Privacy Policy
Effective 27 June 2026
The short version: Brasa has no accounts, shows no ads, runs no analytics or tracking, and does not sell your personal data. Your recipes are yours. Questions? privacy@brasa.recipes
Who we are
Brasa is developed by Andrew Chilvers ("we", "us"). This policy covers the Brasa app and its extensions (the Share extension, widgets, and Quick Look thumbnails).
What Brasa stores, and where
Brasa stores the recipes you capture or create — titles, ingredients, steps, notes, times, images, meal plans, shopping lists, and pantry items — in two places:
- On your device, in the app's private storage.
- In your private iCloud account, using Apple's CloudKit, so your library syncs across devices signed in to the same Apple ID.
This data lives in your iCloud private database. We have no server that stores your recipes, and we cannot see your library. iCloud sync is handled entirely by Apple under Apple's Privacy Policy. You can turn iCloud sync off in your device's iCloud settings.
What gets sent off your device, and to whom
Some features send content off your device to process it. In every case the content is used only to complete the task you asked for, in real time, and is not stored by us or used to build a profile of you.
- Recipe capture from a web page or photo. Brasa first tries to read a page's built-in structured recipe data on-device. If that isn't available, it sends the page text — or the text read from your photo/screenshot on your device — to an AI model to extract the recipe. Only the text is sent, not the photo.
- Pantry and fridge scan. If you use the pantry feature, the photos you take of your fridge or pantry are sent for AI analysis to identify the items in them. In this case the image itself is sent.
Both pass through our processing service (a Cloudflare Worker) to Google's Gemini API. Our service does not log or store the request content. Because Brasa uses Gemini's paid tier, Google does not use the content you send or the responses to train or improve its models; Google retains them only briefly for security and abuse prevention. See Google's API terms.
Discover search. If you search for recipe sources in Discover, the query is sent (through the same service) to the Brave Search API. See Brave's Privacy Policy.
Abuse prevention. Production app requests to our processing service may include an Apple DeviceCheck token so the service can verify the request came from a genuine Brasa app before forwarding it to Gemini or Brave Search. We use this only for authentication, rate limiting, and abuse prevention — not for tracking, advertising, or building a profile.
We do not attach your name, Apple ID, email address, or any Brasa account to these requests — we have no account system to attach.
Device permissions
Brasa requests these only when you use the related feature:
- Camera — to photograph a printed recipe, or your fridge/pantry.
- Photo Library — to pick a recipe photo or screenshot to import.
- Reminders — to add shopping-list items to a Reminders list, if you choose.
- Calendar — to mirror your planned meals to a calendar, if you choose.
Recipe photos are read into text on your device, and only the text is sent for AI processing. Pantry/fridge photos are sent as images for the pantry scan, as described above. You can change or revoke any permission in the iOS Settings app.
What Brasa does not do
- No user accounts or sign-up.
- No advertising and no ad networks.
- No analytics, telemetry, or usage tracking.
- No third-party tracking SDKs.
- No selling or sharing of your data with data brokers.
Data retention and deletion
Your recipes remain until you delete them. Deleting a recipe removes it from your device and, through iCloud sync, your other devices. To remove everything, delete the app and remove its data from iCloud (Settings → your name → iCloud → Manage Account Storage). Content sent for AI processing is transient and is not retained by us. Our processing service is configured not to log request bodies such as recipe text, OCR text, pantry photos, or search queries.
Children
Brasa is not directed at children and does not knowingly collect information from children.
Third-party services we rely on
- Apple iCloud / CloudKit — sync and storage of your library in your private iCloud account. Privacy Policy
- Cloudflare — the processing service that relays AI and search requests. Privacy Policy
- Google Gemini API — recipe extraction and pantry detection (paid tier; not used for model training). API Terms
- Brave Search API — Discover search results. Privacy Policy
Changes to this policy
If we change this policy we will update the date at the top and post the new version at the same address. Significant changes will be noted in the app's release notes.
Contact
Questions about privacy or this policy: privacy@brasa.recipes.
Terms for using Brasa are available in the Terms of Use.