Privacy Policy

PromptBite (“PromptBite,” “we,” “us”) makes the PromptBite iOS app — an AI cooking assistant that suggests recipes, builds a grocery cart, and guides you through cooking. This policy applies to the app and to promptbite.app.

1. Information we collect

Account information

PromptBite uses Sign in with Apple. There is no separate email signup or password. When you sign in, we receive an identifier from Apple and the email address you choose to share — which may be Apple’s private relay address rather than your personal email. We use this to create and secure your account.

Information you provide to use the app

• Recipe requests — the text prompts you type (e.g. “quick pasta dinner for 2”).
• Photos you take to Scan ingredients — when you use Cook Vision, the photo is sent for ingredient recognition so the agent can suggest recipes. Photos are processed to detect ingredients and are not used to build an advertising profile.
• Cooking preferences — your allergies, dietary tags, dislikes, prep-level preference, and kitchen equipment. Allergies are used as a safety constraint on every recipe.
• Pantry and saved recipes — the items you add to your pantry and the recipes you save.
• Receipts you forward by email — if you use your PromptBite forwarding address (Profile → Connected accounts), the emails you send it are delivered to a mailbox we operate on Microsoft 365, and their text and image attachments are read by our AI provider so the groceries can be added to your pantry. A forwarded email is processed as a whole, so forward only receipts.
• Your shopping list — what is on your basket, and — when you ask the basket to change something — the list that goes with your instruction.
• Voice input — if you use voice features, speech is transcribed to text so the agent can act on it.

Purchases

If you subscribe to PromptBite Premium, the purchase is processed by Apple through the App Store. We do not receive or store your card number. We use a subscription provider (RevenueCat) to confirm your subscription status so we can unlock Premium features.

Connected services

If you connect Amazon (via Login with Amazon) to place grocery orders, you authorize that connection through Amazon. Your Amazon credentials are handled by Amazon, not by PromptBite. We use the connection to build your cart and hand it off to Amazon for checkout. We never see your prices, payment details, or final order total — those live entirely within Amazon.

Information collected automatically

To keep the app working and diagnose problems, we and our infrastructure providers process basic technical data such as a device identifier, app version, and error/diagnostic logs. We do not sell this data, and PromptBite does not use third-party advertising trackers.

2. How we use your information

• To generate recipes that respect your preferences, allergies, and pantry.
• To recognize ingredients from the photos you Scan.
• To build and refine your grocery cart and hand it off to Amazon.
• To guide you through cooking, including timers and read-aloud steps (the text read aloud is synthesized by ElevenLabs).
• To find or generate a photo for a recipe.
• To read receipts you forward to your PromptBite address, so the groceries land in your pantry.
• To publish recipes you generate to other PromptBite cooks in Discover after a safety check, and to create a public page for a recipe when you choose to share it — in both cases without your name, account, prompt or preferences.
• To manage your account, your subscription, and the free-tier monthly limits.
• To send notifications you’ve enabled (such as cooking-timer alerts).
• To maintain, secure, debug, and improve the app.
• To respond when you contact support.

3. AI processing

We ask first. Before PromptBite sends anything of yours to an AI provider, the app shows you what will be sent and who it goes to, and asks you to agree. Until you do, the app refuses those requests — the check sits in the code that would make the network call, not just on the screen that asks. You can re-read that disclosure, or withdraw your agreement, at any time in Profile → Legal & privacy → AI & your data; withdrawing stops further sending.

PromptBite is built on AI, and we use more than one provider. Anthropic — the company that makes the Claude models — is the main one: your recipe prompts and follow-up questions, the photos you scan or choose from your photo library, the relevant parts of your cooking preferences and pantry, the shopping list you send with a basket instruction, and any receipt you forward to your PromptBite address are sent there to generate recipes, answer cooking questions and recognize ingredients. Anthropic processes this content to return a result and, under our business terms, does not use it to train its models on your data.

Three other AI services support specific features, and they receive recipe output rather than your prompts, photos or profile:

• ElevenLabs — when you cook hands-free, the recipe step or answer text being read aloud is sent there so the narration voice can be synthesized.
• Google (Gemini) — when a recipe has no photo, its title, category and ingredient list are sent there to render one.
• Tavily — when you ask for a specific named dish, that dish name is searched on the web so the recipe can cite real sources. If you asked for a version of it (for example “dairy-free tiramisu”), that qualifier is part of the search.

AI can make mistakes. As noted in the app, always read a recipe’s ingredients yourself if you have an allergy — PromptBite is not designed or marketed as medically safe for severe allergies.

4. How your information is shared

We do not sell your personal information. Apart from Apple, which operates Sign in with Apple and App Store billing in its own right, we share your information only with service providers that operate the app on our behalf, and only as needed to provide it:

• Apple — Sign in with Apple, App Store subscription billing, and push notifications.
• Supabase — our backend and database host, which stores your account data, preferences, pantry, and saved recipes.
• Anthropic — AI processing of recipe prompts, cooking questions, scanned and picked photos, preferences, pantry, shopping list, and forwarded receipts (see §3).
• ElevenLabs — text-to-speech for recipe steps and assistant answers read aloud during hands-free cooking.
• Google (Gemini) — generating a photo for a recipe from its title, category and ingredient list.
• Tavily — web search used to ground a recipe for a specific named dish; receives the dish search query.
• Pexels — stock photo search used to find a photo for a recipe; receives the dish name only.
• Microsoft (Microsoft 365 / Graph) — hosts the mailbox that receives grocery receipts you forward to your PromptBite address.
• RevenueCat — subscription status management.
• Amazon (product catalog) — we send ingredient names, pantry item names and scanned barcodes to Amazon’s product catalog to find product photos and matching cart items. This happens whether or not you connect an Amazon account.
• Amazon (Login with Amazon / Amazon Associates) — grocery cart assembly and checkout, only if you connect it.
• Mercato — only if you choose to shop a local store through it; your session with Mercato is yours and stays on your device.

The standard we hold them to. Every provider listed above other than Apple is engaged as our service provider under terms that require them to protect your information to at least the same standard set out in this policy and required by the App Store Review Guidelines: to process it only on our instructions and only for the purpose described next to their name, to keep it secure, not to sell it, and not to use it for their own purposes. Apple is not our service provider — it operates Sign in with Apple and App Store billing under its own privacy policy.

Recipes you share. When you tap Share on a recipe, we create a public web page for it so the link you send can be opened by anyone who has it. The page carries the recipe only — not your name, your account, your prompt, or your preferences. Recipes generated in the app may also, after a safety check, be published to other PromptBite cooks in Discover, again without anything that identifies you.

We may also disclose information if required by law, to protect our rights or users’ safety, or in connection with a business transfer such as a merger or acquisition.

5. Data retention

We keep your account data for as long as your account exists. Scan photos are retained only as long as needed to return ingredient results and support the feature, and are not used to build an advertising profile. When you delete your account, we delete or de-identify the personal data associated with it, except where we must retain certain records to meet legal, tax, or security obligations.

6. Your choices and rights

• Edit your data — update your allergies, diet, dislikes, pantry, and saved recipes any time in the app.
• Notifications — turn notifications on or off in Profile → Notifications or in iOS Settings.
• Camera and microphone — Scan and voice features ask for permission; you can revoke access in iOS Settings at any time.
• Subscriptions — manage or cancel Premium in iOS Settings → your name → Subscriptions.
• Delete your account — you can delete your PromptBite account and its data from inside the app at any time: Profile → Legal & privacy → Delete my account. This removes your profile, preferences, pantry, and saved recipes, and it can't be undone. You don't need to contact us to do it.
• AI processing — PromptBite asks for your permission before sending anything to our AI provider, and you can review or withdraw that permission at Profile → Legal & privacy → AI & your data (see §3).
• Access your data — email us at hello@promptbite.app to request a copy of your personal data.

Depending on where you live (for example, the EEA/UK or California), you may have additional rights to access, correct, delete, or port your data, and to object to certain processing. Contact us to exercise them — we won’t discriminate against you for doing so.

7. Children

PromptBite is not directed to children under 13 (or the equivalent minimum age in your country), and we do not knowingly collect personal information from them. If you believe a child has provided us data, contact us and we’ll delete it.

8. Security

We use industry-standard measures — including encryption in transit and access controls on our backend — to protect your information. No method of transmission or storage is completely secure, but we work to protect your data and to limit who can access it.

9. International users

PromptBite is operated from the United States, and our service providers may process data in the United States and other countries. By using the app, you understand your information may be transferred to and processed in countries with different data-protection laws than your own.

10. Changes to this policy

We may update this policy from time to time. When we make material changes, we’ll update the “Last updated” date above and, where appropriate, notify you in the app. Your continued use of PromptBite after an update means you accept the revised policy.

11. Contact us

Questions about this policy or your data? Email hello@promptbite.app and we’ll get back to you within one business day.