Spoontaneous

Privacy policy

Last updated: October 25, 2026

Who we are

The data controller is the operator of Spoontaneous. For any privacy question, email ciao@spoontaneous.app.

What data we use and why

• Account: email and name, or your “Sign in with Apple” identifier. Used to save your data and restore it on another phone.
• Profile: age, sex, height, weight, activity, goal. Used to calculate calories and portions. Weight and goals are health data: we only process them with your explicit consent, given at the start and withdrawn by deleting your account.
• Preferences: diet, allergies, excluded ingredients, cooking time and equipment. Used to suggest only recipes that suit you.
• App use: menu, logged meals, weigh-ins, water, pantry, shopping list, recipes you save or create.
• Photos of your recipes: stay on your phone only and are not uploaded to our servers.
• Receipt prices: if you photograph a receipt we store product, store, price and date to estimate your shopping. Other users only see anonymous averages per product, never who bought what, where or when.
• Shared household (“for two”): if you invite someone, you share the menu, portions, names and calorie targets. Each person’s health data (weight, measurements) stays personal.

Photos and recipe assistant

When you photograph your fridge, a receipt, a plate or a menu, the photo goes through our server to Anthropic’s AI service only to recognise the food. We don’t keep the photos. The same goes for recipe assistant requests: we only send the recipe constraints (meal, diet, allergies, rough calories, time, your idea and your pantry products), never your name, age, weight or other profile data. Under Anthropic’s commercial terms, data sent through its API is not used to train its models.

Barcodes and public prices

When you scan a barcode or search for a branded product, your phone asks Open Food Facts and Open Prices, public databases. We only send the product code or name; like any website, the service sees the request’s IP address.

Apple Health and notifications

If you connect Apple Health, we read activity and weight to adjust your calories; we never write to Health. Reminders are local notifications created on your phone.

Subscriptions

Purchases are made with your Apple account: we never see payment details. To manage subscriptions we use RevenueCat, which receives an anonymous account identifier and the purchase status.

Who processes data for us

• Supabase (database and sign-in), servers in Frankfurt, European Union.
• Anthropic (photo recognition and recipe assistant), in the United States, with GDPR transfer safeguards (standard contractual clauses).
• Apple (Sign in with Apple, purchases, notifications), RevenueCat (subscriptions), Open Food Facts / Open Prices (product data).

We don’t sell or share your data with anyone for advertising or profiling.

How long

We keep your data while you have an account. If you delete it (Settings → “Delete account and data”) we delete your data from our servers; only anonymous price averages remain, which can’t be linked to you. Technical cost logs (with no content) last up to 12 months.

Your rights

You can access, correct, delete, restrict, object to or port your data: many of these you can do directly in the app (Settings → “Export my data”, “Delete account and data”). For anything else, email ciao@spoontaneous.app. We process data under the Swiss Federal Act on Data Protection (FADP) and, for people living in the European Union, under the GDPR. You can complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC, edoeb.admin.ch) or to the authority in your country (in Italy, the Garante per la protezione dei dati personali).

Minimum age

Spoontaneous is meant for people aged 16 and over.

This website

spoontaneous.app uses no cookies, no analytics and no ads, and serves its fonts from its own server.

Changes

If we change this policy we update the date above and, for important changes, tell you in the app.