yet incorporated as a separate legal entity. For all privacy matters, the responsible party is reachable at support@myfudi.app.

This Privacy Policy explains what information we collect from you when you use the App or visit the website, how we use it, who we share it with, and the choices you have. By using MyFudi you agree to the practices described below.

2. Information we collect

2.1 Information you create inside the App

The App is designed so that the substance of what you do — your saved recipes, your profile preferences, your meal logs, your cooking sessions — stays on your device. Specifically, the following data is created and stored locally:

• Profile: dietary restrictions, allergies, goals, macro targets, cooking skill level, preferred cuisines.
• Recipes: recipes you create, paste, import, or have converted; ingredients, steps, nutrition, tags, and any notes.
• Cooking sessions: active timer state, current step, conversation history with the cooking assistant for that session.
• Meal plans and grocery lists you create.

We do not require you to create an account. The App does not collect your name, email address, phone number, location, contacts, photos library, or device identifiers for marketing or tracking purposes.

2.2 iCloud sync (Apple CloudKit)

If you are signed into iCloud on your device, the App uses Apple CloudKit to sync the data above privately across devices signed into the same Apple ID. This sync is operated by Apple. The data is encrypted in transit and at rest by Apple, and MyFudi cannot read it. We do not have a server-side copy of your CloudKit-synced data.

2.3 Recipe text sent for AI processing

When you ask the App to convert a recipe, generate a new recipe, or ask the cooking assistant a question, the relevant text — the recipe you submitted, the question you asked, and minimal context such as your stated dietary preferences — is sent over HTTPS to our backend, hosted on DigitalOcean in the United States. Our backend forwards that text to Anthropic, PBC (the Claude API) for processing, and returns the response to the App.

We do not attach a user ID, email, name, or device identifier to these requests. Anthropic processes the content under their commercial API terms and does not use API inputs to train their models by default. See Anthropic's privacy policy for details.

2.4 Microphone and speech recognition

The Cooking Assistant lets you control the App with voice (“next step,” “start timer,” etc.). When you start a hands-free cooking session and grant microphone access:

• Audio is processed by Apple's on-device or server-side Speech Recognition framework, depending on device capability. This is Apple's service, not ours. See Apple's speech recognition privacy notice.
• The recognized text may be passed to Claude (see §2.3) only when you ask the cooking assistant a question. Voice transcripts that simply trigger navigation commands stay on the device.
• MyFudi does not record, store, or transmit raw audio.

2.5 Server logs

Our backend keeps short-lived operational logs to keep the service running and prevent abuse. These logs may include:

• IP address of the request
• Timestamp
• HTTP method and path (e.g., POST /api/convert)
• Approximate response size and status code
• A truncated user-agent string

We do not log recipe content, conversation content, or anything that would identify you personally. Logs are retained for up to 30 days and are used only for debugging, capacity planning, and rate-limiting.

2.6 USDA nutrition lookups

The App calls the U.S. Department of Agriculture's FoodData Central API to look up nutrition information for ingredients. These requests include only the ingredient name being searched — never personal information. The USDA API is a U.S. government service; see their privacy policy.

2.7 TestFlight (beta only)

While MyFudi is distributed through Apple TestFlight, Apple collects basic information from beta testers (Apple ID-associated tester email, install counts, crash reports, and any feedback you choose to send via TestFlight). This is governed by Apple's TestFlight terms. We see your tester email and any TestFlight feedback you send us, and nothing more.

2.8 Website (myfudi.app)

Our website is a static page. It does not set tracking cookies, run analytics scripts, or load third-party fonts that identify you. Standard server access logs (as in §2.5) apply.

3. How we use information

We use the information described above only to:

• Provide the App's core features (convert/generate recipes, look up nutrition, answer cooking questions, run timers).
• Sync your own data to your own iCloud across your own devices.
• Keep the backend running, debug errors, and prevent abuse.
• Reply to you when you contact us at support@myfudi.app.

We do not use your data to advertise, profile you, build third-party audiences, or train AI models. We do not sell or rent your data.

4. Third-party services we rely on

MyFudi uses a small set of vendors strictly to operate the App. None of them receives data for marketing purposes.

• Apple Inc. — App distribution, TestFlight beta, iCloud / CloudKit sync, on-device and server-side Speech Recognition, on-device Text-to-Speech.
• Anthropic, PBC — Claude AI API for recipe conversion, generation, and cooking-assistant Q&A. Receives the text of the recipe or question you submit; no user identifier.
• U.S. Department of Agriculture — FoodData Central API for verified nutrition lookups. Receives ingredient names only.
• DigitalOcean, LLC — Hosts our backend proxy server (api.myfudi.app). Receives standard request metadata as part of routing.

5. Data retention

• On-device data: retained as long as the App is installed. Delete the App or use the “Reset” option in Profile to wipe it.
• iCloud-synced data: retained by Apple per your iCloud settings. You control it via Settings → Apple ID → iCloud → MyFudi.
• Backend access logs: up to 30 days.
• Anthropic-side data: handled under their commercial retention terms; we do not store conversation transcripts on our side.

6. Your choices and rights

Because almost all of your data lives on your device and in your iCloud, you are in direct control. You can at any time:

• Delete individual recipes, meal plans, or profile data inside the App.
• Reset the App from Profile → Reset to wipe all local data.
• Disable iCloud sync at Settings → Apple ID → iCloud → MyFudi.
• Revoke microphone or speech-recognition permission at Settings → MyFudi.
• Delete the App. All on-device data is removed by iOS.

If you're in the EU, UK, or California, you have additional statutory rights (access, correction, deletion, portability, objection). Email support@myfudi.app and we will respond within 30 days. Since we don't hold an identifying server-side copy of your data, most requests are fulfilled by helping you reset on-device or iCloud state.

7. Security

All network traffic between the App, our backend, and third-party APIs uses HTTPS (TLS 1.2+). The backend is hosted on hardened DigitalOcean infrastructure with automatic SSL via Caddy. We do not store credentials, and we hold no user accounts on our servers.

No system is perfectly secure. If you believe you've found a vulnerability, please report it to support@myfudi.app. We'll get back to you quickly.

8. Children

MyFudi is not directed at children under 13 and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, email us and we will delete it.

9. International users

MyFudi is operated from the United States. If you use the App from outside the U.S., your information may be processed in the U.S. and other countries where our vendors operate. By using MyFudi, you consent to such transfers.

10. Changes to this policy

We may update this Privacy Policy from time to time as the App evolves. We will update the “Last updated” date at the top, and for material changes we'll surface a notice in the App or on the website. Continued use after the update means you accept the revised policy.

11. Contact us

Questions, requests, or concerns?
support@myfudi.app

This document is intended to be readable. It is not legal advice and does not create a contract on its own. The App is governed by its own Terms of Use where applicable.