← Llamas Cookbook

Privacy Policy

Effective May 4, 2026

Who we are

Llamas Cookbook is an iOS app published by Lorenzo ("we", "us"). This policy explains what happens to your data when you use the app, in plain language. If anything below is unclear, email ltlasian@gmail.com and we'll fix the wording.

What data the app handles

Your recipes, photos, and cooking history

Every recipe you create or import lives in a database on your iPhone (Apple's SwiftData). Recipe photos are stored alongside it on your device. We never see this data. Apple never sees this data. If you delete the app, this data is deleted too.

Sign in with Apple

When you sign in, Apple gives the app a stable opaque identifier (the "sub") and, on first sign-in only, the first name you chose to share. The identifier and name are stored in your iPhone's Keychain so they survive reinstalls. We never send these to any server we run. We use Apple's revocation check on app launch so that if you revoke our app's access from iOS Settings, the app drops back to signed-out automatically.

Your iCloud account (CloudKit)

When you share a recipe with a friend or your friends look at your library, the data is stored in Apple's CloudKit using your own iCloud account. This means:

• Your recipe shares, friend connections, and friends' library mirror live in your iCloud — under Apple's privacy policy and inside Apple's infrastructure.
• We can read public records you create (recipe shares, your public profile, friendship records) only because they're public to anyone who knows the record ID. We don't compile, mine, or aggregate them.
• If you delete your account in the app, we delete every record we can find that you created in CloudKit — friend connections, published recipes, recipe shares, import audit rows, and your public profile.

Camera

The app uses your iPhone's camera only when you tap "Import from Photo" to scan a recipe page. The captured image stays on your device — it isn't uploaded to us or anyone else. Image text recognition runs on-device using Apple's Vision framework.

Notifications and alarms

Cooking timers ring through Apple's AlarmKit, which lets the alert reach your lock screen and through Silent mode. The alarm content stays on your device. We use silent CloudKit push notifications to know when a friend sends you a friend request or imports one of your recipes — these are routed through Apple's APNs and don't carry message text.

Recipe imports from the web

When you paste a recipe URL, the app fetches the page directly from your iPhone (Safari user agent) to read its public structured data and OpenGraph tags. We don't proxy these fetches through our servers. If you import from TikTok, the app calls TikTok's public oEmbed endpoint — same direct connection. The fetched bytes are processed on-device and discarded once the recipe draft is ready.

Recipe share preview pages

When someone taps a Llamas Cookbook recipe link in a chat app, the chat app's link-preview scraper visits a small page hosted on Cloudflare Pages (llamascookbook.pages.dev). That page reads the recipe title and first photo from CloudKit so the chat bubble can show a preview. The preview pages are cached at the edge for an hour. We don't log who visits them beyond the standard Cloudflare request logs Cloudflare maintains for any site they host.

What we don't do

• No third-party analytics SDKs (no Firebase, Mixpanel, Sentry, Amplitude, etc.).
• No advertising. No ad networks. No ad identifiers.
• No tracking across apps or websites.
• No selling or sharing of your data with third parties for marketing.
• No location services. No contacts access. No microphone. No health data.
• No background data collection.
• No user accounts on a server we operate. There is no "Llamas Cookbook server" holding your data.

Friend features and what's visible to others

When you accept a friend request, your friend can see what's visible by design: your display name, accent color, recipes published from your library, and a small "currently cooking" indicator while you have an active cook. They cannot see your private notes, the recipes you haven't published, or your cooking history beyond the most recent item. You can remove a friend at any time, which deletes the friendship record from CloudKit.

Children's privacy

Llamas Cookbook is rated 4+ and does not knowingly collect personal information from anyone, including children under 13. The app is suitable for all ages. If you believe a child has used the app and you'd like their local data deleted, simply delete the app from the device.

Account deletion

To delete your account:

• Open the app, tap the profile button, then tap "Delete Account."
• The app immediately wipes your local identity (Apple sub, display name, friend list cache, etc.).
• The app then deletes every CloudKit record we can find that you created — friend connections, published recipes, recipe shares, import audit rows, and your public profile.
• If your network is unreliable during deletion, the app retries the cleanup on every subsequent launch until your records are gone.
• If you also delete the app from your device, all local data goes with it.

You can also revoke Sign in with Apple from your iPhone's Settings → Apple Account → Sign in with Apple → Llamas Cookbook → Stop Using Apple ID. The app will drop you back to signed-out the next time you launch it.

Changes to this policy

If we change this policy in a way that affects what happens to your data, we'll update the "Effective" date above and call out the change in the app's release notes for the version that ships with the change. Past versions of this policy will be available on request.

Contact

Privacy questions, deletion requests, or anything else about this policy: ltlasian@gmail.com.